$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/18aacd7d-a22f-3000-962b-ca06bdb5847b.roa File: 18aacd7d-a22f-3000-962b-ca06bdb5847b.roa (raw, json) Hash identifier: iClsnu7PeUOWNeaTA04BMH7CGurEA+VWYL+GmRiS1u4= Subject key identifier: 91:A7:B9:DB:42:34:8C:F7:CE:49:2A:DC:FA:2C:32:E1:61:DE:DC:21 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD9B509E87BF6109EA077360 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/18aacd7d-a22f-3000-962b-ca06bdb5847b.roa Signing time: Wed 29 Oct 2025 02:55:29 +0000 ROA not before: Wed 29 Oct 2025 02:55:29 +0000 ROA not after: Tue 27 Jan 2026 03:55:29 +0000 asID: 55256 IP address blocks: 158.95.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:9b:50:9e:87:bf:61:09:ea:07:73:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:55:29 2025 GMT Not After : Jan 27 03:55:29 2026 GMT Subject: CN=5bc1c0ce-3186-4182-9b36-43db4438fa0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:b8:2c:a5:4e:e3:f7:5d:d1:60:ea:ec:e4: ff:52:25:a5:3a:7c:70:44:cc:83:7a:a5:4f:32:9b: 78:50:14:73:34:c7:ce:fb:3d:7e:33:33:f4:78:46: da:52:b2:6c:61:4a:8d:b2:05:c4:1d:5e:d1:17:1d: 52:57:7c:23:cb:02:a4:96:93:03:34:c8:39:4e:9f: 09:9a:8b:06:98:19:ab:2d:05:e2:5b:fc:31:f4:78: 9d:81:0d:6a:3e:6e:ac:00:07:9e:2d:de:ed:a2:ca: 1f:a2:07:6f:3c:66:ac:06:ef:aa:b4:ee:df:40:e4: d5:0a:49:27:f0:5c:e3:1c:58:d7:09:60:b3:9b:9b: 31:8b:ba:e3:a9:7d:fd:08:4a:c4:30:e5:08:68:6e: da:44:45:d5:37:20:5a:b2:cd:34:d5:98:7e:fc:b6: e0:c9:32:dc:b7:70:f8:fa:08:8b:a9:3f:e7:33:70: 5c:27:93:34:09:d6:3a:e7:88:f7:77:dd:9f:d2:74: e2:d9:84:87:fe:cf:ec:3f:61:52:52:60:2d:b7:0f: 9d:2a:5f:9d:9e:d2:5c:80:93:a7:c4:f2:78:aa:a2: b0:fd:07:a7:0f:d7:6f:62:9e:09:a4:9e:c6:47:e9: f4:1d:cb:cf:d1:d3:f5:94:ac:19:c5:d3:53:1a:18: 82:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:A7:B9:DB:42:34:8C:F7:CE:49:2A:DC:FA:2C:32:E1:61:DE:DC:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/18aacd7d-a22f-3000-962b-ca06bdb5847b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:b8:fe:d9:18:7e:19:a1:7a:96:93:7a:7f:fd:e6:d8:35:3a: a5:9b:6c:2b:6c:3e:84:12:36:f8:b5:ed:29:80:23:7a:49:bb: f2:64:50:72:6e:f4:08:d9:45:03:09:2f:c1:ae:69:55:1e:26: 3b:02:43:67:d0:a3:89:a6:b3:ca:46:9e:1d:dc:f8:a1:79:cf: fb:65:66:c5:e6:a7:af:cb:47:03:4a:16:77:97:7a:bb:96:50: d1:bb:7e:36:40:8c:b2:c5:a0:9d:21:45:9e:85:b6:81:50:cb: 9a:69:24:6e:bb:57:ca:19:f2:15:d4:a5:ec:e0:95:3a:e1:a3: ce:6d:d1:d0:ca:0a:d5:0b:77:7d:3b:b2:b4:2f:bf:c2:17:10: 6c:f1:d6:ae:2c:d7:86:59:29:fd:a6:c1:9b:54:4f:60:e2:dc: af:c0:70:a9:84:40:54:f8:1c:7c:b6:64:6e:69:60:a5:57:71: 65:9c:f3:82:ce:39:b0:02:06:11:04:21:4d:d2:88:f1:47:1a: fa:98:3b:18:83:23:b5:6a:d6:95:3a:6d:9e:98:ce:f4:f9:63: 88:02:0b:9c:27:4a:81:1c:56:7f:1d:4b:98:35:96:7a:43:9b: 65:59:a4:da:c4:4b:05:02:7f:fd:0a:8a:cb:42:82:e8:f4:9f: 0d:92:44:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutm1Ceh79hCeoHc2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNTUyOVoXDTI2MDEyNzAzNTUyOVowLzEtMCsGA1UEAxMk NWJjMWMwY2UtMzE4Ni00MTgyLTliMzYtNDNkYjQ0MzhmYTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRK4LKVO4/dd0WDq7OT/UiWlOnxwRMyDeqVP Mpt4UBRzNMfO+z1+MzP0eEbaUrJsYUqNsgXEHV7RFx1SV3wjywKklpMDNMg5Tp8J mosGmBmrLQXiW/wx9HidgQ1qPm6sAAeeLd7tosofogdvPGasBu+qtO7fQOTVCkkn 8FzjHFjXCWCzm5sxi7rjqX39CErEMOUIaG7aREXVNyBass001Zh+/LbgyTLct3D4 +giLqT/nM3BcJ5M0CdY654j3d92f0nTi2YSH/s/sP2FSUmAttw+dKl+dntJcgJOn xPJ4qqKw/QenD9dvYp4JpJ7GR+n0HcvP0dP1lKwZxdNTGhiCkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGnudtCNIz3zkkq3PosMuFh3twhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMThhYWNkN2QtYTIyZi0z MDAwLTk2MmItY2EwNmJkYjU4NDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ64/tkYfhmhepaTen/95tg1OqWbbCtsPoQSNvi17SmAI3pJu/JkUHJu 9AjZRQMJL8GuaVUeJjsCQ2fQo4mms8pGnh3c+KF5z/tlZsXmp6/LRwNKFneXeruW UNG7fjZAjLLFoJ0hRZ6FtoFQy5ppJG67V8oZ8hXUpezglTrho85t0dDKCtULd307 srQvv8IXEGzx1q4s14ZZKf2mwZtUT2Di3K/AcKmEQFT4HHy2ZG5pYKVXcWWc84LO ObACBhEEIU3SiPFHGvqYOxiDI7Vq1pU6bZ6YzvT5Y4gCC5wnSoEcVn8dS5g1lnpD m2VZpNrESwUCf/0KistCguj0nw2SRLg= -----END CERTIFICATE-----Generated at Wed Nov 5 10:11:09 2025 by rpki-client