$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa File: debdf6c7-81b5-37a8-9d67-848a65563f4a.roa (raw, json) Hash identifier: hRXPUiZLR5gR6i/u2UQAI/OF9utpj1mDJ3onMYW1H/A= Subject key identifier: F8:C4:65:84:94:7B:08:B6:9F:45:F7:BC:0F:21:F8:7E:CC:3C:5C:66 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD9409E015F51479FBF54DC0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa Signing time: Wed 29 Oct 2025 02:40:49 +0000 ROA not before: Wed 29 Oct 2025 02:40:49 +0000 ROA not after: Tue 27 Jan 2026 03:40:49 +0000 asID: 55256 IP address blocks: 158.95.164.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:94:09:e0:15:f5:14:79:fb:f5:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:40:49 2025 GMT Not After : Jan 27 03:40:49 2026 GMT Subject: CN=3d60b8d8-a06b-46a8-9984-a23edb5c9e18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:19:26:16:ab:0a:62:41:8f:33:ed:17:9e:76: af:9d:a5:6c:1f:da:36:d8:1a:95:c7:98:52:26:ae: 48:b4:00:d5:32:2b:a4:ab:ae:cc:59:17:97:fc:9e: 00:59:6d:5e:f7:bc:87:81:43:be:dc:e0:82:b5:55: 41:8e:e8:af:b5:d3:3d:35:bc:bf:5c:e3:07:5b:69: 21:b0:3a:db:de:66:65:fc:46:d8:38:66:89:55:29: 52:aa:d0:85:b9:0a:60:5f:1a:62:90:7e:f7:9c:60: d0:b7:9a:b9:6c:bb:85:ba:7d:ff:b9:4b:9f:fd:34: 79:76:04:c0:ab:24:35:6b:d6:b0:b1:81:3b:fe:6f: 3e:15:81:77:a0:fe:b3:74:30:6a:75:37:4c:1c:e0: 73:ac:80:60:5a:37:85:3b:d0:e1:49:0f:c8:d3:4e: 06:47:da:b2:b0:7a:01:46:4e:0c:03:1e:0c:3c:93: bf:ae:24:18:b4:09:90:4c:7c:a0:97:b1:ed:98:74: fe:3e:96:20:a2:58:f0:f8:28:cf:78:9e:19:60:6b: fe:67:c8:2a:48:8a:22:15:6c:91:61:37:f9:70:8c: f6:f6:f6:6e:f5:da:62:7f:0c:49:f7:7a:d4:d2:a9: 10:32:bd:08:fd:a5:b9:62:23:a8:6d:42:a1:1d:68: 69:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:C4:65:84:94:7B:08:B6:9F:45:F7:BC:0F:21:F8:7E:CC:3C:5C:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/debdf6c7-81b5-37a8-9d67-848a65563f4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.164.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:30:09:61:ad:39:70:37:6f:4a:4d:c4:94:a1:75:27:6d:84: c3:00:b0:ee:80:4e:7d:3e:fa:23:15:2b:1a:a3:fe:f1:45:13: b6:d1:c7:1d:f7:b8:ff:07:ef:3b:b2:0a:1f:33:f0:d1:3c:1a: ec:ea:e8:8e:4a:89:5d:f6:e7:5b:dc:8a:c7:a9:9f:5a:83:d7: 72:ee:fd:ef:fe:58:9d:9d:a9:4c:66:26:59:37:70:f2:35:64: 49:b3:c4:8f:50:dd:ff:a0:08:bb:27:28:76:99:99:bc:14:e3: 3a:7d:c8:44:28:66:13:21:26:b9:52:d7:f0:1b:1f:41:a8:25: cb:dc:81:77:43:be:fc:c6:b6:0a:f5:8f:0e:b1:f1:13:e3:e3: a4:5a:88:ce:b8:45:6f:73:92:98:b0:11:6e:2d:e2:e4:3e:90: 30:6f:0d:bd:91:7e:5e:36:f4:d3:e6:fb:1e:fe:a5:29:0b:cf: 79:8b:bf:15:53:47:bb:6d:47:81:4e:7b:e3:de:ea:96:b8:a2: e5:fc:7f:3a:cd:f7:3f:0b:f6:82:26:b5:0d:f9:b3:23:05:cd: d9:98:f8:07:af:9a:92:10:8a:ff:cf:32:f9:94:3c:78:c8:14: 19:af:51:33:cd:24:38:9e:00:f6:ba:2a:ad:92:36:9a:70:ba: da:ef:2b:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutlAngFfUUefv1TcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNDA0OVoXDTI2MDEyNzAzNDA0OVowLzEtMCsGA1UEAxMk M2Q2MGI4ZDgtYTA2Yi00NmE4LTk5ODQtYTIzZWRiNWM5ZTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBkmFqsKYkGPM+0XnnavnaVsH9o22BqVx5hS Jq5ItADVMiukq67MWReX/J4AWW1e97yHgUO+3OCCtVVBjuivtdM9Nby/XOMHW2kh sDrb3mZl/EbYOGaJVSlSqtCFuQpgXxpikH73nGDQt5q5bLuFun3/uUuf/TR5dgTA qyQ1a9awsYE7/m8+FYF3oP6zdDBqdTdMHOBzrIBgWjeFO9DhSQ/I004GR9qysHoB Rk4MAx4MPJO/riQYtAmQTHygl7HtmHT+PpYgoljw+CjPeJ4ZYGv+Z8gqSIoiFWyR YTf5cIz29vZu9dpifwxJ93rU0qkQMr0I/aW5YiOobUKhHWhp9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjEZYSUewi2n0X3vA8h+H7MPFxmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZGViZGY2YzctODFiNS0z N2E4LTlkNjctODQ4YTY1NTYzZjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADowCWGtOXA3b0pNxJShdSdthMMAsO6ATn0++iMVKxqj/vFFE7bRxx33 uP8H7zuyCh8z8NE8Guzq6I5KiV3251vcisepn1qD13Lu/e/+WJ2dqUxmJlk3cPI1 ZEmzxI9Q3f+gCLsnKHaZmbwU4zp9yEQoZhMhJrlS1/AbH0GoJcvcgXdDvvzGtgr1 jw6x8RPj46RaiM64RW9zkpiwEW4t4uQ+kDBvDb2Rfl429NPm+x7+pSkLz3mLvxVT R7ttR4FOe+Pe6pa4ouX8fzrN9z8L9oImtQ35syMFzdmY+AevmpIQiv/PMvmUPHjI FBmvUTPNJDieAPa6Kq2SNppwutrvKzg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:23 2025 by rpki-client