$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa File: 90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa (raw, json) Hash identifier: qrVMnzcpiPvE3ogp8c63Xj0a+qd7XQW8CqET5Fva0Is= Subject key identifier: EF:1C:F5:58:E1:E5:EC:0B:6F:CA:15:D8:20:18:D0:3F:FC:2E:90:79 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584E4F1F627BD6498F01F4D58680 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 55256 IP address blocks: 158.95.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:62:7b:d6:49:8f:01:f4:d5:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=91feea25-6327-43bd-826a-76ee280dd379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:04:40:ca:54:0c:2a:53:5e:1d:25:e1:f5:19: a0:44:f1:b4:78:bc:b5:84:88:a4:e8:fa:d5:59:b2: d4:e5:1f:9f:a0:c3:02:4a:de:29:04:c3:47:78:bc: 28:ff:62:6b:4e:fd:15:01:b9:f1:c6:22:c4:a8:26: c7:24:48:3d:46:d3:ff:8e:55:20:39:c4:d2:b9:2c: 7a:7c:6f:ee:dd:6d:83:44:0e:bd:0a:d3:1a:a2:b3: a9:0c:ff:c7:b5:16:89:d2:08:06:95:87:b4:75:16: b1:35:13:2c:fc:1e:84:fd:01:17:62:3d:18:44:4b: ef:70:61:2f:cf:79:9f:51:7e:f3:44:d6:4f:87:76: e5:f5:42:fd:04:92:f2:e0:a4:a8:6b:5c:2a:cf:0a: 9b:8f:89:49:65:bf:6c:23:c4:b2:60:55:c3:c8:31: 51:6b:40:24:2d:09:2e:ce:41:b1:9a:da:38:1c:36: 05:cb:a0:9f:d6:b5:a9:12:49:82:7b:77:6b:92:67: ed:94:41:f5:a0:51:9d:0b:a2:d4:73:53:00:22:1d: 3c:e2:40:63:be:32:09:db:0f:c9:e9:45:42:d5:a0: ec:1f:94:e0:42:a4:42:28:bb:31:b8:8e:74:c4:be: 8a:d0:66:02:5d:13:69:28:0d:31:3b:23:08:86:b4: 74:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:1C:F5:58:E1:E5:EC:0B:6F:CA:15:D8:20:18:D0:3F:FC:2E:90:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/90e33e1f-75e8-3c4e-92f9-fb626209dde6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:22:a6:cf:21:ff:4e:b7:e2:15:25:1a:41:25:2f:11:0f:db: a2:9a:c6:a5:f6:0a:40:33:aa:19:53:24:6e:b6:04:71:23:18: a3:f0:51:bc:9c:ae:e8:35:c8:e0:72:6c:f3:50:f4:91:f1:7d: 11:6a:59:47:e8:7a:a6:af:cc:4d:f5:7f:d9:e3:3a:c8:0c:30: 32:4d:d3:4f:fd:d3:ab:85:61:1f:ac:0e:85:d0:d9:61:ac:da: 62:61:dd:3a:0e:cf:eb:ea:7a:44:06:d9:56:73:4d:90:60:93: ee:22:0a:81:8b:df:2f:7e:ed:ae:45:02:dc:1f:18:d3:36:0f: d3:77:d3:70:00:b1:7b:0c:51:8f:c0:63:7b:bd:d1:38:90:37: e9:93:38:e8:e8:db:89:44:d3:f8:f9:45:6e:98:ca:4a:81:fc: 1f:19:58:b9:93:30:e0:f1:23:ca:6b:54:d9:13:81:81:e2:ee: f8:d3:cc:72:1a:4d:5a:e2:6b:fe:8e:7f:ac:de:7f:b3:3f:f4: 66:57:84:d4:c3:23:c9:3a:99:ea:e6:c2:e1:7e:3f:b5:2b:96: dd:b6:d7:b8:3d:6a:f8:c8:7d:51:e6:17:38:55:c2:fd:ed:f2: 98:83:03:bd:be:87:0a:e9:46:c3:2a:c0:49:24:30:45:d7:a7: 18:7c:29:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PH2J71kmPAfTVhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk OTFmZWVhMjUtNjMyNy00M2JkLTgyNmEtNzZlZTI4MGRkMzc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhgRAylQMKlNeHSXh9RmgRPG0eLy1hIik6PrV WbLU5R+foMMCSt4pBMNHeLwo/2JrTv0VAbnxxiLEqCbHJEg9RtP/jlUgOcTSuSx6 fG/u3W2DRA69CtMaorOpDP/HtRaJ0ggGlYe0dRaxNRMs/B6E/QEXYj0YREvvcGEv z3mfUX7zRNZPh3bl9UL9BJLy4KSoa1wqzwqbj4lJZb9sI8SyYFXDyDFRa0AkLQku zkGxmto4HDYFy6Cf1rWpEkmCe3drkmftlEH1oFGdC6LUc1MAIh084kBjvjIJ2w/J 6UVC1aDsH5TgQqRCKLsxuI50xL6K0GYCXRNpKA0xOyMIhrR0xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8c9Vjh5ewLb8oV2CAY0D/8LpB5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvOTBlMzNlMWYtNzVlOC0z YzRlLTkyZjktZmI2MjYyMDlkZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkips8h/0634hUlGkElLxEP26KaxqX2CkAzqhlTJG62BHEjGKPwUbyc rug1yOBybPNQ9JHxfRFqWUfoeqavzE31f9njOsgMMDJN00/906uFYR+sDoXQ2WGs 2mJh3ToOz+vqekQG2VZzTZBgk+4iCoGL3y9+7a5FAtwfGNM2D9N303AAsXsMUY/A Y3u90TiQN+mTOOjo24lE0/j5RW6YykqB/B8ZWLmTMODxI8prVNkTgYHi7vjTzHIa TVria/6Of6zef7M/9GZXhNTDI8k6mermwuF+P7Urlt2217g9avjIfVHmFzhVwv3t 8piDA72+hwrpRsMqwEkkMEXXpxh8KTo= -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:55 2026 by rpki-client