$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c6efaf2a-6ab4-3e2f-8960-57ff3cc003ac.roa File: c6efaf2a-6ab4-3e2f-8960-57ff3cc003ac.roa (raw, json) Hash identifier: wMDASjHmQe0y9rtZYffKFRd3FLEzYSCOBQg7zAtXwzs= Subject key identifier: 56:B0:81:EE:AC:BE:9B:5E:0D:5F:14:D5:A4:81:80:AE:36:B3:F5:E5 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584F7178958168632E797BB83180 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c6efaf2a-6ab4-3e2f-8960-57ff3cc003ac.roa Signing time: Fri 09 Oct 2026 09:04:45 +0000 ROA not before: Fri 09 Oct 2026 09:04:45 +0000 ROA not after: Thu 07 Jan 2027 10:04:45 +0000 asID: 55256 IP address blocks: 158.95.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:78:95:81:68:63:2e:79:7b:b8:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 9 09:04:45 2026 GMT Not After : Jan 7 10:04:45 2027 GMT Subject: CN=67acb861-5b37-4147-a1e7-a1362207a3b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:72:c5:44:8b:70:af:99:cd:6d:49:4b:94:80: 07:3f:b6:aa:47:9c:b7:d2:ed:e8:01:34:06:5e:9f: f2:48:54:57:ba:61:61:2c:98:10:d2:76:30:56:18: c1:40:8e:a3:64:f2:df:e5:6a:91:54:51:26:19:18: 2c:91:2d:1e:8c:8c:50:59:fa:5f:60:32:85:f3:bf: 7d:48:dd:71:dc:53:ca:47:60:17:49:6d:5b:f2:7d: d5:f6:e6:f9:e3:e6:09:a0:e6:f8:54:ec:39:3b:7e: b6:58:63:eb:26:b4:d9:a0:67:c7:50:ff:f3:de:62: 94:8c:c9:30:fe:6d:3c:f0:8b:83:0a:90:08:14:78: f7:96:b8:f0:15:dc:b7:1b:88:05:dc:a6:d1:49:f7: 69:39:d7:41:1b:c8:2d:14:97:19:a9:47:3e:45:10: 5d:ad:6d:e8:f3:2a:0a:46:fa:d3:2f:0a:05:e3:f2: 23:c3:bb:ca:c9:4f:ed:ae:c4:56:4c:d9:1c:9f:a2: eb:4d:0c:58:6e:b2:89:3a:a1:cf:ad:e2:f5:96:88: fb:32:0c:bf:06:01:85:dd:c3:b6:72:e6:56:20:79: a2:be:b6:d8:1f:22:20:09:0b:f5:67:8a:b9:4f:50: 6b:17:15:1f:64:ad:6a:ff:33:bc:c8:da:1a:47:47: 82:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B0:81:EE:AC:BE:9B:5E:0D:5F:14:D5:A4:81:80:AE:36:B3:F5:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/c6efaf2a-6ab4-3e2f-8960-57ff3cc003ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d7:07:4e:ee:3d:7c:a1:73:ca:75:d8:19:20:22:77:69:68: 4f:1d:3c:1f:51:45:65:5f:db:9d:90:4e:de:9e:32:30:e8:08: db:cd:9e:66:6d:36:d5:85:68:2f:49:be:bc:8d:5b:c8:d5:da: 04:89:d5:e5:34:f3:0e:26:50:e9:f5:d6:dc:9d:bb:46:97:32: 91:75:d2:d8:40:c0:af:33:2e:e1:4a:9a:38:c3:0e:62:cd:10: a0:a2:f0:96:c5:a8:6e:d6:8c:34:18:47:d5:44:94:d1:8b:99: e7:0b:3e:c9:11:8f:ce:b2:5b:85:1a:11:d4:e2:b1:f9:d5:65: c1:26:b1:a4:37:e8:9c:6d:a4:1c:d2:73:eb:d3:15:28:b0:91: 72:12:a8:dc:08:ee:5d:5f:ad:cd:a7:4b:17:5d:59:63:41:d2: 89:36:83:2e:6b:32:bb:62:f0:6c:9a:4d:ea:53:eb:86:58:21: 35:92:33:09:ba:35:29:18:7f:bf:d2:fd:fe:64:48:23:e3:87: 8e:82:b1:1d:5d:49:35:27:c1:00:4f:02:41:5f:e9:29:2b:8d: ac:6e:68:f7:1e:ad:65:81:94:2e:15:ce:b8:88:46:b2:65:b7: 9b:99:06:ff:77:4e:7a:1c:51:3d:e9:f8:bf:91:ec:d8:98:09: d0:1f:85:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9xeJWBaGMueXu4MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MTAwOTA5MDQ0NVoXDTI3MDEwNzEwMDQ0NVowLzEtMCsGA1UEAxMk NjdhY2I4NjEtNWIzNy00MTQ3LWExZTctYTEzNjIyMDdhM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXLFRItwr5nNbUlLlIAHP7aqR5y30u3oATQG Xp/ySFRXumFhLJgQ0nYwVhjBQI6jZPLf5WqRVFEmGRgskS0ejIxQWfpfYDKF8799 SN1x3FPKR2AXSW1b8n3V9ub54+YJoOb4VOw5O362WGPrJrTZoGfHUP/z3mKUjMkw /m088IuDCpAIFHj3lrjwFdy3G4gF3KbRSfdpOddBG8gtFJcZqUc+RRBdrW3o8yoK RvrTLwoF4/Ijw7vKyU/trsRWTNkcn6LrTQxYbrKJOqHPreL1loj7Mgy/BgGF3cO2 cuZWIHmivrbYHyIgCQv1Z4q5T1BrFxUfZK1q/zO8yNoaR0eCXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFawge6svpteDV8U1aSBgK42s/XlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvYzZlZmFmMmEtNmFiNC0z ZTJmLTg5NjAtNTdmZjNjYzAwM2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnl8qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjXB07uPXyhc8p12BkgIndpaE8dPB9RRWVf252QTt6eMjDoCNvNnmZt NtWFaC9JvryNW8jV2gSJ1eU08w4mUOn11tydu0aXMpF10thAwK8zLuFKmjjDDmLN EKCi8JbFqG7WjDQYR9VElNGLmecLPskRj86yW4UaEdTisfnVZcEmsaQ36JxtpBzS c+vTFSiwkXISqNwI7l1frc2nSxddWWNB0ok2gy5rMrti8GyaTepT64ZYITWSMwm6 NSkYf7/S/f5kSCPjh46CsR1dSTUnwQBPAkFf6SkrjaxuaPcerWWBlC4VzriIRrJl t5uZBv93TnocUT3p+L+R7NiYCdAfhVc= -----END CERTIFICATE-----Generated at Mon Oct 12 19:45:07 2026 by rpki-client