$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa File: be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa (raw, json) Hash identifier: 50BWXlrIX/zzOfv9P2a6LP/Ftd4ep4Fe3BlnLO0UeZ0= Subject key identifier: C7:D2:72:3F:89:C5:64:F5:27:EA:E6:12:93:AA:89:95:98:5F:7A:CE Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584B9BF950B9162F91E701A3AC20 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa Signing time: Wed 22 Oct 2025 19:20:20 +0000 ROA not before: Wed 22 Oct 2025 19:20:20 +0000 ROA not after: Tue 20 Jan 2026 20:20:20 +0000 asID: 55256 IP address blocks: 158.95.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:9b:f9:50:b9:16:2f:91:e7:01:a3:ac:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 22 19:20:20 2025 GMT Not After : Jan 20 20:20:20 2026 GMT Subject: CN=5816ab7c-a9b5-4153-a4db-64d5331480d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:38:13:05:a1:5f:70:a1:0b:b1:8b:23:b3:1e: cc:dd:78:39:4b:da:42:2c:d7:ec:1d:88:17:96:ad: 68:aa:30:ec:0b:86:25:35:d0:6b:2f:0a:20:1c:58: 40:1f:7b:9b:25:b4:00:2d:9e:d0:f4:21:c1:b9:bc: 03:b6:ea:1a:16:f2:93:71:99:48:6a:34:55:9c:c3: ee:01:6f:4d:58:49:55:1e:65:6f:61:35:68:d0:0c: b8:dd:88:5a:43:36:6b:d4:04:af:ff:26:a0:0a:6e: 5c:af:5c:68:87:29:5e:16:59:7b:64:dd:5f:24:39: b3:59:e3:f3:5e:2b:eb:f4:c7:5e:e3:b0:19:51:d3: af:39:8b:4c:48:8c:1b:1a:6f:0a:f0:4e:11:bf:7d: 18:ac:52:28:f7:79:52:c9:cb:4a:5b:82:30:ee:2f: 10:a9:cb:36:4f:00:df:71:54:64:61:1f:ca:2c:84: 6b:1f:a1:ab:0f:a7:98:43:92:c3:b8:24:73:40:6b: 41:f3:79:93:6b:fd:9e:c7:82:b7:b1:b0:3a:d0:20: 4b:24:74:27:1b:da:0e:91:0f:17:e7:84:60:d8:29: d2:b1:34:29:05:7c:c2:5a:83:c0:2c:ba:ab:c5:cd: 79:99:17:ca:44:8c:6c:3e:77:28:29:0a:1b:ce:4a: ef:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D2:72:3F:89:C5:64:F5:27:EA:E6:12:93:AA:89:95:98:5F:7A:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/be931e1e-3dcb-3f67-a724-75cfcc6c26c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:e5:27:9f:42:d9:24:a5:3b:d0:b0:4f:42:7c:bb:de:fa:0d: 9f:f7:87:9a:61:8d:45:3f:2d:06:7e:ec:ce:9b:31:82:8f:99: e3:69:89:39:e6:36:88:3e:8a:95:d5:2a:ca:a5:5f:7a:82:72: 47:38:50:2a:bb:b6:46:bd:e1:7f:5a:02:02:22:7a:8b:d2:33: ce:79:7f:ae:49:b6:95:b0:56:30:4f:e0:f7:20:3f:42:35:c7: 6b:1b:df:93:fa:99:39:b8:d4:35:c6:18:1a:98:01:9e:2b:ce: ab:42:34:e3:74:1d:d0:9a:b3:ae:77:d4:71:1e:ad:d5:f1:21: fe:0a:93:43:04:b4:b1:d3:e0:21:84:ac:c2:22:06:4c:b7:e7: 16:aa:13:19:6e:56:7f:66:0f:1e:c2:a0:3f:5f:8f:19:b9:0a: 1c:44:18:bd:f0:8a:6c:d4:bc:bb:df:70:e4:73:47:5f:21:73: 8b:fa:ad:ff:bc:da:f4:90:92:75:c0:b1:37:ca:e6:c7:81:2a: d4:9e:22:5d:68:70:a0:a6:ca:8d:17:e7:83:b5:ea:e4:c3:46: 06:25:77:b2:ac:af:96:ac:f7:5e:4e:39:a9:c5:f8:4e:eb:a2: 9f:7a:17:b8:b9:0b:58:15:e3:63:ea:d9:89:4e:3a:28:b6:c1: 41:5e:62:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEub+VC5Fi+R5wGjrCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyMjE5MjAyMFoXDTI2MDEyMDIwMjAyMFowLzEtMCsGA1UEAxMk NTgxNmFiN2MtYTliNS00MTUzLWE0ZGItNjRkNTMzMTQ4MGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjgTBaFfcKELsYsjsx7M3Xg5S9pCLNfsHYgX lq1oqjDsC4YlNdBrLwogHFhAH3ubJbQALZ7Q9CHBubwDtuoaFvKTcZlIajRVnMPu AW9NWElVHmVvYTVo0Ay43YhaQzZr1ASv/yagCm5cr1xohyleFll7ZN1fJDmzWePz Xivr9Mde47AZUdOvOYtMSIwbGm8K8E4Rv30YrFIo93lSyctKW4Iw7i8Qqcs2TwDf cVRkYR/KLIRrH6GrD6eYQ5LDuCRzQGtB83mTa/2ex4K3sbA60CBLJHQnG9oOkQ8X 54Rg2CnSsTQpBXzCWoPALLqrxc15mRfKRIxsPncoKQobzkrv3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfScj+JxWT1J+rmEpOqiZWYX3rOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYmU5MzFlMWUtM2RjYi0z ZjY3LWE3MjQtNzVjZmNjNmMyNmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrlJ59C2SSlO9CwT0J8u976DZ/3h5phjUU/LQZ+7M6bMYKPmeNpiTnm Nog+ipXVKsqlX3qCckc4UCq7tka94X9aAgIieovSM855f65JtpWwVjBP4PcgP0I1 x2sb35P6mTm41DXGGBqYAZ4rzqtCNON0HdCas6531HEerdXxIf4Kk0MEtLHT4CGE rMIiBky35xaqExluVn9mDx7CoD9fjxm5ChxEGL3wimzUvLvfcORzR18hc4v6rf+8 2vSQknXAsTfK5seBKtSeIl1ocKCmyo0X54O16uTDRgYld7Ksr5as915OOanF+E7r op96F7i5C1gV42Pq2YlOOii2wUFeYv8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:44:39 2025 by rpki-client