$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa File: 23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa (raw, json) Hash identifier: F4Ia8FyMt74KZVVu5L54g9Qe6Te/jnXi6LJR8cfOK9I= Subject key identifier: 61:BC:4D:8B:40:60:CC:1B:FC:4C:F3:8A:B5:E4:82:40:90:25:61:13 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F84E8B5F191F6703DCF80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.251.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:84:e8:b5:f1:91:f6:70:3d:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=5ad7bec3-35b8-4f3f-b2aa-301b1e1caa8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:b8:79:93:17:37:6f:57:e8:cf:69:83:f2:45: 53:53:a4:4d:46:9f:fd:71:b8:ed:35:ab:c3:87:f0: dc:4c:8d:be:d2:00:ac:21:f4:8a:03:ab:45:a9:9b: f7:22:45:58:88:51:88:36:28:69:01:22:7a:36:25: df:e7:f1:88:6e:07:e3:11:5d:1e:80:55:e2:e8:0d: 5c:65:55:f5:0a:a5:40:b1:7c:41:29:43:d8:77:1a: 4b:44:1d:68:e4:5a:31:a5:62:85:fe:76:fe:49:b7: 1b:ca:b1:96:bc:b2:c8:77:69:eb:1e:e1:f7:e7:f4: f1:32:6e:2d:d4:1f:7d:21:3b:ca:d7:75:a3:14:92: 8a:8c:45:f4:99:a2:b0:04:c5:e8:5b:ae:08:3a:4d: 9c:2a:fb:32:ea:4f:a2:de:70:3b:b7:1a:74:d9:ee: c3:4a:f4:90:a0:6a:b1:e4:0b:1d:11:30:b0:69:cb: 69:a0:ae:9f:c9:e2:f2:64:1b:0a:f6:fe:80:0a:10: a9:77:1c:7c:38:df:1b:b0:43:28:f0:9c:37:88:77: 4f:d0:61:73:58:2f:0b:ed:52:3b:45:4a:bc:f7:40: a7:b1:29:de:d3:e0:28:5c:17:4b:45:e6:f3:40:3b: b2:50:98:29:02:e4:55:42:6e:69:cd:18:e4:b6:b8: ca:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:BC:4D:8B:40:60:CC:1B:FC:4C:F3:8A:B5:E4:82:40:90:25:61:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/23e4b235-f38c-3c2c-864a-5c0f8fb72227.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:84:df:68:3f:12:62:12:c0:be:8f:ba:8f:81:40:29:c3:67: 29:e7:c6:64:30:c9:ac:78:82:13:f3:07:5c:31:26:ed:88:cc: 91:de:ef:ca:10:16:0e:1c:95:47:f5:01:5d:31:d8:30:29:a0: b5:9d:2d:db:9d:8d:62:18:43:58:df:9d:b9:ce:dd:e0:56:ee: d5:c1:4f:88:e4:35:a6:79:04:40:e4:84:b1:b3:6d:05:9e:4c: 8e:a6:9a:f0:1a:86:12:eb:5a:2d:c9:38:d1:72:07:f6:67:ef: 3c:71:20:b0:84:78:b0:24:65:7a:e8:c3:8a:94:74:6b:9c:1c: c3:09:c9:40:0c:eb:7e:f5:c2:17:03:5f:7e:c2:56:ee:b7:08: 19:de:e7:92:87:d8:82:83:55:27:ca:7f:fe:b5:7a:67:b6:ec: 13:cc:f9:61:1f:b0:55:ef:c9:ec:30:d6:62:cf:2f:1f:0b:55: 27:7a:4b:76:ed:17:97:a5:36:ce:ac:3c:9f:23:27:fe:8c:4b: 95:9c:1b:a9:ab:88:09:65:3c:da:23:b5:c7:63:f3:6e:e8:23: f3:9c:de:53:2d:c3:d8:b0:8f:11:a0:7c:b5:8a:e4:34:ac:ef: 8c:d0:55:6c:2a:60:72:dc:ca:5b:24:75:c5:f9:e1:12:0d:5f: f4:fe:d4:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4TotfGR9nA9z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NWFkN2JlYzMtMzViOC00ZjNmLWIyYWEtMzAxYjFlMWNhYThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Lh5kxc3b1foz2mD8kVTU6RNRp/9cbjtNavD h/DcTI2+0gCsIfSKA6tFqZv3IkVYiFGINihpASJ6NiXf5/GIbgfjEV0egFXi6A1c ZVX1CqVAsXxBKUPYdxpLRB1o5FoxpWKF/nb+SbcbyrGWvLLId2nrHuH35/TxMm4t 1B99ITvK13WjFJKKjEX0maKwBMXoW64IOk2cKvsy6k+i3nA7txp02e7DSvSQoGqx 5AsdETCwactpoK6fyeLyZBsK9v6AChCpdxx8ON8bsEMo8Jw3iHdP0GFzWC8L7VI7 RUq890CnsSne0+AoXBdLRebzQDuyUJgpAuRVQm5pzRjktrjK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGG8TYtAYMwb/EzzirXkgkCQJWETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMjNlNGIyMzUtZjM4Yy0z YzJjLTg2NGEtNWMwZjhmYjcyMjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvtVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmE32g/EmISwL6Puo+BQCnDZynnxmQwyax4ghPzB1wxJu2IzJHe78oQ Fg4clUf1AV0x2DApoLWdLdudjWIYQ1jfnbnO3eBW7tXBT4jkNaZ5BEDkhLGzbQWe TI6mmvAahhLrWi3JONFyB/Zn7zxxILCEeLAkZXrow4qUdGucHMMJyUAM6371whcD X37CVu63CBne55KH2IKDVSfKf/61eme27BPM+WEfsFXvyeww1mLPLx8LVSd6S3bt F5elNs6sPJ8jJ/6MS5WcG6mriAllPNojtcdj827oI/Oc3lMtw9iwjxGgfLWK5DSs 74zQVWwqYHLcylskdcX54RINX/T+1KU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:51 2026 by rpki-client