$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa File: b90f7135-7157-3fbc-bd15-33834ca90b1f.roa (raw, json) Hash identifier: XkPxrlIP8yXMqWkAxKgLOM8xIYS6FbwS1GjTlw7I3d0= Subject key identifier: FD:45:51:1F:34:2E:FD:7D:3D:E7:F3:A0:9D:89:7A:D6:29:A8:F8:7C Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584DEF460386B8EC5E6BA49ECD80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa Signing time: Sun 24 May 2026 01:00:27 +0000 ROA not before: Sun 24 May 2026 01:00:27 +0000 ROA not after: Sat 22 Aug 2026 01:00:27 +0000 asID: 55256 IP address blocks: 158.95.196.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ef:46:03:86:b8:ec:5e:6b:a4:9e:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: May 24 01:00:27 2026 GMT Not After : Aug 22 01:00:27 2026 GMT Subject: CN=d17eecff-a602-4ee5-85a0-2223f05e8e9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0d:7b:d8:78:b2:c6:f2:19:e3:3c:07:80:35: dd:f5:02:96:da:ff:4e:44:41:8d:05:fe:64:8a:60: dc:5f:ad:df:7d:69:e4:9d:63:ec:51:d2:c0:15:5b: 16:ea:17:4a:be:37:93:84:f1:85:ff:9b:c5:55:b2: 2c:b9:13:b7:3b:f7:ca:30:e8:44:a9:0b:44:24:b7: 7c:79:e2:07:95:73:42:89:f0:55:c0:c0:5b:7d:d2: 19:d7:5d:a2:d4:98:3a:01:61:85:cf:03:9d:62:df: 26:8d:d2:cc:86:ba:65:64:65:e2:ef:32:c4:2c:b2: 3c:ed:5d:d9:5f:36:c5:17:0c:4c:59:ef:dc:37:34: d3:31:35:51:59:f7:99:46:3c:0f:d9:ae:ac:00:ca: 68:29:1b:2f:0e:82:4e:ec:f5:b1:53:41:8e:2b:64: 8a:ee:d9:1e:e6:52:12:99:4b:90:a1:8d:74:2d:c4: 81:e8:00:4f:70:ab:bc:b5:2e:ca:42:be:0f:01:9c: 3d:81:e5:12:9c:d3:4c:2e:c4:fc:da:ae:89:10:32: f2:2f:15:b5:61:40:a4:f3:3c:18:90:07:92:6c:51: 4e:d6:0d:a4:22:7e:a4:a4:68:7f:96:cd:8a:93:ab: 70:44:2a:79:e5:2e:72:23:17:0b:7e:63:c8:fe:be: 50:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:45:51:1F:34:2E:FD:7D:3D:E7:F3:A0:9D:89:7A:D6:29:A8:F8:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/b90f7135-7157-3fbc-bd15-33834ca90b1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.196.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:98:3e:f3:5f:37:53:fc:2a:9e:f3:d3:ab:e7:fb:2e:ab:4f: 3d:d4:91:cf:7a:a5:8c:93:f6:80:9b:a2:a8:99:16:ed:89:bc: 3d:89:8e:ba:9a:6f:c0:3b:29:31:44:81:f4:51:d1:23:f9:ed: d8:86:7d:5a:9b:e1:22:4b:68:56:0d:f7:42:9b:dc:04:40:62: ef:27:79:de:7d:f8:28:1e:bf:82:f9:c1:96:50:c9:9b:67:2b: 48:31:00:a0:df:41:8c:ee:d3:e0:e6:73:2b:06:b1:c7:ab:41: a2:e0:ac:d2:87:ad:2e:a2:5c:f4:d7:98:c9:04:24:39:11:4c: d1:16:69:4d:0d:44:c8:01:0c:f0:f1:53:8c:a7:64:b5:5f:c5: 31:5a:1d:ab:f0:56:1a:64:ff:c2:8f:92:e0:eb:9a:c6:b9:46: 2c:6c:33:d7:c2:67:4b:23:1e:95:78:04:d8:50:de:d1:aa:3c: 15:64:b4:7d:5d:15:f3:bd:89:2b:0f:93:ca:ee:f6:88:8c:8f: 03:d6:7d:0f:21:f5:c8:84:df:41:1b:21:ba:9a:d0:b5:b0:da: be:49:d2:69:c8:15:7b:72:e3:5e:9d:64:6a:ec:5d:12:2d:de: 56:fa:03:fc:8f:8e:9b:5d:8f:b0:90:64:ae:9f:ca:38:ea:a2: 25:3f:fb:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3vRgOGuOxea6SezYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDUyNDAxMDAyN1oXDTI2MDgyMjAxMDAyN1owLzEtMCsGA1UEAxMk ZDE3ZWVjZmYtYTYwMi00ZWU1LTg1YTAtMjIyM2YwNWU4ZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxw172HiyxvIZ4zwHgDXd9QKW2v9OREGNBf5k imDcX63ffWnknWPsUdLAFVsW6hdKvjeThPGF/5vFVbIsuRO3O/fKMOhEqQtEJLd8 eeIHlXNCifBVwMBbfdIZ112i1Jg6AWGFzwOdYt8mjdLMhrplZGXi7zLELLI87V3Z XzbFFwxMWe/cNzTTMTVRWfeZRjwP2a6sAMpoKRsvDoJO7PWxU0GOK2SK7tke5lIS mUuQoY10LcSB6ABPcKu8tS7KQr4PAZw9geUSnNNMLsT82q6JEDLyLxW1YUCk8zwY kAeSbFFO1g2kIn6kpGh/ls2Kk6twRCp55S5yIxcLfmPI/r5QWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1FUR80Lv19PefzoJ2JetYpqPh8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYjkwZjcxMzUtNzE1Ny0z ZmJjLWJkMTUtMzM4MzRjYTkwYjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl/EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIyYPvNfN1P8Kp7z06vn+y6rTz3Ukc96pYyT9oCboqiZFu2JvD2Jjrqa b8A7KTFEgfRR0SP57diGfVqb4SJLaFYN90Kb3ARAYu8ned59+Cgev4L5wZZQyZtn K0gxAKDfQYzu0+DmcysGscerQaLgrNKHrS6iXPTXmMkEJDkRTNEWaU0NRMgBDPDx U4ynZLVfxTFaHavwVhpk/8KPkuDrmsa5RixsM9fCZ0sjHpV4BNhQ3tGqPBVktH1d FfO9iSsPk8ru9oiMjwPWfQ8h9ciE30EbIbqa0LWw2r5J0mnIFXty416dZGrsXRIt 3lb6A/yPjptdj7CQZK6fyjjqoiU/+xI= -----END CERTIFICATE-----Generated at Thu May 28 13:39:47 2026 by rpki-client