$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa File: 5a71387b-6111-3135-b8b0-3451734e6a20.roa (raw, json) Hash identifier: vXt3z8XWV6jfDTydCrWHw0jBfmV5xixDQ4FpWZ2j+o8= Subject key identifier: 95:F1:AF:E1:60:18:1A:2D:4A:96:28:EE:2A:3E:CC:0E:FC:AC:76:23 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584DEF4603A966845A7897BFDCC0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 55256 IP address blocks: 158.95.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:46:03:a9:66:84:5a:78:97:bf:dc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=604ecce3-8436-495b-b099-9fc93af13bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:c1:9b:10:24:07:3c:df:28:ba:28:4e:8f:db: 83:df:63:99:18:88:e5:1e:96:4d:6a:1f:0a:e8:ff: d0:1b:5f:0a:4e:34:cf:81:05:a8:4f:ac:ff:51:df: 77:db:cb:1a:4e:9a:ac:5a:8b:9e:7c:3c:8e:c1:4d: 9f:c3:85:fc:1c:8b:20:36:42:c8:9a:57:79:49:f0: 9b:f1:09:fe:99:a8:0c:41:e6:88:19:41:e1:a6:66: a6:43:b3:68:7d:60:4e:46:a2:0d:b4:22:a3:f0:35: 7e:5d:86:82:d2:e7:a9:fd:23:d9:d2:86:28:b7:90: 96:91:0e:82:04:e8:e0:84:2e:5b:7f:00:3b:64:16: 67:44:0a:8e:53:35:d2:04:60:ff:a6:d1:16:86:06: 38:58:5f:cc:da:34:9e:27:c3:98:c0:71:30:c0:b4: 29:5e:3a:80:21:07:77:8b:2f:2a:12:7a:ea:22:3e: 73:c7:56:5e:07:25:75:01:36:7e:fb:de:47:92:7c: 9e:54:db:64:95:a5:a2:d5:90:1d:e6:0f:f9:c0:d7: 73:7a:01:6e:3a:61:b6:ac:5d:30:8f:00:94:83:20: 80:f5:e9:0d:da:ba:f7:44:19:59:05:82:40:c3:93: e0:84:2d:d0:5d:f4:01:ec:cc:65:65:3d:ad:db:26: b8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:F1:AF:E1:60:18:1A:2D:4A:96:28:EE:2A:3E:CC:0E:FC:AC:76:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/5a71387b-6111-3135-b8b0-3451734e6a20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:b7:86:72:37:51:d9:63:a5:0b:52:a1:30:08:82:09:31:c6: c5:1c:cf:5b:5a:2a:b0:44:32:16:01:9d:dd:fe:58:c9:df:78: d8:00:2c:ec:db:57:f6:09:17:0e:fd:ea:68:e8:d0:2b:da:f6: 3c:42:6d:84:7b:61:e7:1a:bf:7e:40:d8:70:2b:b2:34:59:5f: a8:a5:1f:66:21:67:ce:03:12:58:b7:62:67:81:bd:25:b9:5e: 7c:b3:b1:2c:60:f5:26:fe:a4:3b:6b:13:00:bf:72:6a:9a:d5: 36:ee:4f:5c:48:fb:e0:cf:2a:71:38:12:e1:4e:7a:6a:79:e5: c7:fe:17:71:42:51:55:5d:6f:c0:c7:d1:f9:86:b0:f5:8b:97: 36:82:09:ee:cb:73:58:8b:8a:fe:25:35:9d:57:70:42:60:d9: 3f:9a:0b:b9:8a:cc:25:dd:e6:3f:71:38:ef:30:73:81:1a:b1: e7:bd:4e:3a:24:e0:aa:f1:d3:4c:51:3f:16:34:04:2e:bb:94: 9e:5a:e0:fe:c8:7f:1b:89:74:e6:8a:6f:aa:d7:3b:0a:76:25: a8:4c:50:62:63:b1:36:3c:e2:53:c5:b0:b2:6a:22:c1:af:25: 97:e1:33:51:a2:66:f4:19:86:7f:e2:ed:74:d9:46:07:d4:81: 57:0f:d0:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgOpZoRaeJe/3MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk NjA0ZWNjZTMtODQzNi00OTViLWIwOTktOWZjOTNhZjEzYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjcGbECQHPN8ouihOj9uD32OZGIjlHpZNah8K 6P/QG18KTjTPgQWoT6z/Ud9328saTpqsWouefDyOwU2fw4X8HIsgNkLImld5SfCb 8Qn+magMQeaIGUHhpmamQ7NofWBORqINtCKj8DV+XYaC0uep/SPZ0oYot5CWkQ6C BOjghC5bfwA7ZBZnRAqOUzXSBGD/ptEWhgY4WF/M2jSeJ8OYwHEwwLQpXjqAIQd3 iy8qEnrqIj5zx1ZeByV1ATZ++95HknyeVNtklaWi1ZAd5g/5wNdzegFuOmG2rF0w jwCUgyCA9ekN2rr3RBlZBYJAw5PghC3QXfQB7MxlZT2t2ya42QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJXxr+FgGBotSpYo7io+zA78rHYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvNWE3MTM4N2ItNjExMS0z MTM1LWI4YjAtMzQ1MTczNGU2YTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEO3hnI3UdljpQtSoTAIggkxxsUcz1taKrBEMhYBnd3+WMnfeNgALOzb V/YJFw796mjo0Cva9jxCbYR7Yecav35A2HArsjRZX6ilH2YhZ84DEli3YmeBvSW5 XnyzsSxg9Sb+pDtrEwC/cmqa1TbuT1xI++DPKnE4EuFOemp55cf+F3FCUVVdb8DH 0fmGsPWLlzaCCe7Lc1iLiv4lNZ1XcEJg2T+aC7mKzCXd5j9xOO8wc4Easee9Tjok 4Krx00xRPxY0BC67lJ5a4P7IfxuJdOaKb6rXOwp2JahMUGJjsTY84lPFsLJqIsGv JZfhM1GiZvQZhn/i7XTZRgfUgVcP0Gc= -----END CERTIFICATE-----Generated at Thu May 28 13:39:45 2026 by rpki-client