$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa File: 890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa (raw, json) Hash identifier: wxtHHoj8vYhx/DiQE9RXZruaDkVoZr948Z14fCgarbc= Subject key identifier: 3A:32:8B:15:7E:B3:CC:22:F3:C6:0E:A5:07:DD:0A:C9:50:E1:B5:7A Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD9AF9FC16FDF40FDE05CDE8 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa Signing time: Wed 29 Oct 2025 02:54:48 +0000 ROA not before: Wed 29 Oct 2025 02:54:48 +0000 ROA not after: Tue 27 Jan 2026 03:54:48 +0000 asID: 55256 IP address blocks: 158.95.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:9a:f9:fc:16:fd:f4:0f:de:05:cd:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:54:48 2025 GMT Not After : Jan 27 03:54:48 2026 GMT Subject: CN=e53b66f3-7fc6-40dc-b21f-910e636ea671 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:22:77:8c:f4:61:ab:42:13:8f:23:c3:49:9d: b0:e5:65:95:10:14:b8:bf:29:38:e6:a8:58:14:61: 3f:d1:a2:d1:90:5f:ac:a1:d9:ef:aa:9c:f6:cc:0f: c3:76:14:60:c4:b7:85:72:66:b8:9b:d2:04:f6:69: e1:f8:9f:60:51:85:f2:07:3b:cf:fa:9e:d7:2d:1a: 24:81:e5:54:26:a8:65:b4:6b:68:8c:44:20:9c:1e: 64:cc:df:a0:3e:b0:c2:05:d7:9d:bf:6e:c9:3b:be: 72:c7:92:0f:53:3f:35:d1:6a:bb:77:fc:ef:cc:bb: 40:4d:3e:9f:90:26:55:cf:fe:2c:91:74:cd:ef:e7: de:16:9a:84:a8:83:01:ad:2e:df:a5:3c:76:84:f4: 0f:ec:f5:65:99:a5:94:20:8f:54:f5:b0:b7:16:f0: 4d:3b:1c:8e:95:09:3a:fb:79:9e:3a:30:31:66:e5: fd:d4:18:85:3b:be:b1:49:94:5d:e4:d5:f4:0c:03: dc:54:c9:ae:76:cf:93:e6:48:46:51:7a:11:f1:1e: d8:be:ea:87:8d:1a:5a:0a:91:e1:d3:4b:24:26:81: 95:d3:36:30:1f:f2:72:bc:b0:74:6d:c7:5c:8d:1e: d3:ed:f8:7f:e6:6a:0c:25:b8:a1:43:47:a4:b3:98: b9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:32:8B:15:7E:B3:CC:22:F3:C6:0E:A5:07:DD:0A:C9:50:E1:B5:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/890c5a9f-cc63-3735-92b6-d29b79b9d45e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:d1:7b:98:1d:6a:6f:a0:2f:23:2d:d2:01:de:eb:7c:2b:7c: f6:28:b0:41:ba:66:4e:85:ea:7f:38:c3:44:d1:08:07:1f:bb: 42:e1:f2:fe:26:07:eb:8b:9c:b4:5b:dc:70:b0:5d:72:b8:9c: c1:d5:13:f8:46:fa:aa:1f:ba:53:6b:99:77:e9:86:2e:59:22: 79:aa:35:63:b2:76:64:16:e0:34:0d:ad:6e:fc:ba:22:d1:5b: 6b:3e:4c:64:e3:32:70:43:de:75:8e:77:f8:51:bb:a3:8b:91: 9e:d7:e2:80:69:38:31:a4:64:39:9f:90:2c:a3:41:d2:ff:0c: 59:8f:e1:ee:a4:cb:7f:63:21:eb:cd:bc:e3:81:28:c5:03:1c: 2c:02:56:88:98:14:0f:3a:5a:20:f7:2b:5c:8b:2d:67:d5:65: f1:7f:66:78:75:86:2e:40:58:9d:ff:f8:54:a3:fd:cb:ff:fd: 70:66:4f:08:87:85:5f:3b:1f:4e:d2:f6:20:fd:b1:87:f2:47: 27:2e:0c:98:fc:f9:10:6c:35:91:b0:c6:78:10:89:62:39:5f: f7:01:a0:01:08:ca:28:42:02:61:7f:a4:ee:aa:dd:4a:cb:b5: fc:6a:ee:72:8e:6f:7c:a1:6a:9d:6a:f7:3e:b4:19:ea:fe:eb: e4:09:21:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutmvn8Fv30D94FzegwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNTQ0OFoXDTI2MDEyNzAzNTQ0OFowLzEtMCsGA1UEAxMk ZTUzYjY2ZjMtN2ZjNi00MGRjLWIyMWYtOTEwZTYzNmVhNjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyJ3jPRhq0ITjyPDSZ2w5WWVEBS4vyk45qhY FGE/0aLRkF+sodnvqpz2zA/DdhRgxLeFcma4m9IE9mnh+J9gUYXyBzvP+p7XLRok geVUJqhltGtojEQgnB5kzN+gPrDCBdedv27JO75yx5IPUz810Wq7d/zvzLtATT6f kCZVz/4skXTN7+feFpqEqIMBrS7fpTx2hPQP7PVlmaWUII9U9bC3FvBNOxyOlQk6 +3meOjAxZuX91BiFO76xSZRd5NX0DAPcVMmuds+T5khGUXoR8R7YvuqHjRpaCpHh 00skJoGV0zYwH/JyvLB0bcdcjR7T7fh/5moMJbihQ0eks5i5wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoyixV+s8wi88YOpQfdCslQ4bV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvODkwYzVhOWYtY2M2My0z NzM1LTkyYjYtZDI5Yjc5YjlkNDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDRe5gdam+gLyMt0gHe63wrfPYosEG6Zk6F6n84w0TRCAcfu0Lh8v4m B+uLnLRb3HCwXXK4nMHVE/hG+qofulNrmXfphi5ZInmqNWOydmQW4DQNrW78uiLR W2s+TGTjMnBD3nWOd/hRu6OLkZ7X4oBpODGkZDmfkCyjQdL/DFmP4e6ky39jIevN vOOBKMUDHCwCVoiYFA86WiD3K1yLLWfVZfF/Znh1hi5AWJ3/+FSj/cv//XBmTwiH hV87H07S9iD9sYfyRycuDJj8+RBsNZGwxngQiWI5X/cBoAEIyihCAmF/pO6q3UrL tfxq7nKOb3yhap1q9z60Ger+6+QJIao= -----END CERTIFICATE-----Generated at Wed Nov 5 08:44:39 2025 by rpki-client