$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa File: 3831ba34-dfac-3ed1-9620-7655233ff882.roa (raw, json) Hash identifier: LGLHBpJdf1DJznPRqPxXwngyQfBHBkUHeY2KJ0XKi+8= Subject key identifier: 2E:1C:4D:D9:BD:9A:8B:2D:0F:B5:9A:46:89:A8:72:4F:85:E6:95:06 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584DEF4603E36F82D4C4C7150880 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 55256 IP address blocks: 158.95.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:46:03:e3:6f:82:d4:c4:c7:15:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=bbf059aa-3529-47f9-9c9c-a2cb48b69523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1f:29:41:e9:46:7a:77:83:18:84:4c:36:1b: 48:bb:29:a0:5e:05:31:f9:ca:c2:95:7a:73:63:d7: 2e:71:37:d1:b5:23:85:48:ab:8e:fc:1b:ef:0d:4e: 8b:8b:2f:1c:f4:b2:11:3f:50:9f:7a:7e:54:d0:0c: 5b:b0:89:6c:26:9b:a5:1b:39:56:5c:bf:ff:53:f0: 9e:21:38:6e:1a:65:85:06:06:1e:78:12:4f:35:cd: 33:9e:3f:3b:6a:30:c9:dd:68:41:f8:45:43:51:38: 64:dc:c0:df:dd:7d:01:6e:8d:fb:ca:47:e9:3d:60: d5:ec:bf:ad:e4:ba:33:20:7b:aa:95:9c:b7:14:f4: 82:89:0e:52:1f:81:c6:1a:1d:d7:cc:2e:5f:5c:8d: dc:9d:ca:c2:e4:52:75:7d:15:c1:b3:41:90:92:db: 11:f1:bc:4e:61:8c:0d:65:3e:13:67:4e:50:8c:40: a5:11:a0:e4:d1:1b:f6:a3:ca:e5:a5:eb:7e:05:70: b1:22:87:e9:69:a2:25:6c:fd:ef:97:a4:5d:8c:c5: aa:15:9f:e4:94:43:27:3b:71:09:26:9f:39:6c:8c: fb:af:f4:c4:e6:a8:3f:a9:b8:70:82:fe:20:04:9e: 09:a0:0d:43:3a:42:3b:d4:a1:d1:2b:c9:e7:fd:b0: 09:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1C:4D:D9:BD:9A:8B:2D:0F:B5:9A:46:89:A8:72:4F:85:E6:95:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/3831ba34-dfac-3ed1-9620-7655233ff882.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:04:3f:68:33:92:dd:ec:7f:ef:90:d7:b9:9b:ca:7a:37:5a: 33:35:a8:a9:35:cd:dc:49:59:f6:8d:14:2d:5d:e4:79:2c:75: ee:6e:f1:5e:33:50:e3:01:56:3a:b9:a6:b5:56:a7:e2:2b:66: cc:96:66:c8:38:84:4b:62:10:8b:0d:61:a3:c4:e7:cd:5c:ab: a9:af:68:c0:cf:37:c9:58:b1:11:88:c0:21:e9:0a:7f:bf:f1: 38:72:46:e9:0d:62:1c:35:35:92:cb:7f:8b:eb:80:71:e7:ad: 7f:93:c4:83:a3:9d:2f:9b:16:b2:82:4a:53:d3:e6:9e:e7:8b: 52:79:71:13:f6:1b:cb:c9:c5:f5:bc:ed:12:6f:7c:19:66:4f: a0:55:b1:a8:45:1b:e0:a3:8e:57:22:fe:a3:be:a5:8b:e8:c4: 5e:3d:25:9b:cd:0f:07:14:af:31:40:31:19:16:fd:87:d7:82: 34:75:aa:9d:ad:e8:c1:63:78:09:b6:a5:df:21:86:57:72:be: b0:2c:91:c5:11:df:91:52:71:b8:7b:6a:cb:fe:0e:61:2e:12: f3:42:44:cd:04:82:0f:07:53:d5:69:17:78:58:bb:1e:ca:7a: d5:fe:5b:c3:41:4c:4e:35:8e:37:52:5c:a0:a7:6e:84:35:8c: 2b:a2:97:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgPjb4LUxMcVCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk YmJmMDU5YWEtMzUyOS00N2Y5LTljOWMtYTJjYjQ4YjY5NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB8pQelGeneDGIRMNhtIuymgXgUx+crClXpz Y9cucTfRtSOFSKuO/BvvDU6Liy8c9LIRP1Cfen5U0AxbsIlsJpulGzlWXL//U/Ce IThuGmWFBgYeeBJPNc0znj87ajDJ3WhB+EVDUThk3MDf3X0Bbo37ykfpPWDV7L+t 5LozIHuqlZy3FPSCiQ5SH4HGGh3XzC5fXI3cncrC5FJ1fRXBs0GQktsR8bxOYYwN ZT4TZ05QjEClEaDk0Rv2o8rlpet+BXCxIofpaaIlbP3vl6RdjMWqFZ/klEMnO3EJ Jp85bIz7r/TE5qg/qbhwgv4gBJ4JoA1DOkI71KHRK8nn/bAJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4cTdm9mostD7WaRomock+F5pUGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvMzgzMWJhMzQtZGZhYy0z ZWQxLTk2MjAtNzY1NTIzM2ZmODgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkEP2gzkt3sf++Q17mbyno3WjM1qKk1zdxJWfaNFC1d5Hksde5u8V4z UOMBVjq5prVWp+IrZsyWZsg4hEtiEIsNYaPE581cq6mvaMDPN8lYsRGIwCHpCn+/ 8ThyRukNYhw1NZLLf4vrgHHnrX+TxIOjnS+bFrKCSlPT5p7ni1J5cRP2G8vJxfW8 7RJvfBlmT6BVsahFG+Cjjlci/qO+pYvoxF49JZvNDwcUrzFAMRkW/YfXgjR1qp2t 6MFjeAm2pd8hhldyvrAskcUR35FScbh7asv+DmEuEvNCRM0Egg8HU9VpF3hYux7K etX+W8NBTE41jjdSXKCnboQ1jCuil+Q= -----END CERTIFICATE-----Generated at Thu May 28 13:39:39 2026 by rpki-client