$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa File: 1b47a838-7543-3b8a-a894-08ccad30351d.roa (raw, json) Hash identifier: cnPljdIKDXOda3yOokXm2L749lYMG+ofTpnLaDO0R/I= Subject key identifier: 4B:2C:39:8F:26:39:04:37:24:C0:8C:A3:E0:C7:B3:AC:C4:05:2A:A6 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D5CB4F2C2C955B5D514003500 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 55256 IP address blocks: 158.95.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f2:c2:c9:55:b5:d5:14:00:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=e6eab445-b327-4bd8-b5a3-38d530b9bc8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bd:17:ea:aa:2c:23:24:28:d2:81:b5:04:22: af:14:9e:6f:06:13:b8:ef:3c:17:20:46:a3:e8:70: c0:44:d5:89:25:a6:f8:f9:ed:ed:09:0e:96:06:99: 5b:63:a2:1c:54:57:11:fd:10:6e:01:e8:b8:46:d1: 62:ca:06:37:1d:9f:e6:7e:aa:0f:0b:24:1e:1a:c7: 28:1f:70:20:f7:27:f9:9e:78:95:74:7f:e7:92:e6: 8a:99:20:df:5a:a2:20:5e:1d:99:5e:50:4c:9e:e2: d3:70:0a:73:45:10:6e:fc:6b:2d:d1:c7:03:90:32: 09:56:db:49:57:34:21:f2:8f:3f:83:cc:7b:70:04: de:43:83:a9:43:73:8a:4c:71:c9:35:93:31:df:e5: 51:a0:e7:95:0d:29:e7:c5:4f:57:29:7e:f0:16:d4: d8:e3:d2:64:29:a1:87:16:40:14:5c:cc:04:b7:e8: f1:5c:bb:51:dd:21:f5:f3:0e:3c:c3:6c:e4:e3:c1: 31:cd:e3:1c:0b:3f:f6:11:08:b0:a5:2d:e4:8d:18: 3e:7f:f9:a0:72:6f:62:4e:0e:b4:8d:b1:a1:a8:ff: 4b:5f:d8:92:04:f8:b3:eb:b9:3b:ae:8b:4a:b3:f9: f4:77:71:04:10:51:06:86:e6:82:5e:e9:ca:e8:1d: a0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:2C:39:8F:26:39:04:37:24:C0:8C:A3:E0:C7:B3:AC:C4:05:2A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3f:3e:e0:ad:b1:47:4a:21:8b:1a:36:c8:70:4a:ec:b0:58: df:29:1d:35:4e:ed:9f:12:9d:84:5d:72:b1:77:60:6e:df:58: 7b:d9:26:74:4a:fd:0a:9c:2a:c5:9b:91:42:46:38:66:4c:01: 69:f0:5f:2a:cb:10:32:e1:97:12:76:5c:77:2d:dd:b7:2e:96: 5b:d4:93:a1:4d:a4:f8:de:ff:e1:5c:b8:ac:5c:e8:ae:cc:8a: 50:e8:82:2d:af:41:df:60:bd:fa:a2:b9:70:13:53:22:06:65: 5d:85:0c:0d:b0:d6:e2:8a:bf:03:3c:94:ef:e1:9f:94:63:11: a6:50:55:34:98:5e:31:c2:35:11:17:5c:c2:ab:cf:6a:d5:30: 74:4e:69:d2:b8:7f:f6:d5:0d:9e:b1:2d:63:e2:20:2f:52:3e: 0d:72:bd:4d:23:e8:14:c4:0f:32:58:37:8d:09:ed:59:e1:d5: 14:cc:02:93:0c:58:0e:19:c6:e6:ec:7e:01:a0:b3:42:61:41: 32:69:fe:de:eb:19:1b:df:23:8b:9e:2e:e4:e8:f0:4b:4a:1c: e5:6e:7b:63:c9:62:af:d1:f2:9e:07:be:16:6e:1b:39:be:7e: 82:4c:84:40:4f:e1:e3:12:09:bc:62:86:d4:2f:fe:2c:af:6d: 33:62:11:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPLCyVW11RQANQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk ZTZlYWI0NDUtYjMyNy00YmQ4LWI1YTMtMzhkNTMwYjliYzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw70X6qosIyQo0oG1BCKvFJ5vBhO47zwXIEaj 6HDARNWJJab4+e3tCQ6WBplbY6IcVFcR/RBuAei4RtFiygY3HZ/mfqoPCyQeGsco H3Ag9yf5nniVdH/nkuaKmSDfWqIgXh2ZXlBMnuLTcApzRRBu/Gst0ccDkDIJVttJ VzQh8o8/g8x7cATeQ4OpQ3OKTHHJNZMx3+VRoOeVDSnnxU9XKX7wFtTY49JkKaGH FkAUXMwEt+jxXLtR3SH18w48w2zk48ExzeMcCz/2EQiwpS3kjRg+f/mgcm9iTg60 jbGhqP9LX9iSBPiz67k7rotKs/n0d3EEEFEGhuaCXunK6B2guwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEssOY8mOQQ3JMCMo+DHs6zEBSqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMWI0N2E4MzgtNzU0My0z YjhhLWE4OTQtMDhjY2FkMzAzNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk/PuCtsUdKIYsaNshwSuywWN8pHTVO7Z8SnYRdcrF3YG7fWHvZJnRK /QqcKsWbkUJGOGZMAWnwXyrLEDLhlxJ2XHct3bcullvUk6FNpPje/+FcuKxc6K7M ilDogi2vQd9gvfqiuXATUyIGZV2FDA2w1uKKvwM8lO/hn5RjEaZQVTSYXjHCNREX XMKrz2rVMHROadK4f/bVDZ6xLWPiIC9SPg1yvU0j6BTEDzJYN40J7Vnh1RTMApMM WA4ZxubsfgGgs0JhQTJp/t7rGRvfI4ueLuTo8EtKHOVue2PJYq/R8p4HvhZuGzm+ foJMhEBP4eMSCbxihtQv/iyvbTNiERg= -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:21 2026 by rpki-client