$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa File: afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa (raw, json) Hash identifier: 0rMrNIu3es+L1FkqcxQLmB6fY2P/Vc0oF5uv7+TKCyw= Subject key identifier: 74:41:DB:7F:6C:E7:3C:D5:E1:92:49:B0:21:FF:43:B0:C1:39:5B:5B Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D4BF4F1F7B80BFB25F5E884A0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 55256 IP address blocks: 158.95.144.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:f1:f7:b8:0b:fb:25:f5:e8:84:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=bec0b0f2-0d21-4f78-ba28-5b54df1f8722 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ef:90:52:b5:56:c1:11:56:14:81:e3:29:fc: 34:6d:d6:f7:b0:2f:53:8c:7c:3b:05:7c:a5:b7:35: 78:4b:f2:98:c7:cf:62:49:0e:19:80:6d:d1:9e:a9: 53:ac:ca:ac:80:c0:c8:14:2b:7f:0b:ba:10:b8:d0: 07:3e:31:7e:6c:ef:05:b8:2b:ce:33:05:ff:54:a9: 2e:23:63:ba:41:ec:bf:c8:d4:ce:5f:3d:5a:2f:e9: 28:75:94:06:57:4e:47:3c:7f:e8:ae:2b:f6:9d:29: 70:83:1f:c6:a3:0a:5b:88:88:25:25:cb:cd:70:70: 98:d3:34:25:72:dd:58:6a:6a:08:8a:b1:84:6d:1d: c3:26:8e:aa:7e:27:61:6f:8e:29:84:a1:56:b1:f4: c1:32:4e:b9:c6:53:c7:95:3d:57:71:d7:32:e6:c8: f7:90:f8:18:54:70:23:50:21:b8:f2:4e:66:cf:dd: ca:80:7c:f5:85:2a:45:81:4c:7f:9a:48:46:ec:d8: 0f:a6:c6:ab:24:c9:f4:29:25:76:5d:06:a0:d7:ab: fd:ad:39:0c:8e:ce:49:90:13:61:32:f7:35:29:ca: e5:7c:75:b5:19:35:e1:10:ea:44:ea:37:96:0f:51: 57:c1:a9:a2:61:15:0f:c4:80:ee:28:2c:32:48:d0: a6:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:41:DB:7F:6C:E7:3C:D5:E1:92:49:B0:21:FF:43:B0:C1:39:5B:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/afa9e4f0-8a2f-39bf-b5b0-d093371bd0a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:67:69:26:36:61:bd:bb:62:d7:4f:8a:88:d2:a7:f8:c1:9d: 04:09:73:42:cc:16:f1:46:f4:40:cd:79:e9:11:88:4a:12:19: 3e:e1:a7:9f:24:3c:8e:bb:4c:03:e8:00:b4:a1:ba:7d:eb:e7: 9b:0a:ac:0b:63:5e:03:19:de:34:44:bd:b9:99:d4:54:5b:88: 49:0e:8e:79:f7:7b:3f:69:27:f7:e1:4e:4b:98:f1:12:3a:30: 8c:a9:05:9b:d3:ad:b9:3a:b8:6e:67:98:cd:43:94:06:e2:64: bd:23:15:15:0b:a2:7e:72:12:04:d0:7d:8a:6d:ac:5e:dd:65: 1f:dd:62:a3:38:9d:4b:59:be:c9:f8:40:a1:de:13:c2:e6:72: ae:2a:5a:36:b2:74:2a:c8:4c:03:80:60:b5:e4:2d:26:be:12: c3:b7:cf:b5:13:86:ea:5c:27:48:a6:8f:fa:13:c5:b4:77:53: 49:fb:8b:61:83:2f:e3:70:df:0d:a9:5e:64:e8:65:30:0f:63: b5:4a:88:01:96:a7:a7:a0:45:47:00:32:c2:dc:4a:e8:f3:7e: 21:0f:59:ae:eb:6a:7a:7d:87:8c:3b:0f:16:3f:67:fa:f4:fe: b4:13:1b:9a:eb:6a:a8:ee:f9:58:fa:a7:b0:fa:0a:ea:11:74: f0:6f:34:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1L9PH3uAv7JfXohKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk YmVjMGIwZjItMGQyMS00Zjc4LWJhMjgtNWI1NGRmMWY4NzIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte+QUrVWwRFWFIHjKfw0bdb3sC9TjHw7BXyl tzV4S/KYx89iSQ4ZgG3RnqlTrMqsgMDIFCt/C7oQuNAHPjF+bO8FuCvOMwX/VKku I2O6Qey/yNTOXz1aL+kodZQGV05HPH/oriv2nSlwgx/GowpbiIglJcvNcHCY0zQl ct1YamoIirGEbR3DJo6qfidhb44phKFWsfTBMk65xlPHlT1Xcdcy5sj3kPgYVHAj UCG48k5mz93KgHz1hSpFgUx/mkhG7NgPpsarJMn0KSV2XQag16v9rTkMjs5JkBNh Mvc1KcrlfHW1GTXhEOpE6jeWD1FXwamiYRUPxIDuKCwySNCm5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRB239s5zzV4ZJJsCH/Q7DBOVtbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYWZhOWU0ZjAtOGEyZi0z OWJmLWI1YjAtZDA5MzM3MWJkMGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBnaSY2Yb27YtdPiojSp/jBnQQJc0LMFvFG9EDNeekRiEoSGT7hp58k PI67TAPoALShun3r55sKrAtjXgMZ3jREvbmZ1FRbiEkOjnn3ez9pJ/fhTkuY8RI6 MIypBZvTrbk6uG5nmM1DlAbiZL0jFRULon5yEgTQfYptrF7dZR/dYqM4nUtZvsn4 QKHeE8Lmcq4qWjaydCrITAOAYLXkLSa+EsO3z7UThupcJ0imj/oTxbR3U0n7i2GD L+Nw3w2pXmToZTAPY7VKiAGWp6egRUcAMsLcSujzfiEPWa7ranp9h4w7DxY/Z/r0 /rQTG5rraqju+Vj6p7D6CuoRdPBvNNI= -----END CERTIFICATE-----Generated at Mon Apr 6 13:55:25 2026 by rpki-client