$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa File: cd794d81-886f-3da5-a4dc-0c0909057b69.roa (raw, json) Hash identifier: y5BP4deJiXUghrUOWuu2pmxuJuvNI5qAPcLJ1GbFi3U= Subject key identifier: 2A:F7:1D:71:F9:3D:DD:88:D4:ED:FC:86:4C:CF:28:C4:7E:36:8F:F2 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584EF1822E51535A26189A940700 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 55256 IP address blocks: 158.95.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:82:2e:51:53:5a:26:18:9a:94:07:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=7f9790d1-5965-4354-8cfd-3e9d6ef84669 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:46:a2:cd:10:86:2c:eb:3a:a9:82:d4:72:6a: 37:df:66:6c:fb:78:2f:d0:f3:dd:a9:d3:2f:af:23: 63:4c:01:7a:51:a5:bf:8a:4c:5e:44:80:c3:f8:8f: d4:d0:8c:bd:33:56:e9:66:6d:7f:f3:0a:c0:34:f6: 64:e9:92:87:a0:d7:b8:b5:15:fa:6b:74:6e:c0:84: 9f:b2:0e:7f:e8:20:f5:fc:5e:02:85:d1:ba:8e:d8: 88:e2:18:50:57:ef:3c:03:71:fe:74:dd:47:2b:f5: 7d:a7:d2:1f:0f:f4:21:ec:0b:67:98:46:a2:18:5e: bd:99:78:c9:7d:28:16:3d:a3:0e:19:48:87:bd:aa: 0b:19:84:e3:bb:50:ce:87:50:b0:02:b2:df:3d:7f: 32:6a:38:90:f5:05:21:09:51:97:ea:79:b7:13:04: 05:8c:76:9d:f1:48:ff:24:63:e8:c2:b0:f9:18:1c: 91:60:33:d2:1f:8a:62:e2:ab:60:fa:cc:69:a6:02: 89:f7:bf:51:24:64:a1:02:ff:54:16:12:66:8a:43: 78:05:dc:31:49:59:fe:63:81:7d:f0:af:f1:a5:98: f5:05:b4:9b:19:9b:65:fd:5f:7f:df:1d:63:8a:36: fb:cf:72:f1:44:d1:88:d3:14:9d:c7:4a:92:dc:ed: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F7:1D:71:F9:3D:DD:88:D4:ED:FC:86:4C:CF:28:C4:7E:36:8F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/cd794d81-886f-3da5-a4dc-0c0909057b69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:97:5e:9c:b0:67:3c:0c:66:b1:0f:0c:7e:98:e5:76:33:94: 0c:79:c4:cd:39:2a:83:7e:3e:0e:04:25:46:09:79:b4:8b:20: aa:e0:ed:01:66:94:56:16:79:ac:75:0c:e7:6b:bc:1b:91:b3: 89:89:06:f5:a6:ee:50:6f:4c:be:f1:03:f7:13:50:69:33:44: bd:be:a3:c5:00:b9:71:b2:b7:1a:0d:d5:e0:2d:5b:ed:2a:e1: 9f:dd:71:68:6b:50:ae:1e:5b:53:ad:50:4a:e5:62:f8:36:cc: b0:74:9d:e7:57:2b:4c:e6:11:19:7a:da:f2:5d:83:3a:87:bf: d7:21:bd:a8:b8:b7:4a:7a:83:52:e4:ff:33:8d:27:b2:20:53: 9a:7e:97:2a:66:b1:13:5e:c8:1e:51:4d:1a:64:b5:81:eb:12: f7:82:40:f1:67:51:80:da:82:fc:0c:5c:34:6c:03:f0:31:e1: 2e:8b:c0:10:07:64:d5:a9:a6:cc:7f:97:c3:be:0f:d0:fe:b5: 81:8b:f6:63:4b:de:36:bb:3f:15:6d:07:cf:4d:1a:00:a7:38: 5f:6e:a2:9c:43:10:73:f9:55:a7:d6:2d:36:e0:46:e9:6d:81: 7c:e6:ca:d0:05:37:17:ea:0f:be:da:d1:fa:fb:ff:9f:11:83: 1b:2c:eb:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgi5RU1omGJqUBwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk N2Y5NzkwZDEtNTk2NS00MzU0LThjZmQtM2U5ZDZlZjg0NjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEaizRCGLOs6qYLUcmo332Zs+3gv0PPdqdMv ryNjTAF6UaW/ikxeRIDD+I/U0Iy9M1bpZm1/8wrANPZk6ZKHoNe4tRX6a3RuwISf sg5/6CD1/F4ChdG6jtiI4hhQV+88A3H+dN1HK/V9p9IfD/Qh7AtnmEaiGF69mXjJ fSgWPaMOGUiHvaoLGYTju1DOh1CwArLfPX8yajiQ9QUhCVGX6nm3EwQFjHad8Uj/ JGPowrD5GByRYDPSH4pi4qtg+sxppgKJ979RJGShAv9UFhJmikN4BdwxSVn+Y4F9 8K/xpZj1BbSbGZtl/V9/3x1jijb7z3LxRNGI0xSdx0qS3O1BqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCr3HXH5Pd2I1O38hkzPKMR+No/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvY2Q3OTRkODEtODg2Zi0z ZGE1LWE0ZGMtMGMwOTA5MDU3YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGXXpywZzwMZrEPDH6Y5XYzlAx5xM05KoN+Pg4EJUYJebSLIKrg7QFm lFYWeax1DOdrvBuRs4mJBvWm7lBvTL7xA/cTUGkzRL2+o8UAuXGytxoN1eAtW+0q 4Z/dcWhrUK4eW1OtUErlYvg2zLB0nedXK0zmERl62vJdgzqHv9chvai4t0p6g1Lk /zONJ7IgU5p+lypmsRNeyB5RTRpktYHrEveCQPFnUYDagvwMXDRsA/Ax4S6LwBAH ZNWppsx/l8O+D9D+tYGL9mNL3ja7PxVtB89NGgCnOF9uopxDEHP5VafWLTbgRult gXzmytAFNxfqD77a0fr7/58Rgxss66M= -----END CERTIFICATE-----Generated at Thu Aug 27 07:08:31 2026 by rpki-client