$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa File: 9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa (raw, json) Hash identifier: evQWPkAILevu6P6liq6yR9hHqeovcugBVIz0K0Qu/eQ= Subject key identifier: 76:9B:00:9E:BD:95:B7:2C:55:94:D0:74:11:05:90:84:B9:AA:01:95 Certificate issuer: /CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Certificate serial: 010D0C9F4328584D40CA494BE839FFB76F730200 Authority key identifier: 5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 27198 IP address blocks: 149.165.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:49:4b:e8:39:ff:b7:6f:73:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a95fce7e-65c2-466f-ae34-eadb8c72156b Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=bbb7e881-f4bc-4707-a8a0-72465bfaf353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:20:1c:a5:6c:f6:19:4c:3f:f8:9b:a2:cd:52: cb:c4:8a:55:50:00:fc:73:22:96:7b:a0:e3:de:a1: b2:20:91:9d:fa:39:06:5b:39:f8:97:69:a5:03:b0: 82:a2:d6:fb:38:a8:bc:f1:2f:c8:6e:1b:50:08:56: 4a:60:b5:92:53:1f:11:4d:4f:ee:a0:15:12:ef:a4: 65:69:76:aa:de:8e:65:0e:76:d0:c5:ab:e3:9c:42: 3b:45:42:b5:a9:bc:92:59:cc:41:df:67:ff:4d:f8: 27:92:eb:e8:09:53:12:d9:e4:9a:d4:70:a2:80:31: 39:65:91:fc:d9:84:0a:f1:ca:60:94:4e:db:66:b0: b1:70:12:d9:a9:00:e8:0b:77:ee:10:9e:a0:cb:fb: 4b:b7:71:d7:7d:b0:35:23:e6:fe:96:fe:f1:da:0f: 7d:b2:2c:82:53:28:d5:fc:60:3c:e7:5b:e9:c9:7f: 37:65:38:ee:ee:55:ac:a0:70:e1:8e:42:2d:56:99: 46:93:8c:ad:1b:4d:42:d6:68:fb:40:ce:80:39:d4: 01:48:77:b6:f0:ac:13:aa:41:1f:c9:98:ac:d5:56: 90:ca:93:e1:1f:ec:d9:0c:dd:de:6a:0e:76:46:b5: a0:82:24:34:65:5e:58:42:08:20:ba:75:4a:f8:04: f6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:9B:00:9E:BD:95:B7:2C:55:94:D0:74:11:05:90:84:B9:AA:01:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/9556730a-43e8-3dc2-b908-b2e9461ab0b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b/a95fce7e-65c2-466f-ae34-eadb8c72156b.crl X509v3 Authority Key Identifier: keyid:5F:8C:A6:E1:84:0F:A2:FE:BD:8D:DA:83:98:81:21:DF:CB:E0:65:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a95fce7e-65c2-466f-ae34-eadb8c72156b.cer sbgp-ipAddrBlock: critical IPv4: 149.165.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:a0:de:85:76:40:c9:f7:08:5a:82:ca:d2:23:13:b9:df:0b: 38:29:34:20:64:6e:5f:83:ed:4c:b4:e8:e8:03:f1:19:9d:02: 65:3d:8f:9c:ff:ab:16:ac:8b:0d:be:d4:7e:36:78:3b:20:cd: 9e:2e:7a:52:41:07:f6:fd:76:db:56:cb:a3:de:06:25:3b:17: a1:01:15:a1:92:23:b7:2e:8a:9d:c1:0e:a8:69:ae:7a:3c:eb: 87:de:a6:76:48:ae:b0:10:ee:1b:1b:1c:52:dc:ae:18:c9:88: 39:92:11:63:b9:20:18:7d:7d:3c:64:0e:39:00:50:c3:c4:0c: 88:ec:49:fa:de:67:0f:f6:3a:4c:9b:4d:c8:a3:9d:49:ae:c2: 14:a8:96:d2:77:3b:14:0c:79:c9:44:96:0e:23:50:96:e8:43: e5:b8:79:f2:b1:ff:d2:5a:bf:64:65:45:e3:61:af:b0:de:96: e4:15:16:2c:d9:c1:ca:79:a0:03:1a:23:52:95:5a:c8:88:dc: d7:e8:2f:4d:81:be:43:dc:1a:44:70:fa:fe:b6:e2:77:e1:6a: 53:b8:49:e3:c6:26:43:e2:4c:c3:0d:ec:5f:0c:de:8e:94:11: 40:50:bf:db:e6:27:75:a4:d2:6f:3a:f3:10:4c:1f:ca:d8:b1: e0:15:10:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1AyklL6Dn/t29zAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ZmNlN2UtNjVjMi00NjZmLWFlMzQtZWFkYjhjNzIx NTZiMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk YmJiN2U4ODEtZjRiYy00NzA3LWE4YTAtNzI0NjViZmFmMzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSAcpWz2GUw/+JuizVLLxIpVUAD8cyKWe6Dj 3qGyIJGd+jkGWzn4l2mlA7CCotb7OKi88S/IbhtQCFZKYLWSUx8RTU/uoBUS76Rl aXaq3o5lDnbQxavjnEI7RUK1qbySWcxB32f/TfgnkuvoCVMS2eSa1HCigDE5ZZH8 2YQK8cpglE7bZrCxcBLZqQDoC3fuEJ6gy/tLt3HXfbA1I+b+lv7x2g99siyCUyjV /GA851vpyX83ZTju7lWsoHDhjkItVplGk4ytG01C1mj7QM6AOdQBSHe28KwTqkEf yZis1VaQypPhH+zZDN3eag52RrWggiQ0ZV5YQgggunVK+AT2iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHabAJ69lbcsVZTQdBEFkIS5qgGVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVm Y2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRiOGM3MjE1NmIvOTU1NjczMGEtNDNlOC0z ZGMyLWI5MDgtYjJlOTQ2MWFiMGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYTk1ZmNlN2UtNjVjMi00NjZmLWFl MzQtZWFkYjhjNzIxNTZiL2E5NWZjZTdlLTY1YzItNDY2Zi1hZTM0LWVhZGI4Yzcy MTU2Yi5jcmwwHwYDVR0jBBgwFoAUX4ym4YQPov69jdqDmIEh38vgZc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9hOTVmY2U3ZS02NWMyLTQ2NmYtYWUzNC1lYWRi OGM3MjE1NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlaX0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGg3oV2QMn3CFqCytIjE7nfCzgpNCBkbl+D7Uy06OgD8RmdAmU9j5z/ qxasiw2+1H42eDsgzZ4uelJBB/b9dttWy6PeBiU7F6EBFaGSI7cuip3BDqhprno8 64fepnZIrrAQ7hsbHFLcrhjJiDmSEWO5IBh9fTxkDjkAUMPEDIjsSfreZw/2Okyb TcijnUmuwhSoltJ3OxQMeclElg4jUJboQ+W4efKx/9Jav2RlReNhr7DeluQVFizZ wcp5oAMaI1KVWsiI3NfoL02BvkPcGkRw+v624nfhalO4SePGJkPiTMMN7F8M3o6U EUBQv9vmJ3Wk0m868xBMH8rYseAVEEY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:49 2026 by rpki-client