$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c29c8b83-da22-3d10-b442-6d355122c1fd.roa File: c29c8b83-da22-3d10-b442-6d355122c1fd.roa (raw, json) Hash identifier: q0qdvG9hkyHlHS3t38NrR5w49OhquITKZJp13HV2UGE= Subject key identifier: 16:8C:FF:2E:EE:A8:8A:62:50:E0:48:9E:D6:11:30:A6:F2:64:2C:9C Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD9392A7CFA33E23B48B2A80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c29c8b83-da22-3d10-b442-6d355122c1fd.roa Signing time: Wed 29 Oct 2025 02:39:53 +0000 ROA not before: Wed 29 Oct 2025 02:39:53 +0000 ROA not after: Tue 27 Jan 2026 03:39:53 +0000 asID: 55256 IP address blocks: 158.95.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:93:92:a7:cf:a3:3e:23:b4:8b:2a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:39:53 2025 GMT Not After : Jan 27 03:39:53 2026 GMT Subject: CN=b87dafce-0246-4d6c-bf2d-0ea7ec23fc00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bc:7d:d6:2a:a0:6c:4d:96:f6:09:1f:c0:c2: 82:3c:46:82:9d:d4:0f:47:34:2a:c3:a9:d4:ac:7f: 1e:50:3d:66:82:d6:c4:5e:de:03:04:49:31:2a:f4: 12:1e:90:58:d7:27:6a:2a:2f:16:7c:7b:eb:57:7f: 52:70:a1:3b:ca:3d:93:a8:19:8d:34:2f:62:51:93: 32:fb:49:80:ec:38:22:4f:8b:19:42:22:2c:16:f9: 08:a1:a8:7e:bf:61:2b:a7:19:71:5b:53:90:e3:fe: 49:2d:0e:cd:04:13:36:ec:d6:7f:b7:d4:ab:7f:60: 5c:63:a0:4c:b9:79:a3:6b:d9:bd:87:92:b4:ab:af: f4:3b:a7:56:c3:cf:90:43:14:7f:d5:d0:84:17:ef: f4:a9:14:2f:66:12:5e:f0:7b:8a:98:a7:e9:d0:fe: 87:25:71:a3:1e:d5:30:e9:7d:c5:7a:1f:68:4f:5c: f5:a7:3e:be:7e:34:33:1c:a1:62:81:c2:50:84:a9: 63:f2:68:18:b3:99:38:9f:41:7f:58:e5:ee:8e:9f: e6:b2:f0:33:6c:ec:f7:63:52:7c:09:31:eb:b8:91: e4:9a:81:6a:26:1c:2d:2a:0e:cd:9d:02:b2:19:97: 89:b2:ba:e8:f2:4c:42:d5:ce:e3:ba:75:34:4a:30: 16:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:8C:FF:2E:EE:A8:8A:62:50:E0:48:9E:D6:11:30:A6:F2:64:2C:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c29c8b83-da22-3d10-b442-6d355122c1fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:81:a1:75:71:25:0a:af:3b:ae:59:90:cc:f9:5f:6d:da:45: 5d:25:a9:e5:d5:66:74:17:a0:53:76:aa:d7:18:a3:db:ee:75: 59:75:a8:f9:1a:88:e7:a6:06:55:63:4b:38:a2:a6:b2:2b:cf: a0:93:4f:5b:9f:90:78:23:f1:92:4f:4e:7b:6f:e3:3c:65:7b: 4d:2f:6f:da:82:9c:2e:b1:cf:a7:7a:2b:ec:e4:c5:d6:6f:45: 29:75:a8:16:f0:70:56:0f:a4:46:5a:5f:ac:27:15:fe:38:8a: 63:cf:86:0b:90:6a:f6:c0:00:c9:08:bb:d4:32:9e:2d:74:b5: 12:ad:4e:da:e3:90:f8:dc:f1:24:55:db:12:c7:53:c6:e9:4e: cd:2d:ea:c9:d7:6e:25:df:92:d0:95:70:df:31:fb:ee:69:49: fb:7a:39:41:a0:9f:64:73:82:84:a6:92:08:ca:bb:c2:fa:c2: fb:e1:59:8e:e2:02:37:8a:50:d1:24:e3:15:d1:57:2c:7a:49: 0f:71:6a:60:a6:9a:86:8f:34:08:35:b5:c4:86:da:19:34:f3: 7d:d5:31:b2:93:6b:82:1f:ee:65:a2:79:c6:85:ee:d2:61:25: 42:f1:f9:2a:cc:8d:71:74:74:8a:0e:ab:26:62:78:02:86:fa: 8d:c8:e0:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutk5Knz6M+I7SLKoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyMzk1M1oXDTI2MDEyNzAzMzk1M1owLzEtMCsGA1UEAxMk Yjg3ZGFmY2UtMDI0Ni00ZDZjLWJmMmQtMGVhN2VjMjNmYzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLx91iqgbE2W9gkfwMKCPEaCndQPRzQqw6nU rH8eUD1mgtbEXt4DBEkxKvQSHpBY1ydqKi8WfHvrV39ScKE7yj2TqBmNNC9iUZMy +0mA7DgiT4sZQiIsFvkIoah+v2ErpxlxW1OQ4/5JLQ7NBBM27NZ/t9Srf2BcY6BM uXmja9m9h5K0q6/0O6dWw8+QQxR/1dCEF+/0qRQvZhJe8HuKmKfp0P6HJXGjHtUw 6X3Feh9oT1z1pz6+fjQzHKFigcJQhKlj8mgYs5k4n0F/WOXujp/msvAzbOz3Y1J8 CTHruJHkmoFqJhwtKg7NnQKyGZeJsrro8kxC1c7junU0SjAWUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaM/y7uqIpiUOBIntYRMKbyZCycMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYzI5YzhiODMtZGEyMi0z ZDEwLWI0NDItNmQzNTUxMjJjMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyBoXVxJQqvO65ZkMz5X23aRV0lqeXVZnQXoFN2qtcYo9vudVl1qPka iOemBlVjSziiprIrz6CTT1ufkHgj8ZJPTntv4zxle00vb9qCnC6xz6d6K+zkxdZv RSl1qBbwcFYPpEZaX6wnFf44imPPhguQavbAAMkIu9Qyni10tRKtTtrjkPjc8SRV 2xLHU8bpTs0t6snXbiXfktCVcN8x++5pSft6OUGgn2RzgoSmkgjKu8L6wvvhWY7i AjeKUNEk4xXRVyx6SQ9xamCmmoaPNAg1tcSG2hk0833VMbKTa4If7mWiecaF7tJh JULx+SrMjXF0dIoOqyZieAKG+o3I4CU= -----END CERTIFICATE-----Generated at Wed Nov 5 12:08:51 2025 by rpki-client