$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f4bb343c-c12d-33fa-9ddf-aad7be28b8bc.roa File: f4bb343c-c12d-33fa-9ddf-aad7be28b8bc.roa (raw, json) Hash identifier: 09TLc9yzjHhvp9Do0iaKT4Sqz+bkwGrjI024lDbHNLg= Subject key identifier: A6:DA:B8:E6:DD:C3:1A:27:52:25:E9:E9:37:80:86:67:41:22:62:9C Certificate issuer: /CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Certificate serial: 010D0C9F4328584BAD93BDC69308BA1FDB9E96B0 Authority key identifier: 27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f4bb343c-c12d-33fa-9ddf-aad7be28b8bc.roa Signing time: Wed 29 Oct 2025 02:40:13 +0000 ROA not before: Wed 29 Oct 2025 02:40:13 +0000 ROA not after: Tue 27 Jan 2026 03:40:13 +0000 asID: 55256 IP address blocks: 158.95.160.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:ad:93:bd:c6:93:08:ba:1f:db:9e:96:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a773147e-548c-4c30-a3fe-91c723e2cad9 Validity Not Before: Oct 29 02:40:13 2025 GMT Not After : Jan 27 03:40:13 2026 GMT Subject: CN=33e79613-4b1f-41d8-b2ef-8f0e463cab3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:0f:1b:1e:f3:ae:fe:58:21:94:e6:d1:58: 9d:d8:b1:d4:d8:d6:af:c8:a9:e7:ef:b3:49:65:1e: 43:76:79:82:36:09:39:b9:2b:88:f9:2e:c1:18:3e: 35:ee:e9:15:12:cc:44:cb:27:d5:e6:52:83:ec:51: 77:81:7b:50:c2:0a:32:6a:0e:85:46:b5:43:1b:2a: 91:11:63:3c:88:6d:7c:c1:92:e8:d3:5a:d6:76:56: dc:23:5d:97:30:3a:28:6c:39:37:33:1c:e8:d9:8b: 10:fd:0d:5e:f8:76:4d:5f:97:4a:25:c5:ed:68:c7: 98:93:e1:01:0e:f7:bd:b9:d2:a1:e3:1f:2e:11:53: 03:ab:d6:17:52:78:a5:06:80:e5:e4:05:18:0f:f2: 1b:d4:08:7e:c6:cb:88:6a:44:5e:81:92:d8:78:98: 39:df:80:2d:c3:6b:d2:b3:b1:a1:50:78:74:d5:f9: f6:4a:bc:67:57:7f:9a:3c:d3:fc:ec:be:e7:06:ec: 75:ed:9e:85:18:64:43:cb:e3:17:1d:da:b0:99:40: 48:fb:5c:1f:bc:7d:c4:57:f4:59:54:a3:44:a5:e7: e1:d8:6a:e1:f6:24:c3:85:5e:ec:d4:3a:62:b1:8a: 0d:41:7e:7f:d6:db:a9:79:0c:42:0e:26:9f:bd:14: 9d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:DA:B8:E6:DD:C3:1A:27:52:25:E9:E9:37:80:86:67:41:22:62:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/f4bb343c-c12d-33fa-9ddf-aad7be28b8bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9/a773147e-548c-4c30-a3fe-91c723e2cad9.crl X509v3 Authority Key Identifier: keyid:27:61:96:75:A4:BE:0F:18:46:6E:AA:84:1E:AB:9E:48:23:E2:68:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a773147e-548c-4c30-a3fe-91c723e2cad9.cer sbgp-ipAddrBlock: critical IPv4: 158.95.160.