$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa File: f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa (raw, json) Hash identifier: Nxzwao4r7p1DbnqphbRul8wkQz4/vLJS13VKo1Q8Be0= Subject key identifier: 3D:CB:90:FA:23:D5:D2:B2:38:CE:6A:41:27:C9:4C:57:81:08:7D:34 Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584D4BF4F565F0038BBF06195B80 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 55256 IP address blocks: 158.95.142.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:f5:65:f0:03:8b:bf:06:19:5b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=fec08189-c97a-4710-9f96-3944edff913a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:58:d6:d7:6a:e7:c2:d6:56:8e:50:cd:2d:26: 1a:1b:c6:84:d4:c0:27:23:22:54:dd:71:a7:bf:13: 96:fc:dd:ef:f6:ff:49:bd:27:60:33:5b:27:8c:aa: 42:e2:3c:39:05:0d:31:ff:ee:b7:3a:41:e2:a0:75: de:3d:19:aa:10:b3:d4:16:32:6d:87:35:dd:f1:76: b7:1a:64:ab:1c:0a:35:0d:9a:1d:96:87:ca:dd:af: 82:68:73:76:c8:97:27:42:3b:15:cb:3d:d0:6c:77: 3b:f6:a3:0a:8e:21:0b:27:c4:28:e2:a5:38:6d:38: 81:e8:5f:4c:b8:4e:56:e8:e1:01:34:8e:64:f5:2f: d7:8d:22:3d:0e:3a:e3:db:25:13:30:98:a2:d0:e1: 3a:d8:a5:c2:3f:89:20:98:10:19:96:5c:08:78:64: 32:f9:25:69:35:c1:40:30:03:7e:5a:16:9d:ca:02: d8:7b:3e:8c:af:03:91:8d:7b:04:6a:68:41:1a:60: 64:47:55:e6:bc:47:de:43:d8:93:ca:78:9d:c8:2a: b3:0a:e5:fb:7a:19:77:da:6c:bc:f5:d3:42:10:f0: 39:f6:a8:5b:f4:07:3f:b0:97:bb:a1:ed:70:53:9c: f6:46:b2:bb:34:96:fa:7c:50:e1:ff:90:67:b2:9a: 5c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:CB:90:FA:23:D5:D2:B2:38:CE:6A:41:27:C9:4C:57:81:08:7D:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f35b210d-fbc7-3b2f-b3db-5c9930fb1f2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:06:06:f5:73:04:9d:e6:c0:13:fa:7f:1c:b4:8a:96:67:5a: ac:62:76:3b:2f:98:ea:eb:e6:86:86:7c:9e:f3:9f:b4:fc:18: 62:ac:89:f4:93:99:df:69:b8:62:12:71:ad:9d:09:36:d0:3b: ed:ee:ae:7a:45:31:e7:06:bb:1f:b5:5b:9b:a5:9c:f4:c4:df: 55:8e:13:00:fb:f4:97:89:08:6b:ba:1d:a5:f1:2e:c3:ca:19: c4:92:35:c5:19:24:53:be:b0:29:47:c5:5e:e7:c7:8b:93:6e: 1e:b2:95:73:ca:df:7b:fc:53:2f:d0:4b:76:43:12:27:a4:ff: ae:aa:88:bc:ca:50:a1:f8:17:aa:69:2d:29:c7:4a:a3:54:44: cb:f3:55:05:b4:db:48:97:c2:f6:d0:bd:ab:d4:7a:cf:05:a2: 01:d1:dc:49:bb:32:c1:66:77:82:08:c9:4a:54:25:d8:6c:cb: 96:15:66:28:b3:3f:fe:1f:28:09:0e:ca:17:5a:87:9c:6a:69: 39:5a:22:3a:86:5d:84:86:56:08:ff:9c:c3:48:f0:a9:f0:6d: d1:ee:b9:0f:4f:88:4d:91:aa:0e:07:45:fb:5b:99:d3:03:bd: f0:9d:a3:07:28:98:22:19:67:9c:4d:64:16:97:8c:9a:6f:e2: c1:ea:89:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1L9PVl8AOLvwYZW4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZmVjMDgxODktYzk3YS00NzEwLTlmOTYtMzk0NGVkZmY5MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVjW12rnwtZWjlDNLSYaG8aE1MAnIyJU3XGn vxOW/N3v9v9JvSdgM1snjKpC4jw5BQ0x/+63OkHioHXePRmqELPUFjJthzXd8Xa3 GmSrHAo1DZodlofK3a+CaHN2yJcnQjsVyz3QbHc79qMKjiELJ8Qo4qU4bTiB6F9M uE5W6OEBNI5k9S/XjSI9Djrj2yUTMJii0OE62KXCP4kgmBAZllwIeGQy+SVpNcFA MAN+WhadygLYez6MrwORjXsEamhBGmBkR1XmvEfeQ9iTynidyCqzCuX7ehl32my8 9dNCEPA59qhb9Ac/sJe7oe1wU5z2RrK7NJb6fFDh/5BnsppcjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3LkPoj1dKyOM5qQSfJTFeBCH00MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZjM1YjIxMGQtZmJjNy0z YjJmLWIzZGItNWM5OTMwZmIxZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwGBvVzBJ3mwBP6fxy0ipZnWqxidjsvmOrr5oaGfJ7zn7T8GGKsifST md9puGISca2dCTbQO+3urnpFMecGux+1W5ulnPTE31WOEwD79JeJCGu6HaXxLsPK GcSSNcUZJFO+sClHxV7nx4uTbh6ylXPK33v8Uy/QS3ZDEiek/66qiLzKUKH4F6pp LSnHSqNURMvzVQW020iXwvbQvavUes8FogHR3Em7MsFmd4IIyUpUJdhsy5YVZiiz P/4fKAkOyhdah5xqaTlaIjqGXYSGVgj/nMNI8KnwbdHuuQ9PiE2Rqg4HRftbmdMD vfCdowcomCIZZ5xNZBaXjJpv4sHqiao= -----END CERTIFICATE-----Generated at Mon Apr 6 13:56:52 2026 by rpki-client