$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/e255bd73-f6f7-3e91-8e22-a8f6c32f35eb.roa File: e255bd73-f6f7-3e91-8e22-a8f6c32f35eb.roa (raw, json) Hash identifier: xagsKdWC8EfMIY+7HtsNcYvBDNMrQSHDweIlgXo8wEs= Subject key identifier: 60:BC:2A:3B:49:D6:6E:12:BB:94:47:EB:DA:11:15:35:E7:AE:4B:A6 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D5CB4F78F2A154EF62E8CC640 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/e255bd73-f6f7-3e91-8e22-a8f6c32f35eb.roa Signing time: Wed 01 Apr 2026 13:00:30 +0000 ROA not before: Wed 01 Apr 2026 13:00:30 +0000 ROA not after: Tue 30 Jun 2026 13:00:30 +0000 asID: 55256 IP address blocks: 158.95.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5c:b4:f7:8f:2a:15:4e:f6:2e:8c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Apr 1 13:00:30 2026 GMT Not After : Jun 30 13:00:30 2026 GMT Subject: CN=b159fddc-4ba7-4af5-b2bc-64fb8bd43427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:3b:58:d0:15:eb:36:be:b7:c2:fb:0d:e2:88: 95:17:cf:33:70:d7:7d:7f:43:42:be:2e:d9:1a:ca: 8e:91:14:c2:34:de:70:6a:75:f7:7a:7a:1f:61:bf: 5c:fd:c9:15:8a:64:fa:82:fc:ca:71:de:fb:4e:82: 17:fe:25:d7:fe:d9:3b:14:51:24:bf:31:0c:f9:9b: 52:02:94:db:4f:a2:54:e8:45:cd:b8:15:64:a1:f6: 7d:a9:4f:4c:04:e4:f9:1e:d6:65:41:4a:61:3d:dd: 88:53:59:3a:fb:47:66:1b:4c:10:2f:c3:53:68:8b: 69:bc:dd:fc:82:b7:a2:aa:42:14:30:1b:ef:4b:8d: ad:5e:20:03:7d:28:5a:4f:23:38:45:a0:a7:4c:ae: 7f:bd:c5:cf:ae:3a:5a:eb:a5:1a:f7:75:d6:9c:2f: 88:66:5e:46:17:b6:df:f2:51:b3:2f:5b:59:f5:55: af:5d:d7:ad:a2:1a:aa:f8:6b:d6:c1:b1:f3:7d:42: 53:c6:f9:35:d3:04:76:41:ba:89:b9:1a:12:b2:ed: 94:8a:49:db:77:e2:ad:60:54:66:7d:56:6a:17:ef: b6:79:88:43:4f:e2:a1:12:4b:3c:75:f3:e0:ba:79: 41:88:51:57:da:4c:0b:6d:b1:37:29:15:d5:0d:2b: 44:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BC:2A:3B:49:D6:6E:12:BB:94:47:EB:DA:11:15:35:E7:AE:4B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/e255bd73-f6f7-3e91-8e22-a8f6c32f35eb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:7b:28:2b:8d:10:59:92:cf:b6:6a:77:7b:ae:53:bc:84:51: 3e:df:ad:21:12:dd:55:49:ce:89:87:87:19:40:6f:08:73:6e: 5c:44:27:b5:f3:84:16:b8:21:c4:3a:67:fa:34:7d:7c:59:d7: a1:85:ea:72:93:02:2e:bd:59:91:4c:a8:60:12:5d:1c:21:01: 73:86:29:e4:6a:88:a4:c2:c6:9b:a8:11:bd:1f:09:72:a7:c5: 44:a4:5f:85:4c:89:07:1d:84:32:81:3f:31:fb:b0:52:bd:7e: 1f:6b:b1:60:b2:ec:d8:17:5d:c4:a7:89:5b:2d:2c:23:a5:e7: ed:a2:72:d8:e5:27:72:43:82:dc:67:38:e0:bc:c5:a0:d7:13: 34:48:09:4f:d6:dd:5a:d7:f3:57:2b:d8:eb:20:0b:1e:46:61: 71:6e:14:b8:0c:81:e6:77:58:f2:da:7c:5e:81:3b:e5:d6:18: 18:10:a4:b6:bd:1a:f6:b1:3b:9d:26:10:57:2c:94:73:80:f9: ba:9f:cc:2d:e9:e3:c1:e5:24:8c:92:97:f5:0a:e8:6b:f6:40: 89:7d:f7:92:15:c3:48:55:4f:ff:9c:cf:fe:f7:4b:d9:87:7f: 23:9b:1f:a4:d7:a1:4d:6b:43:6d:5b:7b:2b:07:9b:7f:44:31: ca:14:4f:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ctPePKhVO9i6MxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDQwMTEzMDAzMFoXDTI2MDYzMDEzMDAzMFowLzEtMCsGA1UEAxMk YjE1OWZkZGMtNGJhNy00YWY1LWIyYmMtNjRmYjhiZDQzNDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjztY0BXrNr63wvsN4oiVF88zcNd9f0NCvi7Z GsqOkRTCNN5wanX3enofYb9c/ckVimT6gvzKcd77ToIX/iXX/tk7FFEkvzEM+ZtS ApTbT6JU6EXNuBVkofZ9qU9MBOT5HtZlQUphPd2IU1k6+0dmG0wQL8NTaItpvN38 greiqkIUMBvvS42tXiADfShaTyM4RaCnTK5/vcXPrjpa66Ua93XWnC+IZl5GF7bf 8lGzL1tZ9VWvXdetohqq+GvWwbHzfUJTxvk10wR2QbqJuRoSsu2Uiknbd+KtYFRm fVZqF++2eYhDT+KhEks8dfPgunlBiFFX2kwLbbE3KRXVDStEMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC8KjtJ1m4Su5RH69oRFTXnrkumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZTI1NWJkNzMtZjZmNy0z ZTkxLThlMjItYThmNmMzMmYzNWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGd7KCuNEFmSz7Zqd3uuU7yEUT7frSES3VVJzomHhxlAbwhzblxEJ7Xz hBa4IcQ6Z/o0fXxZ16GF6nKTAi69WZFMqGASXRwhAXOGKeRqiKTCxpuoEb0fCXKn xUSkX4VMiQcdhDKBPzH7sFK9fh9rsWCy7NgXXcSniVstLCOl5+2ictjlJ3JDgtxn OOC8xaDXEzRICU/W3VrX81cr2OsgCx5GYXFuFLgMgeZ3WPLafF6BO+XWGBgQpLa9 GvaxO50mEFcslHOA+bqfzC3p48HlJIySl/UK6Gv2QIl995IVw0hVT/+cz/73S9mH fyObH6TXoU1rQ21beysHm39EMcoUT1s= -----END CERTIFICATE-----Generated at Mon Apr 6 13:57:21 2026 by rpki-client