$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa File: 90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa (raw, json) Hash identifier: MDVVMYxQ5yWRAfaQRUlNZbMzVhOHiTqCtBuIsO3eOFg= Subject key identifier: 5F:51:AC:6C:FB:50:40:82:AA:8B:DF:DB:DB:F9:64:B8:97:DA:F5:84 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD94A8983386984EB63E2D00 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa Signing time: Wed 29 Oct 2025 02:42:04 +0000 ROA not before: Wed 29 Oct 2025 02:42:04 +0000 ROA not after: Tue 27 Jan 2026 03:42:04 +0000 asID: 55256 IP address blocks: 158.95.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:94:a8:98:33:86:98:4e:b6:3e:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:42:04 2025 GMT Not After : Jan 27 03:42:04 2026 GMT Subject: CN=5905c12d-844b-4d5b-a355-be59c59db7eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:83:08:da:dd:f6:ba:28:8c:2d:d3:ad:60:0c: 7d:31:7a:c6:67:a0:98:1d:aa:a0:06:90:26:a3:88: 64:35:b6:95:45:95:73:28:75:e5:6f:82:0e:49:94: 43:f8:00:5f:55:39:e8:67:e0:b3:03:b0:f0:3e:31: bd:b2:04:a3:86:82:11:b4:bf:b7:ce:4b:c9:ea:db: eb:e0:b0:5e:4e:95:1b:1e:f0:2e:cb:ca:ae:50:28: 12:34:b1:ef:08:02:ba:60:c5:77:e3:68:69:44:b6: 5b:c8:61:75:11:66:93:5d:fd:b0:5f:e3:e1:51:a4: ca:24:a6:30:b2:da:bf:f7:60:bf:22:8b:a9:7a:40: 62:bd:58:0d:56:fe:4c:50:71:dc:ec:1f:67:83:ae: 1c:d6:e7:eb:e1:c8:db:96:96:84:00:3e:a0:27:6e: 61:32:f3:86:0b:5e:bf:3f:4b:49:68:0b:d4:47:cf: ac:f0:f5:91:a9:f3:dd:7a:ea:29:ca:e2:c1:73:f3: 40:8d:0f:8b:0d:11:59:b3:3f:4d:d4:3c:58:c9:c2: 83:ed:a1:6c:3e:a2:a1:15:ed:e0:58:57:03:50:e6: a6:30:79:ae:cd:4c:89:62:7b:44:d9:bf:c3:75:8f: ce:4e:5e:54:16:20:4a:83:a5:b3:0c:c1:e5:7d:5b: 89:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:AC:6C:FB:50:40:82:AA:8B:DF:DB:DB:F9:64:B8:97:DA:F5:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1a:32:a7:09:3f:2e:c1:83:a1:4d:95:30:01:d6:c6:05:98: 78:94:a8:c8:0a:4b:6f:ac:ba:89:61:c9:a8:e9:9c:71:99:f3: 61:bb:76:b0:99:74:14:58:17:61:ff:a0:be:76:7f:6e:5e:7e: 5a:58:28:4d:22:3c:a4:47:d2:5e:9b:56:f6:66:6d:4a:99:7a: 1a:14:ea:33:39:71:3e:22:ff:fb:29:be:bf:da:cb:8f:38:07: 6c:a1:be:61:e2:bc:a1:76:68:61:1c:ac:95:b9:05:a3:ef:a6: 59:dc:1d:1b:46:97:1a:46:2d:93:3f:4b:12:e1:93:81:5d:a9: af:b5:b5:f8:f9:89:03:de:6a:1c:41:cc:cf:13:78:df:47:a3: d8:03:d1:33:9e:8a:ff:80:a2:49:a9:a1:9c:c4:5b:2a:ed:9a: 3d:68:af:66:0e:0b:2a:d2:f3:98:96:31:b2:32:0b:ad:a2:31: 50:1e:50:33:51:f1:59:83:b2:28:67:e1:43:90:fc:81:c2:f0: 26:86:8f:a9:02:2b:12:8a:fa:47:c7:1a:69:e9:78:41:be:d8: 7e:34:5c:fd:7c:db:85:d2:48:9e:87:bc:6a:aa:dc:d7:81:e7: 63:86:22:0f:42:09:fe:92:bc:2b:6e:f1:cc:26:36:49:62:ac: a5:0e:0f:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutlKiYM4aYTrY+LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNDIwNFoXDTI2MDEyNzAzNDIwNFowLzEtMCsGA1UEAxMk NTkwNWMxMmQtODQ0Yi00ZDViLWEzNTUtYmU1OWM1OWRiN2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoMI2t32uiiMLdOtYAx9MXrGZ6CYHaqgBpAm o4hkNbaVRZVzKHXlb4IOSZRD+ABfVTnoZ+CzA7DwPjG9sgSjhoIRtL+3zkvJ6tvr 4LBeTpUbHvAuy8quUCgSNLHvCAK6YMV342hpRLZbyGF1EWaTXf2wX+PhUaTKJKYw stq/92C/IoupekBivVgNVv5MUHHc7B9ng64c1ufr4cjblpaEAD6gJ25hMvOGC16/ P0tJaAvUR8+s8PWRqfPdeuopyuLBc/NAjQ+LDRFZsz9N1DxYycKD7aFsPqKhFe3g WFcDUOamMHmuzUyJYntE2b/DdY/OTl5UFiBKg6WzDMHlfVuJywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9RrGz7UECCqovf29v5ZLiX2vWEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvOTBlMzNlMWYtNzVlOC0z YzRlLTkyZjktZmI2MjYyMDlkZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAaMqcJPy7Bg6FNlTAB1sYFmHiUqMgKS2+suolhyajpnHGZ82G7drCZ dBRYF2H/oL52f25eflpYKE0iPKRH0l6bVvZmbUqZehoU6jM5cT4i//spvr/ay484 B2yhvmHivKF2aGEcrJW5BaPvplncHRtGlxpGLZM/SxLhk4Fdqa+1tfj5iQPeahxB zM8TeN9Ho9gD0TOeiv+AokmpoZzEWyrtmj1or2YOCyrS85iWMbIyC62iMVAeUDNR 8VmDsihn4UOQ/IHC8CaGj6kCKxKK+kfHGmnpeEG+2H40XP1824XSSJ6HvGqq3NeB 52OGIg9CCf6SvCtu8cwmNklirKUOD2I= -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:51 2025 by rpki-client