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:3d:18:2b:c2:a9:ba:1e:e4:c4:49:ee:a5:d8:5f:a8:f5:51: 05:4b:3b:a1:c3:d9:11:53:d2:8b:d2:86:a2:a2:7b:e9:b6:35: 69:a5:c2:2b:48:18:5d:f4:c8:c2:e4:e4:40:81:8b:8b:4e:2b: ee:ad:d5:16:c5:f2:45:47:a5:f2:c6:15:5d:85:8a:98:81:3a: 7f:ca:c3:c0:14:b8:8e:46:87:bb:d5:06:53:90:79:f7:4e:3b: ca:0c:13:35:37:2d:cd:d8:0d:1b:72:95:81:97:5a:92:dd:3f: d3:0c:05:45:8d:c3:30:c0:51:42:19:72:89:16:dd:c9:3c:98: 4d:2a:67:04:ac:cf:31:4d:fb:cb:7a:5a:18:a1:1e:92:44:fe: 0c:58:1b:35:4a:5d:8c:0e:80:03:3f:c3:7e:b2:2f:1a:64:88: da:31:3d:c6:c0:de:f4:67:19:54:de:c2:4a:f7:a3:25:95:28: b7:32:80:af:cc:80:87:bf:c7:f8:8d:35:ae:e7:47:81:3c:4a: e5:1c:ed:d3:2c:4f:d6:ee:4c:db:1e:9a:ec:2b:c1:37:a0:20: b4:98:32:2c:ff:c6:d2:ce:e4:6f:57:88:97:6b:2a:2a:9a:99: 0c:4e:05:08:f4:66:54:c7:76:bc:eb:8e:dc:09:9d:d8:ef:08: 08:e2:cf:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEutk73Gkwi6H9uelrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTc3MzE0N2UtNTQ4Yy00YzMwLWEzZmUtOTFjNzIzZTJj YWQ5MB4XDTI1MTAyOTAyNDAxM1oXDTI2MDEyNzAzNDAxM1owLzEtMCsGA1UEAxMk MzNlNzk2MTMtNGIxZi00MWQ4LWIyZWYtOGYwZTQ2M2NhYjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLAPGx7zrv5YIZTm0Vid2LHU2NavyKnn77NJ ZR5DdnmCNgk5uSuI+S7BGD417ukVEsxEyyfV5lKD7FF3gXtQwgoyag6FRrVDGyqR EWM8iG18wZLo01rWdlbcI12XMDoobDk3Mxzo2YsQ/Q1e+HZNX5dKJcXtaMeYk+EB Dve9udKh4x8uEVMDq9YXUnilBoDl5AUYD/Ib1Ah+xsuIakRegZLYeJg534Atw2vS s7GhUHh01fn2SrxnV3+aPNP87L7nBux17Z6FGGRDy+MXHdqwmUBI+1wfvH3EV/RZ VKNEpefh2Grh9iTDhV7s1DpisYoNQX5/1tupeQxCDiafvRSdmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKbauObdwxonUiXp6TeAhmdBImKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzcz MTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3MjNlMmNhZDkvZjRiYjM0M2MtYzEyZC0z M2ZhLTlkZGYtYWFkN2JlMjhiOGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTc3MzE0N2UtNTQ4Yy00YzMwLWEz ZmUtOTFjNzIzZTJjYWQ5L2E3NzMxNDdlLTU0OGMtNGMzMC1hM2ZlLTkxYzcyM2Uy Y2FkOS5jcmwwHwYDVR0jBBgwFoAUJ2GWdaS+DxhGbqqEHqueSCPiaKUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNzczMTQ3ZS01NDhjLTRjMzAtYTNmZS05MWM3 MjNlMmNhZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnl+gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABg9GCvCqboe5MRJ7qXYX6j1UQVLO6HD2RFT0ovShqKie+m2NWmlwitI GF30yMLk5ECBi4tOK+6t1RbF8kVHpfLGFV2FipiBOn/Kw8AUuI5Gh7vVBlOQefdO O8oMEzU3Lc3YDRtylYGXWpLdP9MMBUWNwzDAUUIZcokW3ck8mE0qZwSszzFN+8t6 WhihHpJE/gxYGzVKXYwOgAM/w36yLxpkiNoxPcbA3vRnGVTewkr3oyWVKLcygK/M gIe/x/iNNa7nR4E8SuUc7dMsT9buTNsemuwrwTegILSYMiz/xtLO5G9XiJdrKiqa mQxOBQj0ZlTHdrzrjtwJndjvCAjiz3c= -----END CERTIFICATE-----Generated at Wed Nov 5 10:41:49 2025 by rpki-client