$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa File: afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa (raw, json) Hash identifier: tDbzsMLx32po15Qjvt5shgakfl5QOWKT9RYBbvfTu+E= Subject key identifier: BC:01:10:07:BC:FF:83:BA:06:B4:D4:4B:20:2E:56:5F:7C:38:0E:41 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584E2C39A470CD5A24E1BF3CAE80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa Signing time: Sun 14 Jun 2026 21:00:12 +0000 ROA not before: Sun 14 Jun 2026 21:00:12 +0000 ROA not after: Sat 12 Sep 2026 21:00:12 +0000 asID: 55256 IP address blocks: 158.95.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2c:39:a4:70:cd:5a:24:e1:bf:3c:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Jun 14 21:00:12 2026 GMT Not After : Sep 12 21:00:12 2026 GMT Subject: CN=a8678f74-af28-49e5-9f84-4a7064be0fcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:c6:7d:3c:62:94:87:e2:ac:db:c7:1d:f1:b9: e5:9f:ff:b3:6d:7a:67:90:a3:1c:fd:91:79:3e:c8: 5d:23:ca:5c:25:2e:f9:d6:98:91:51:b1:f6:f8:66: ce:c2:17:94:a1:08:5a:08:ea:0a:2a:5c:19:9a:3b: 52:de:a9:17:ad:f2:bd:10:1d:d3:33:ec:31:14:c9: 4f:02:b8:26:59:69:7f:a3:ed:48:e1:56:1b:c6:29: f2:99:1e:b2:47:3a:12:19:2d:f2:d4:44:95:74:e5: 64:fc:62:93:70:b0:45:07:ff:04:9a:f6:e9:05:2d: db:da:7a:30:3e:60:6f:ec:7e:6d:e0:70:b3:b8:da: 95:26:db:31:42:4e:5f:51:e5:00:af:d9:0f:04:da: cb:1f:62:c3:4c:94:a8:b3:fd:42:10:1b:72:2c:0f: d5:11:9c:1d:6f:88:e7:70:0f:15:89:0a:e2:1c:b9: 16:5d:97:93:12:41:2c:ef:d7:b3:96:a8:73:3c:3a: c0:fc:d7:71:45:8e:8c:ec:af:21:4c:32:ed:0f:cc: 15:6e:a5:3a:ed:30:25:a4:1b:9e:0c:58:5e:27:46: 7b:5d:9f:0b:9b:5e:f4:12:f6:41:52:4a:43:22:0e: f0:18:30:f9:2b:13:44:93:a9:be:2e:52:38:ed:3f: 56:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:01:10:07:BC:FF:83:BA:06:B4:D4:4B:20:2E:56:5F:7C:38:0E:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:0a:70:f6:eb:44:db:6a:1c:bc:8a:ea:9c:d3:f8:7a:46:6c: 27:57:9a:e5:3e:f9:9c:6b:0d:97:8b:08:8a:21:96:27:9a:b0: 01:1f:a7:05:2b:5b:67:5e:f0:40:29:91:0a:4d:90:02:5e:7a: f7:ae:53:47:e6:8a:c1:a4:66:0a:e5:17:34:14:75:64:8c:03: 3c:59:61:d5:dc:be:bd:33:41:b8:44:19:08:f3:27:a8:98:19: 2d:ac:f2:b4:5e:2c:39:d5:c5:8a:77:68:53:34:f1:87:31:88: f2:b7:7c:d2:99:35:17:dc:83:b5:d5:7d:6c:35:d6:18:85:27: ce:24:35:14:14:25:36:0b:8d:27:76:98:f5:08:2e:b6:cb:9c: e0:d7:1c:1d:7a:5f:2b:a8:02:53:b9:a0:cd:83:d2:de:cc:44: 48:99:f5:57:c0:06:f0:a5:77:a4:04:34:eb:68:a8:f3:be:96: 11:6d:4c:f5:09:92:97:91:86:e8:08:2b:ad:16:bf:c0:6d:94: 67:00:81:4a:ce:a6:b2:30:5e:69:eb:5e:4a:3f:f4:ce:f1:9d: dc:6c:63:1d:6d:20:20:de:7f:2e:c9:6f:8e:e8:a3:38:bd:0d: dc:47:0b:67:fd:89:84:6a:6f:a9:e1:ce:8a:10:61:31:3d:b9: e6:b8:15:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4sOaRwzVok4b88roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDYxNDIxMDAxMloXDTI2MDkxMjIxMDAxMlowLzEtMCsGA1UEAxMk YTg2NzhmNzQtYWYyOC00OWU1LTlmODQtNGE3MDY0YmUwZmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMZ9PGKUh+Ks28cd8bnln/+zbXpnkKMc/ZF5 PshdI8pcJS751piRUbH2+GbOwheUoQhaCOoKKlwZmjtS3qkXrfK9EB3TM+wxFMlP ArgmWWl/o+1I4VYbxinymR6yRzoSGS3y1ESVdOVk/GKTcLBFB/8EmvbpBS3b2now PmBv7H5t4HCzuNqVJtsxQk5fUeUAr9kPBNrLH2LDTJSos/1CEBtyLA/VEZwdb4jn cA8ViQriHLkWXZeTEkEs79ezlqhzPDrA/NdxRY6M7K8hTDLtD8wVbqU67TAlpBue DFheJ0Z7XZ8Lm170EvZBUkpDIg7wGDD5KxNEk6m+LlI47T9W1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwBEAe8/4O6BrTUSyAuVl98OA5BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYWZhOWU0ZjAtOGEyZi0z OWJmLWI1YjAtZDA5MzM3MWJkMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIKcPbrRNtqHLyK6pzT+HpGbCdXmuU++ZxrDZeLCIohlieasAEfpwUr W2de8EApkQpNkAJeeveuU0fmisGkZgrlFzQUdWSMAzxZYdXcvr0zQbhEGQjzJ6iY GS2s8rReLDnVxYp3aFM08YcxiPK3fNKZNRfcg7XVfWw11hiFJ84kNRQUJTYLjSd2 mPUILrbLnODXHB16XyuoAlO5oM2D0t7MREiZ9VfABvCld6QENOtoqPO+lhFtTPUJ kpeRhugIK60Wv8BtlGcAgUrOprIwXmnrXko/9M7xndxsYx1tICDefy7Jb47oozi9 DdxHC2f9iYRqb6nhzooQYTE9uea4FVs= -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:58 2026 by rpki-client