$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a26019ab-be1e-359c-92f5-9bc6c5490d0c.roa File: a26019ab-be1e-359c-92f5-9bc6c5490d0c.roa (raw, json) Hash identifier: xnBfgBYrsqhVgwpJ+OEtj5L4pBLQiIHkhzQKtdmGeNQ= Subject key identifier: B9:34:68:47:4C:04:D4:E4:CB:4D:56:70:53:48:4A:61:0A:D6:8E:40 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584E4F1F32F46550C379328FD400 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a26019ab-be1e-359c-92f5-9bc6c5490d0c.roa Signing time: Sat 27 Jun 2026 09:00:12 +0000 ROA not before: Sat 27 Jun 2026 09:00:12 +0000 ROA not after: Fri 25 Sep 2026 09:00:12 +0000 asID: 55256 IP address blocks: 158.95.166.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4f:1f:32:f4:65:50:c3:79:32:8f:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jun 27 09:00:12 2026 GMT Not After : Sep 25 09:00:12 2026 GMT Subject: CN=dd43cf26-34a4-4657-84aa-1512b22217c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:43:90:48:c4:6f:0d:81:96:7c:77:8e:ae: 87:fa:08:02:4c:d0:ae:db:d8:cb:12:6a:4d:de:d7: dd:e4:68:89:28:53:d7:b3:e4:56:67:47:9f:d8:ae: 1f:74:11:74:6c:15:52:4c:9a:c7:de:4d:2a:f5:a5: 7c:a9:33:6a:e5:c6:3a:3b:7f:be:0c:be:53:21:3a: 96:f5:44:07:c3:9b:e0:dd:94:a9:3e:7d:e1:50:ed: 7a:dc:5b:9d:42:94:23:db:87:27:c7:d0:f3:1e:f4: 76:ec:cb:b9:d3:09:c0:d5:36:0b:c0:e0:91:be:cc: ec:45:8f:86:fa:56:9b:3f:a9:73:af:77:92:ba:40: b4:9e:81:10:4b:e9:bb:02:eb:9c:d9:21:70:07:29: f2:e3:c5:5d:fc:85:b2:de:c5:6f:c8:13:b4:ea:58: 82:e4:8f:b5:c5:34:b5:a9:c4:48:9b:00:1b:64:ec: cc:c1:3c:71:55:83:7c:81:73:16:07:51:b8:d4:a5: 32:62:e9:5c:56:c8:46:9a:a1:c1:c2:ce:d6:2b:fd: 12:21:2a:ff:d1:39:b6:3e:fb:5d:2a:5b:29:0a:8b: f0:29:b9:23:23:d7:bf:65:20:34:32:34:fb:d0:33: bc:91:be:cf:0a:6e:b9:a8:be:59:92:e8:08:b4:f2: 20:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:34:68:47:4C:04:D4:E4:CB:4D:56:70:53:48:4A:61:0A:D6:8E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a26019ab-be1e-359c-92f5-9bc6c5490d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.166.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:a4:f8:6a:31:0f:40:84:49:0e:c7:f4:65:c3:97:45:b8:95: d7:28:12:5a:54:93:91:ed:8c:10:eb:aa:40:a4:53:f5:03:a7: 03:88:bb:32:60:ef:aa:66:d8:ac:4b:0c:83:90:e2:41:02:58: 52:07:56:af:a4:5b:8a:59:04:b2:71:4c:87:36:55:15:13:a9: 29:d1:10:e2:6d:91:37:53:a3:e8:ac:05:7a:7b:73:82:d9:0c: a8:91:4f:92:8e:04:00:e2:7a:70:f1:5a:e0:9c:d3:4d:f0:91: a3:eb:47:d4:44:4e:3a:53:29:bc:ec:e8:2a:7e:b0:0c:3d:c3: 60:40:8f:bb:f5:6f:19:0b:16:43:21:ca:2d:d0:06:4e:00:42: bb:31:f1:f9:30:9f:67:48:ae:1d:30:c9:35:14:cd:4d:e0:0d: 86:d1:15:e6:1f:5f:1d:55:18:ba:9a:ff:8b:26:71:30:10:8a: bd:dc:6f:11:fd:85:ce:7c:8c:f6:00:29:8f:95:e6:ce:52:01: c5:71:1c:06:09:57:5c:51:e0:ce:7f:a4:b1:2d:cd:a6:86:a6: fc:ca:0f:5c:77:80:6d:de:62:55:3c:32:55:8a:ac:f7:2c:a0: 13:b8:a5:87:5e:28:20:c7:1c:2e:c7:1e:e6:4b:5c:cb:34:e7: b5:e7:46:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5PHzL0ZVDDeTKP1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDYyNzA5MDAxMloXDTI2MDkyNTA5MDAxMlowLzEtMCsGA1UEAxMk ZGQ0M2NmMjYtMzRhNC00NjU3LTg0YWEtMTUxMmIyMjIxN2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApyxDkEjEbw2Blnx3jq6H+ggCTNCu29jLEmpN 3tfd5GiJKFPXs+RWZ0ef2K4fdBF0bBVSTJrH3k0q9aV8qTNq5cY6O3++DL5TITqW 9UQHw5vg3ZSpPn3hUO163FudQpQj24cnx9DzHvR27Mu50wnA1TYLwOCRvszsRY+G +labP6lzr3eSukC0noEQS+m7Auuc2SFwByny48Vd/IWy3sVvyBO06liC5I+1xTS1 qcRImwAbZOzMwTxxVYN8gXMWB1G41KUyYulcVshGmqHBws7WK/0SISr/0Tm2Pvtd KlspCovwKbkjI9e/ZSA0MjT70DO8kb7PCm65qL5ZkugItPIgKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLk0aEdMBNTky01WcFNISmEK1o5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYTI2MDE5YWItYmUxZS0z NTljLTkyZjUtOWJjNmM1NDkwZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAak+GoxD0CESQ7H9GXDl0W4ldcoElpUk5HtjBDrqkCkU/UDpwOIuzJg 76pm2KxLDIOQ4kECWFIHVq+kW4pZBLJxTIc2VRUTqSnREOJtkTdTo+isBXp7c4LZ DKiRT5KOBADienDxWuCc003wkaPrR9RETjpTKbzs6Cp+sAw9w2BAj7v1bxkLFkMh yi3QBk4AQrsx8fkwn2dIrh0wyTUUzU3gDYbRFeYfXx1VGLqa/4smcTAQir3cbxH9 hc58jPYAKY+V5s5SAcVxHAYJV1xR4M5/pLEtzaaGpvzKD1x3gG3eYlU8MlWKrPcs oBO4pYdeKCDHHC7HHuZLXMs057XnRlg= -----END CERTIFICATE-----Generated at Mon Jul 13 02:45:49 2026 by rpki-client