$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa File: 1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa (raw, json) Hash identifier: HK2l90BdjiiVjfqZMVP4FqgIcp/WBHeGWYkZaZ0fx9s= Subject key identifier: 60:B7:87:53:C7:01:25:71:30:12:52:08:11:DA:6F:DB:1F:4F:3E:68 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B9BF9274A54D01B3A2E38F720 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa Signing time: Wed 22 Oct 2025 19:20:00 +0000 ROA not before: Wed 22 Oct 2025 19:20:00 +0000 ROA not after: Tue 20 Jan 2026 20:20:00 +0000 asID: 55256 IP address blocks: 158.95.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:f9:27:4a:54:d0:1b:3a:2e:38:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 22 19:20:00 2025 GMT Not After : Jan 20 20:20:00 2026 GMT Subject: CN=d8f46b54-e982-4053-9af7-a974f8328f61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:69:ac:cd:ff:73:ee:48:ae:4d:52:c0:f0:c9: 2f:b8:95:4a:67:88:a1:70:d2:3d:63:93:c3:58:b0: 9b:36:9d:63:19:fd:12:95:f9:dd:b3:af:1f:9a:b5: 9a:50:ad:be:3a:eb:31:b8:1b:d2:24:3d:54:d7:2d: 01:a3:a0:b2:6a:be:9e:38:f4:2d:2e:ff:e2:05:f1: f1:c0:61:f1:a6:f5:54:69:9f:81:05:03:17:29:7b: 30:43:c7:cc:f5:16:a9:2a:45:93:06:a8:6f:31:a6: 5a:a4:8c:d8:c8:72:4a:b0:77:52:6a:46:04:08:7c: a0:1d:76:95:57:ca:13:ac:54:d7:1d:b3:a1:f2:a3: d6:ac:8d:6f:9f:d9:c3:6a:62:78:6f:78:8e:78:8b: 99:81:21:25:18:67:40:bf:9d:fa:81:30:ac:90:d0: 8c:5f:8b:9e:c6:1a:38:fa:ee:b6:f1:06:44:39:8a: e8:b6:8a:1c:31:8e:d8:b6:48:c3:38:d6:43:a3:1c: da:da:24:86:d4:6d:6a:29:87:e9:89:28:ad:e1:5e: ab:d1:e4:e6:9f:6c:c6:68:99:46:43:dd:ab:27:2b: 2a:42:33:18:be:e4:16:d7:5a:6b:f3:e3:69:26:88: 38:dc:02:77:8b:4a:f8:cf:e9:f6:06:98:b4:ec:e4: 73:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:B7:87:53:C7:01:25:71:30:12:52:08:11:DA:6F:DB:1F:4F:3E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/1df8032f-8cbc-3bfa-9b36-2c63158a4f34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:25:34:ab:d5:77:0d:92:39:b2:af:e1:4c:28:e8:a7:26:5a: 17:6b:55:37:0d:b7:eb:b8:38:7a:f3:83:96:60:f6:49:c6:96: 20:93:91:78:44:3c:f9:a1:55:a0:af:66:21:22:c2:a2:0b:c7: 12:fe:ea:74:fa:28:5a:cd:61:8b:c7:57:40:9f:fd:04:72:d7: 58:db:fa:74:91:07:4a:93:91:c3:3b:21:93:61:57:c3:95:21: c1:50:c5:f1:f3:ec:fd:8d:7d:20:d3:2a:76:30:d2:6d:b0:28: a6:25:7b:d5:75:c1:39:d6:66:12:59:3a:a6:95:86:99:6b:e8: 83:69:95:bc:04:f1:1d:5c:05:fc:28:41:79:03:ae:91:33:fb: b9:f2:5c:75:c1:ac:2e:e4:41:be:9f:4a:c6:47:81:18:01:31: 33:d4:02:ab:93:f2:c7:73:07:88:42:47:58:14:60:df:0b:c6: 8b:2e:c8:95:c5:3b:3f:28:94:5e:51:0e:cf:79:d4:4a:f9:9a: 17:4c:76:52:66:64:59:ba:d2:fd:cc:4b:cf:87:02:8c:80:44: 4b:18:87:d4:51:e2:6e:03:1b:da:9c:c8:88:ee:90:f2:74:7d: cb:ef:1c:22:e8:44:84:1e:ea:1a:b4:ef:17:39:26:a9:49:0c: df:45:21:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEub+SdKVNAbOi449yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyMjE5MjAwMFoXDTI2MDEyMDIwMjAwMFowLzEtMCsGA1UEAxMk ZDhmNDZiNTQtZTk4Mi00MDUzLTlhZjctYTk3NGY4MzI4ZjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGmszf9z7kiuTVLA8MkvuJVKZ4ihcNI9Y5PD WLCbNp1jGf0Slfnds68fmrWaUK2+OusxuBvSJD1U1y0Bo6Cyar6eOPQtLv/iBfHx wGHxpvVUaZ+BBQMXKXswQ8fM9RapKkWTBqhvMaZapIzYyHJKsHdSakYECHygHXaV V8oTrFTXHbOh8qPWrI1vn9nDamJ4b3iOeIuZgSElGGdAv536gTCskNCMX4uexho4 +u628QZEOYrotoocMY7YtkjDONZDoxza2iSG1G1qKYfpiSit4V6r0eTmn2zGaJlG Q92rJysqQjMYvuQW11pr8+NpJog43AJ3i0r4z+n2Bpi07ORzvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC3h1PHASVxMBJSCBHab9sfTz5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMWRmODAzMmYtOGNiYy0z YmZhLTliMzYtMmM2MzE1OGE0ZjM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQlNKvVdw2SObKv4Uwo6KcmWhdrVTcNt+u4OHrzg5Zg9knGliCTkXhE PPmhVaCvZiEiwqILxxL+6nT6KFrNYYvHV0Cf/QRy11jb+nSRB0qTkcM7IZNhV8OV IcFQxfHz7P2NfSDTKnYw0m2wKKYle9V1wTnWZhJZOqaVhplr6INplbwE8R1cBfwo QXkDrpEz+7nyXHXBrC7kQb6fSsZHgRgBMTPUAquT8sdzB4hCR1gUYN8LxosuyJXF Oz8olF5RDs951Er5mhdMdlJmZFm60v3MS8+HAoyAREsYh9RR4m4DG9qcyIjukPJ0 fcvvHCLoRIQe6hq07xc5JqlJDN9FIRk= -----END CERTIFICATE-----Generated at Wed Nov 5 10:31:15 2025 by rpki-client