$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa File: ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa (raw, json) Hash identifier: 4v+g2MqlH8CUWXzOMbXAUPdvL9c04UuIT9qYkKf+sfw= Subject key identifier: B2:4F:38:D0:0E:FC:BB:2F:72:38:9B:E7:80:15:09:3B:84:9B:E2:1D Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584E90BA5768102BCC7E1B740C20 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa Signing time: Mon 20 Jul 2026 21:00:11 +0000 ROA not before: Mon 20 Jul 2026 21:00:11 +0000 ROA not after: Sun 18 Oct 2026 21:00:11 +0000 asID: 55256 IP address blocks: 158.95.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:90:ba:57:68:10:2b:cc:7e:1b:74:0c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jul 20 21:00:11 2026 GMT Not After : Oct 18 21:00:11 2026 GMT Subject: CN=6f6d02f8-8d20-4641-ba17-0c0112f08527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:a1:ac:b4:c9:cc:35:f7:4d:b6:10:cf:49:9d: 4c:12:90:4a:95:2e:56:dc:40:05:ef:d9:6e:48:51: ef:75:b3:b6:23:ed:75:ab:b7:40:5d:23:b2:df:2d: 55:45:33:3c:9e:09:2f:c3:74:14:43:a6:08:7d:f9: c4:c3:0f:26:b2:31:00:e6:86:8c:6d:d5:bd:82:91: 95:a5:68:e6:8f:c2:b7:4a:12:56:4d:7a:36:04:d1: 35:2b:2f:d2:f7:64:26:26:cd:7b:61:0f:26:db:2a: 8a:aa:75:85:8c:74:e9:b0:59:42:6f:23:9d:83:83: 65:90:9a:4b:09:96:59:4a:69:29:aa:e7:47:e8:fe: e7:88:29:06:d2:b7:61:fa:48:53:80:a5:24:26:8f: 69:77:3b:a6:7b:77:fe:c9:86:35:d1:bc:33:a3:42: 0a:87:55:6f:c8:d6:57:d0:7a:9e:f1:fd:b4:ee:2f: 94:1d:5c:f5:88:10:d1:ec:d9:c5:b9:df:67:c9:94: 86:4c:95:ee:75:ec:09:10:30:40:38:20:27:80:37: 9d:2a:1f:29:b7:8a:4e:aa:a6:26:63:da:42:95:91: 8e:e3:ba:d2:9f:eb:2d:0d:08:d4:22:0d:d2:49:de: 4d:30:34:2c:12:02:1e:64:b7:60:1f:62:86:76:fd: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4F:38:D0:0E:FC:BB:2F:72:38:9B:E7:80:15:09:3B:84:9B:E2:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/ffaa25ad-b7a2-3847-b743-86fe47ea6a8d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:56:0e:d7:fe:87:cd:c7:29:db:83:e6:91:21:8a:e1:a7:9d: 1f:37:6a:ee:d1:99:1c:e8:3f:03:da:05:4c:46:dc:b0:c2:4d: 44:66:be:95:9d:1a:01:e4:55:f4:5f:4c:3a:6e:24:d7:39:34: 1f:10:c5:d3:3d:d3:44:67:0e:48:f9:5b:1b:71:35:d7:7f:ca: fd:b5:47:1a:49:d2:47:4b:01:f2:6f:29:a7:87:fc:fc:25:b4: 46:99:6f:12:ef:23:fa:14:22:ad:76:4e:4f:d0:60:51:d9:e9: f0:9f:e4:31:9a:b5:63:15:03:ec:56:2c:07:65:6b:65:06:99: af:87:0a:b3:8b:02:70:24:32:65:52:3f:8f:36:23:fa:f9:e8: 61:c1:86:fc:66:22:cf:5a:d4:16:c1:1f:7c:21:80:7e:39:f6: e7:9a:36:33:07:2c:71:bc:c8:f2:9d:de:c1:e3:f2:62:60:91: 4e:08:04:68:90:ad:0f:c6:b2:97:6c:21:66:36:64:62:b6:fe: 94:cc:9e:23:66:e8:f7:40:d0:3f:f8:31:d7:d4:7e:39:c4:3f: 5b:a9:df:e0:22:0e:fb:15:19:37:60:00:8f:50:3b:b7:85:d3: 4e:2d:6e:87:46:4d:d8:0d:c5:52:83:dc:75:79:15:a9:ff:72: b5:b0:79:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6QuldoECvMfht0DCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk NmY2ZDAyZjgtOGQyMC00NjQxLWJhMTctMGMwMTEyZjA4NTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqGstMnMNfdNthDPSZ1MEpBKlS5W3EAF79lu SFHvdbO2I+11q7dAXSOy3y1VRTM8ngkvw3QUQ6YIffnEww8msjEA5oaMbdW9gpGV pWjmj8K3ShJWTXo2BNE1Ky/S92QmJs17YQ8m2yqKqnWFjHTpsFlCbyOdg4NlkJpL CZZZSmkpqudH6P7niCkG0rdh+khTgKUkJo9pdzume3f+yYY10bwzo0IKh1VvyNZX 0Hqe8f207i+UHVz1iBDR7NnFud9nyZSGTJXudewJEDBAOCAngDedKh8pt4pOqqYm Y9pClZGO47rSn+stDQjUIg3SSd5NMDQsEgIeZLdgH2KGdv0j9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJPONAO/Lsvcjib54AVCTuEm+IdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZmZhYTI1YWQtYjdhMi0z ODQ3LWI3NDMtODZmZTQ3ZWE2YThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhWDtf+h83HKduD5pEhiuGnnR83au7RmRzoPwPaBUxG3LDCTURmvpWd GgHkVfRfTDpuJNc5NB8QxdM900RnDkj5WxtxNdd/yv21RxpJ0kdLAfJvKaeH/Pwl tEaZbxLvI/oUIq12Tk/QYFHZ6fCf5DGatWMVA+xWLAdla2UGma+HCrOLAnAkMmVS P482I/r56GHBhvxmIs9a1BbBH3whgH459ueaNjMHLHG8yPKd3sHj8mJgkU4IBGiQ rQ/GspdsIWY2ZGK2/pTMniNm6PdA0D/4MdfUfjnEP1up3+AiDvsVGTdgAI9QO7eF 004tbodGTdgNxVKD3HV5Fan/crWwedU= -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:54 2026 by rpki-client