$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa File: d177a416-7a94-37d4-ba55-539cc57aa5b5.roa (raw, json) Hash identifier: PpCOYESVOSnmaqQX5/km1/cMZJRAEK7W4ZUGo48XLko= Subject key identifier: 03:08:62:45:48:75:7A:79:C5:56:92:81:40:33:4D:F4:3D:90:2F:B6 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D5CB4F3E6F229B52C08008530 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 55256 IP address blocks: 158.95.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f3:e6:f2:29:b5:2c:08:00:85:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=41dbe1af-50c5-4613-8878-3d6bdc09cec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:10:07:1c:ae:b4:0d:b9:42:fe:f1:31:7b:8b: 15:9f:f1:82:79:c0:4a:8c:5e:84:71:78:3c:f1:21: 09:75:74:64:09:be:6b:c0:86:fc:7e:c0:67:7d:70: 24:bf:e8:91:05:9b:39:6e:50:70:41:ed:9e:e4:4a: 4b:d8:b1:8a:77:1e:f7:42:f9:64:82:c0:7d:44:ab: 4c:b8:86:c9:9c:e2:8a:6d:3f:71:34:c1:4b:71:ee: 64:36:97:45:6d:75:c7:ef:c1:21:37:49:5f:59:9f: d0:c8:b7:b5:70:a8:ea:3c:27:77:ec:23:6b:23:34: 09:de:2b:fc:88:38:01:56:f3:f2:20:05:78:73:0b: f8:13:35:f2:a9:fa:22:99:2a:28:67:10:1b:2f:9e: 2a:91:0b:82:db:9a:31:f8:e1:f7:5a:f9:dd:74:ed: f0:d7:cf:4e:f4:32:56:f5:88:fb:79:bb:af:06:ec: ee:a6:5a:40:8a:c7:e8:a8:68:9c:05:18:90:2a:27: 26:74:b1:5b:fd:dd:21:a8:b5:99:a4:21:73:4d:2f: e4:48:d1:9d:79:d0:87:07:c9:5d:87:df:9e:b6:ad: 54:09:27:e4:b6:e1:d1:d5:48:97:89:c5:21:d6:8b: 67:b3:9b:ca:34:92:b6:69:1d:47:f4:cf:ef:25:81: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:62:45:48:75:7A:79:C5:56:92:81:40:33:4D:F4:3D:90:2F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/d177a416-7a94-37d4-ba55-539cc57aa5b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5a:6a:44:2e:89:de:4b:3e:21:5d:02:e0:7f:11:53:22:79: 15:20:c3:fb:9c:18:32:b2:9c:de:e8:47:73:92:e1:78:26:7a: 1a:2e:25:30:12:09:00:88:50:68:e1:64:d5:43:80:3e:67:01: 71:3f:ae:2a:80:18:84:b5:38:6f:2c:94:a4:4b:ef:72:9d:cf: 55:a7:83:94:16:f1:17:5a:af:5b:5d:d9:1d:6d:0b:67:97:8d: 19:9a:a6:0d:60:4f:11:be:26:f8:a2:dc:1f:42:23:39:32:38: ca:9f:32:95:2b:a7:0b:e6:c7:e3:71:a4:67:14:57:af:84:18: c7:a4:6d:72:7f:91:8c:7f:dd:dc:60:8f:49:d8:ad:2a:cc:c3: 27:fd:dd:71:24:25:54:0e:a6:be:7a:7c:26:0e:43:63:3e:1c: 11:61:8d:41:bc:09:dc:37:dc:d1:ac:f5:a5:ed:ff:66:40:fe: 79:5c:b1:86:f8:e2:a5:ee:a5:46:d3:c1:ed:70:5e:c9:74:42: 1e:f6:34:05:45:8b:08:53:a6:2b:ac:3b:b5:c9:9a:48:4f:56: 85:8b:2b:96:00:9a:08:bf:c0:47:8d:65:3e:d0:64:3b:23:b0: 52:54:9a:ac:f2:1b:35:f0:f2:18:c6:7a:db:32:41:7b:23:1d: 32:04:fb:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPPm8im1LAgAhTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk NDFkYmUxYWYtNTBjNS00NjEzLTg4NzgtM2Q2YmRjMDljZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixAHHK60DblC/vExe4sVn/GCecBKjF6EcXg8 8SEJdXRkCb5rwIb8fsBnfXAkv+iRBZs5blBwQe2e5EpL2LGKdx73QvlkgsB9RKtM uIbJnOKKbT9xNMFLce5kNpdFbXXH78EhN0lfWZ/QyLe1cKjqPCd37CNrIzQJ3iv8 iDgBVvPyIAV4cwv4EzXyqfoimSooZxAbL54qkQuC25ox+OH3WvnddO3w189O9DJW 9Yj7ebuvBuzuplpAisfoqGicBRiQKicmdLFb/d0hqLWZpCFzTS/kSNGdedCHB8ld h9+etq1UCSfktuHR1UiXicUh1otns5vKNJK2aR1H9M/vJYEjJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMIYkVIdXp5xVaSgUAzTfQ9kC+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZDE3N2E0MTYtN2E5NC0z N2Q0LWJhNTUtNTM5Y2M1N2FhNWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNaakQuid5LPiFdAuB/EVMieRUgw/ucGDKynN7oR3OS4XgmehouJTAS CQCIUGjhZNVDgD5nAXE/riqAGIS1OG8slKRL73Kdz1Wng5QW8Rdar1td2R1tC2eX jRmapg1gTxG+Jvii3B9CIzkyOMqfMpUrpwvmx+NxpGcUV6+EGMekbXJ/kYx/3dxg j0nYrSrMwyf93XEkJVQOpr56fCYOQ2M+HBFhjUG8Cdw33NGs9aXt/2ZA/nlcsYb4 4qXupUbTwe1wXsl0Qh72NAVFiwhTpiusO7XJmkhPVoWLK5YAmgi/wEeNZT7QZDsj sFJUmqzyGzXw8hjGetsyQXsjHTIE+8A= -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:00 2026 by rpki-client