$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa File: 1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa (raw, json) Hash identifier: kIY2fUhzMunRPlA01UGfrZT1L7nb11RwaYev7ZzYdW8= Subject key identifier: 2D:3C:20:6F:D8:1D:E7:42:F4:89:DC:09:BD:D2:FB:9F:F6:D5:F9:24 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F913B2A57983952D694D0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:91:3b:2a:57:98:39:52:d6:94:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=8034b30d-dc35-496f-b926-5d27666b8cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:3b:4f:3b:91:9b:32:58:99:88:40:6b:5b: 99:18:23:bb:21:5f:79:0e:8c:8a:4e:42:30:c2:37: 91:24:0b:2e:c2:c7:ef:26:51:ee:27:b3:e5:d6:23: 2e:5b:35:9a:ab:26:25:1f:38:34:eb:c1:0d:e9:85: 71:72:5b:7b:76:98:c8:71:b5:e2:d0:1b:77:13:58: 5e:26:e6:04:c4:b0:fa:d1:ef:a3:5e:f3:30:0f:e1: 3a:8a:e0:f7:e9:80:16:b3:ea:2e:73:4a:47:bc:bc: 01:5a:29:3b:ec:64:9f:27:04:4e:90:ea:02:2e:58: 0a:31:c9:6d:49:5d:8c:3c:6f:86:2d:26:14:ff:49: 0a:3b:26:e9:76:c8:c8:5d:c8:80:2d:91:7a:35:30: 1f:b7:bb:a1:96:4b:d7:70:29:04:06:37:88:df:71: e0:ac:6e:06:45:bb:95:41:6a:89:4f:80:21:89:a7: e1:5c:86:53:1d:b1:1d:43:35:e1:5e:f4:34:6a:8c: 26:f9:a3:c2:f0:be:e8:70:86:be:66:5a:5b:a5:99: ac:e7:ae:fd:7f:88:b9:59:53:4c:30:b6:c8:f7:46: d6:30:c1:73:d5:8f:0f:5f:9a:68:23:7f:a2:26:47: 26:8d:c5:10:86:61:b4:db:83:91:15:a9:93:2d:8e: 1f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:3C:20:6F:D8:1D:E7:42:F4:89:DC:09:BD:D2:FB:9F:F6:D5:F9:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/1f9ed0a2-22a4-307d-a465-bd2a7ea85e7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:13:81:48:1a:09:de:99:37:69:4d:12:0c:d5:a7:77:f6:11: 73:0a:b1:f0:49:57:97:8f:93:a8:ad:76:e2:38:d1:16:7d:c3: aa:ba:8c:5f:86:09:af:8a:fc:54:b7:9b:04:c2:c0:34:71:f3: 10:b9:d8:b2:63:ed:bc:62:6f:a5:bd:32:75:70:9a:d7:25:84: 59:87:5c:fb:2e:d8:d2:48:14:83:b5:5c:a2:d0:8b:39:08:1b: 20:6f:a7:97:f9:b6:fd:5b:49:a8:02:d3:33:15:6b:25:e3:9f: 5a:76:6b:3a:43:ce:aa:d6:f7:24:ac:bf:08:9d:51:b0:dc:42: 7b:5c:6c:e9:d6:88:00:fe:0e:9a:87:4b:97:89:e3:3e:c2:ea: da:66:78:4b:ee:bd:4e:3f:42:13:41:c4:9a:47:e6:91:bd:54: 19:bb:7b:58:df:c6:10:f6:a3:f5:bb:ec:51:54:b7:ff:b9:7e: bd:c6:02:e5:15:da:26:d5:9b:c2:6e:a8:1f:6d:70:ce:e9:03: 9a:74:5d:93:41:0b:6b:2c:69:9c:55:42:a3:05:aa:15:7c:e8: 89:b6:50:43:44:5b:56:77:03:46:38:4d:d7:36:3d:21:c5:e5: 40:06:2b:7b:a3:88:3d:52:93:16:d9:2a:5f:08:6c:11:14:6b: 1e:01:13:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL5E7KleYOVLWlNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ODAzNGIzMGQtZGMzNS00OTZmLWI5MjYtNWQyNzY2NmI4Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdU7TzuRmzJYmYhAa1uZGCO7IV95DoyKTkIw wjeRJAsuwsfvJlHuJ7Pl1iMuWzWaqyYlHzg068EN6YVxclt7dpjIcbXi0Bt3E1he JuYExLD60e+jXvMwD+E6iuD36YAWs+ouc0pHvLwBWik77GSfJwROkOoCLlgKMclt SV2MPG+GLSYU/0kKOybpdsjIXciALZF6NTAft7uhlkvXcCkEBjeI33HgrG4GRbuV QWqJT4AhiafhXIZTHbEdQzXhXvQ0aowm+aPC8L7ocIa+ZlpbpZms5679f4i5WVNM MLbI90bWMMFz1Y8PX5poI3+iJkcmjcUQhmG024ORFamTLY4fvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC08IG/YHedC9IncCb3S+5/21fkkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMWY5ZWQwYTItMjJhNC0z MDdkLWE0NjUtYmQyYTdlYTg1ZTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsTgUgaCd6ZN2lNEgzVp3f2EXMKsfBJV5ePk6itduI40RZ9w6q6jF+G Ca+K/FS3mwTCwDRx8xC52LJj7bxib6W9MnVwmtclhFmHXPsu2NJIFIO1XKLQizkI GyBvp5f5tv1bSagC0zMVayXjn1p2azpDzqrW9ySsvwidUbDcQntcbOnWiAD+DpqH S5eJ4z7C6tpmeEvuvU4/QhNBxJpH5pG9VBm7e1jfxhD2o/W77FFUt/+5fr3GAuUV 2ibVm8JuqB9tcM7pA5p0XZNBC2ssaZxVQqMFqhV86Im2UENEW1Z3A0Y4Tdc2PSHF 5UAGK3ujiD1SkxbZKl8IbBEUax4BE+g= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:38 2026 by rpki-client