$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa File: 28b78652-65be-3a04-bece-bb5ab7563b1e.roa (raw, json) Hash identifier: CVnNefjAf+hfngH71aiADhLvrQ5iVdNIi4MKZ1qdhqc= Subject key identifier: B2:65:0A:70:AC:90:07:F0:20:C8:54:55:93:9E:85:F9:EE:A2:77:7B Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584DF0AB4A7622B05467923C1580 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 55256 IP address blocks: 158.95.220.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:4a:76:22:b0:54:67:92:3c:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=040f9c43-3bcd-4742-bf5a-a869464cac26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:28:d1:6c:4f:f1:79:9f:c7:94:68:9c:16:64: 6c:e8:8b:3c:31:89:86:70:fb:33:cf:88:cc:94:67: 85:48:02:b6:2a:b9:1f:66:2b:3c:58:9a:69:ce:0d: b8:ac:4d:9e:f4:a6:d8:b9:5d:04:4b:f5:0c:61:48: eb:85:3c:82:b1:96:23:5f:d0:75:82:19:d3:34:6f: 09:fa:a6:ad:70:8f:94:4e:c1:e9:e6:57:2b:37:27: 33:e2:5a:cc:de:ac:a5:bb:1d:c8:9c:96:bc:7c:d5: c0:96:5d:1b:f3:90:5c:1f:f3:cf:97:11:9b:d8:77: 35:8d:d2:04:ce:f5:0d:c7:b4:fd:b9:47:9e:d2:75: 2f:b9:96:25:c0:45:71:17:d5:5f:5c:b6:9a:45:9d: 34:53:e7:2e:6e:c7:62:54:26:17:55:9f:73:d6:ef: 1c:24:de:04:54:21:b7:4c:da:39:60:af:d1:84:65: cb:e9:a2:a3:90:1b:2f:3a:4e:37:c3:b9:1e:e2:89: 57:80:f1:f8:61:25:1a:fe:ee:9e:4d:d3:af:80:b9: 9f:ea:81:24:fa:c2:72:e1:16:85:78:79:cf:fd:7e: c3:08:89:07:fe:7d:71:7f:59:1d:c5:a5:ba:e6:ca: a0:9c:80:9e:0c:1b:c0:0b:10:9f:1f:0a:f1:bb:7c: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:65:0A:70:AC:90:07:F0:20:C8:54:55:93:9E:85:F9:EE:A2:77:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/28b78652-65be-3a04-bece-bb5ab7563b1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.220.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:10:5c:a4:82:e5:10:8c:d0:46:c1:05:44:e7:e6:ce:49:89: ab:e8:15:04:2c:36:0f:d4:39:1c:01:0b:5c:b6:c0:a9:33:39: 67:c1:53:94:07:fd:38:e8:ff:f8:f6:bd:45:b8:e2:f5:35:63: de:8b:64:74:c7:90:06:37:a6:e5:f0:70:b8:4e:2d:fb:91:48: 45:a4:9c:0d:64:c4:48:e2:88:0d:d8:18:c8:84:86:cb:07:d3: c8:13:6a:0c:d1:26:92:8d:8c:44:0e:81:27:60:d3:1a:8e:1d: 75:77:d7:12:9f:86:ee:2a:3b:56:ce:42:5a:c7:65:38:00:1d: 3d:40:50:cf:63:a6:ba:a7:0c:dc:8e:9f:a6:7e:2c:6b:ac:d5: c8:22:da:06:13:9e:bd:ee:8d:40:aa:bb:14:b6:37:79:45:36: 79:2f:1e:21:39:62:72:0e:8b:bb:b9:23:87:ff:61:f7:87:f7: 9e:17:9f:46:74:4c:9f:b3:e0:9d:90:0e:da:9c:f4:a5:f8:aa: 64:44:fa:b8:11:c4:90:ac:05:e5:26:25:9f:ab:8d:04:e4:c7: 74:63:06:15:39:11:2b:72:47:f6:ee:93:50:c6:ac:91:10:83: 6f:39:0a:93:b9:81:86:02:6b:4a:bd:e6:1f:67:74:1f:02:f3: 60:3e:d7:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wq0p2IrBUZ5I8FYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk MDQwZjljNDMtM2JjZC00NzQyLWJmNWEtYTg2OTQ2NGNhYzI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCjRbE/xeZ/HlGicFmRs6Is8MYmGcPszz4jM lGeFSAK2KrkfZis8WJppzg24rE2e9KbYuV0ES/UMYUjrhTyCsZYjX9B1ghnTNG8J +qatcI+UTsHp5lcrNycz4lrM3qylux3InJa8fNXAll0b85BcH/PPlxGb2Hc1jdIE zvUNx7T9uUee0nUvuZYlwEVxF9VfXLaaRZ00U+cubsdiVCYXVZ9z1u8cJN4EVCG3 TNo5YK/RhGXL6aKjkBsvOk43w7ke4olXgPH4YSUa/u6eTdOvgLmf6oEk+sJy4RaF eHnP/X7DCIkH/n1xf1kdxaW65sqgnICeDBvACxCfHwrxu3w3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJlCnCskAfwIMhUVZOehfnuond7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMjhiNzg2NTItNjViZS0z YTA0LWJlY2UtYmI1YWI3NTYzYjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQQXKSC5RCM0EbBBUTn5s5JiavoFQQsNg/UORwBC1y2wKkzOWfBU5QH /Tjo//j2vUW44vU1Y96LZHTHkAY3puXwcLhOLfuRSEWknA1kxEjiiA3YGMiEhssH 08gTagzRJpKNjEQOgSdg0xqOHXV31xKfhu4qO1bOQlrHZTgAHT1AUM9jprqnDNyO n6Z+LGus1cgi2gYTnr3ujUCquxS2N3lFNnkvHiE5YnIOi7u5I4f/YfeH954Xn0Z0 TJ+z4J2QDtqc9KX4qmRE+rgRxJCsBeUmJZ+rjQTkx3RjBhU5EStyR/buk1DGrJEQ g285CpO5gYYCa0q95h9ndB8C82A+1/8= -----END CERTIFICATE-----Generated at Thu May 28 13:38:09 2026 by rpki-client