$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa File: 1b47a838-7543-3b8a-a894-08ccad30351d.roa (raw, json) Hash identifier: OsoRYKd3mtpZwHij6y8+sCiUbi2r0EjJEvAeziCz4eU= Subject key identifier: 39:F0:70:EF:26:92:92:63:9E:FC:68:FD:26:EC:58:71:B7:FC:A8:C5 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B9BF889A37C969E1DB1453100 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa Signing time: Wed 22 Oct 2025 19:18:46 +0000 ROA not before: Wed 22 Oct 2025 19:18:46 +0000 ROA not after: Tue 20 Jan 2026 20:18:46 +0000 asID: 55256 IP address blocks: 158.95.146.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:f8:89:a3:7c:96:9e:1d:b1:45:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 22 19:18:46 2025 GMT Not After : Jan 20 20:18:46 2026 GMT Subject: CN=c02adbfa-ba5e-4c8d-9c1c-51e25d4b8630 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:57:ff:e5:a0:df:94:b2:73:37:25:3d:07:01: 1a:4a:50:ec:05:85:ed:cc:70:64:e5:94:36:c2:80: c3:3a:54:af:98:3c:e1:61:2d:3b:e9:ba:2f:73:b4: 0a:e2:0d:03:4d:a7:bb:15:79:5b:02:37:29:44:d5: 0e:ae:5f:88:37:17:bb:ab:f0:24:55:3a:2f:17:93: 1e:4c:80:49:a8:8b:c5:04:24:40:48:1d:d3:17:97: 54:0a:39:98:18:e5:f9:c0:02:d1:5c:e7:77:e6:54: b3:40:2d:a3:8c:41:fb:55:a8:8b:2c:29:e2:5e:40: da:56:39:85:4a:22:62:fa:8a:47:51:5c:79:08:d3: ba:86:79:89:e6:c1:06:48:49:1f:2c:9b:5c:a5:bb: fa:fe:aa:ae:30:23:a7:e6:a0:90:64:b9:6f:2f:cc: 95:ba:12:b7:9b:ed:1e:05:0c:48:82:c1:82:a8:8d: 95:21:5b:70:a4:f5:f7:3a:90:4e:66:91:d8:99:1c: cc:71:7d:f3:ea:64:30:ed:7d:58:37:37:cd:be:81: d0:5a:b7:30:90:3e:3c:2b:97:5c:ed:78:c7:c4:d0: 67:a0:66:1c:2e:ec:d2:6c:59:0f:43:c8:c0:9e:0f: fc:4a:39:e6:68:47:3e:37:ae:5a:42:36:62:30:bd: 43:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:F0:70:EF:26:92:92:63:9E:FC:68:FD:26:EC:58:71:B7:FC:A8:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1b47a838-7543-3b8a-a894-08ccad30351d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:f4:ff:16:b8:9f:bf:72:37:ea:02:5c:c0:0d:54:43:bb:53: c4:18:28:b2:26:c7:4a:aa:6f:f3:f9:78:86:55:c6:20:ee:1e: 2f:73:23:ad:93:be:1c:1b:31:e7:a4:8b:2d:0f:51:e2:d4:b2: 27:e2:e1:fa:44:61:ea:ef:b3:42:b5:c3:ab:f2:7a:0a:e3:07: 2f:b3:d6:9d:d5:98:1a:39:0b:7d:c5:dd:37:92:dc:39:9b:65: 71:9d:1d:81:5a:48:a1:b0:14:dd:32:7c:7a:e2:03:21:c3:0a: 32:a1:f8:40:cc:a2:08:08:4a:47:bf:0c:fe:2b:a3:bb:ba:60: 66:12:54:ec:12:9e:58:7e:ae:9d:34:79:62:64:99:6f:97:f9: f2:50:49:b6:4d:35:18:88:d3:91:e7:45:56:39:9f:1d:e9:61: 74:ee:0c:80:77:85:f2:86:bb:01:15:70:2b:99:d1:40:fa:e3: 65:cf:f8:ca:e7:2d:c5:25:fb:2b:1f:70:9e:74:2e:37:61:83: 65:b4:40:40:48:6b:63:2e:18:57:04:ce:33:0e:21:e2:09:f6: cd:68:01:49:b3:3f:1b:d6:4b:35:f2:05:14:ba:cc:b6:19:0b: 19:9b:36:cd:06:7b:f6:de:d4:64:8e:79:f5:d9:c4:59:d3:bd: 6a:f2:b2:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEub+ImjfJaeHbFFMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyMjE5MTg0NloXDTI2MDEyMDIwMTg0NlowLzEtMCsGA1UEAxMk YzAyYWRiZmEtYmE1ZS00YzhkLTljMWMtNTFlMjVkNGI4NjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFf/5aDflLJzNyU9BwEaSlDsBYXtzHBk5ZQ2 woDDOlSvmDzhYS076bovc7QK4g0DTae7FXlbAjcpRNUOrl+INxe7q/AkVTovF5Me TIBJqIvFBCRASB3TF5dUCjmYGOX5wALRXOd35lSzQC2jjEH7VaiLLCniXkDaVjmF SiJi+opHUVx5CNO6hnmJ5sEGSEkfLJtcpbv6/qquMCOn5qCQZLlvL8yVuhK3m+0e BQxIgsGCqI2VIVtwpPX3OpBOZpHYmRzMcX3z6mQw7X1YNzfNvoHQWrcwkD48K5dc 7XjHxNBnoGYcLuzSbFkPQ8jAng/8SjnmaEc+N65aQjZiML1DAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnwcO8mkpJjnvxo/SbsWHG3/KjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMWI0N2E4MzgtNzU0My0z YjhhLWE4OTQtMDhjY2FkMzAzNTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI30/xa4n79yN+oCXMANVEO7U8QYKLImx0qqb/P5eIZVxiDuHi9zI62T vhwbMeekiy0PUeLUsifi4fpEYervs0K1w6vyegrjBy+z1p3VmBo5C33F3TeS3Dmb ZXGdHYFaSKGwFN0yfHriAyHDCjKh+EDMoggISke/DP4ro7u6YGYSVOwSnlh+rp00 eWJkmW+X+fJQSbZNNRiI05HnRVY5nx3pYXTuDIB3hfKGuwEVcCuZ0UD642XP+Mrn LcUl+ysfcJ50Ljdhg2W0QEBIa2MuGFcEzjMOIeIJ9s1oAUmzPxvWSzXyBRS6zLYZ CxmbNs0Ge/be1GSOefXZxFnTvWrysnI= -----END CERTIFICATE-----Generated at Wed Nov 5 08:44:39 2025 by rpki-client