$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa File: 2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa (raw, json) Hash identifier: sa2169cQtoWt29Pcj8YdpZb9jTHeJvHZ4ywDy1a084o= Subject key identifier: 0E:72:E8:AB:D6:3A:66:53:79:0C:EF:E2:C3:6E:C6:73:1F:D1:8D:80 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F83581949BB6B0D2D4F80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.248.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:83:58:19:49:bb:6b:0d:2d:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=7fae36af-fc00-4506-9ef2-29db072b6411 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:9e:fc:04:28:ac:7c:5f:17:c4:ca:90:af: d3:01:36:b9:26:86:27:a6:ee:a6:d2:63:f4:68:99: 94:3b:6f:59:cc:38:2f:43:ac:29:41:88:24:a6:79: 70:ba:6b:b1:dd:31:5e:eb:f1:b3:fa:59:16:05:cc: 96:c4:ae:89:ed:c7:f8:76:9c:c3:a8:77:bf:26:05: 27:c4:80:19:62:76:a1:c1:57:84:b9:d2:a7:4b:e9: 04:65:14:77:09:74:02:fe:d4:e5:6c:cf:b1:42:4d: 07:c5:a6:07:87:55:05:f9:3a:e8:4c:20:e0:21:80: c0:d9:ee:19:35:b8:eb:c3:ce:b5:d1:a4:ff:5f:bd: 04:47:36:1c:13:a3:82:17:00:5a:6e:94:fe:14:e9: e1:79:e7:07:3c:48:7e:e5:e2:36:fe:47:b3:0b:4a: 62:fe:8d:df:6a:50:e3:f9:de:b0:b3:49:9c:a4:81: ec:9b:af:84:5a:a5:0e:b7:3d:c2:a5:f7:5e:5d:07: c4:51:47:19:0c:f1:a2:6b:21:7c:08:8d:1b:f1:05: 9b:33:29:b7:42:2f:11:23:84:24:7c:72:5e:e8:0f: 6f:9b:6e:8e:fb:e1:ce:0a:a3:20:98:63:0d:d4:4a: d8:52:58:37:5b:24:c5:09:a9:04:01:8f:32:82:56: 51:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:72:E8:AB:D6:3A:66:53:79:0C:EF:E2:C3:6E:C6:73:1F:D1:8D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:00:54:2d:18:73:15:e1:eb:07:fa:b5:5d:f7:7b:3b:e3:2e: 36:11:81:7e:02:60:a3:80:23:10:93:f8:22:f4:09:a5:db:e4: e5:16:74:22:55:4e:79:e8:9e:cf:fa:68:69:0d:c3:29:1a:0d: 65:f6:fc:79:55:a0:86:26:c0:72:dd:2a:d2:96:35:79:82:5c: b7:bd:19:cc:05:25:7b:83:2e:14:45:5d:cf:95:a3:8a:96:08: 48:06:ca:14:52:96:ec:9d:d8:e7:81:38:fe:b7:2b:10:76:3c: 15:7d:d2:8d:0a:22:e3:41:62:e5:e3:1b:aa:07:ac:99:e7:06: ca:e6:81:08:85:1a:28:e9:46:1e:d7:86:54:51:b2:4e:e7:88: 2b:39:3d:15:8f:e8:49:a0:bf:75:64:9d:cb:7f:df:b8:02:e4: bb:e6:e1:c3:b4:17:7d:23:ec:61:1e:d8:e0:d5:20:ab:42:fa: ca:6f:12:eb:08:ec:15:a9:8e:44:b2:42:34:ce:86:0a:13:92: f8:8b:e8:ed:47:80:44:94:5c:48:b1:db:b6:30:ae:48:ff:de: d6:2a:7d:4c:98:cc:b2:e2:16:53:c0:fb:56:23:d4:e9:3f:e1: 9a:14:88:22:2c:d4:39:d5:8e:c6:b0:70:29:c7:38:79:ce:73: ee:39:3e:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4NYGUm7aw0tT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk N2ZhZTM2YWYtZmMwMC00NTA2LTllZjItMjlkYjA3MmI2NDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRWe/AQorHxfF8TKkK/TATa5JoYnpu6m0mP0 aJmUO29ZzDgvQ6wpQYgkpnlwumux3TFe6/Gz+lkWBcyWxK6J7cf4dpzDqHe/JgUn xIAZYnahwVeEudKnS+kEZRR3CXQC/tTlbM+xQk0HxaYHh1UF+TroTCDgIYDA2e4Z Nbjrw8610aT/X70ERzYcE6OCFwBabpT+FOnheecHPEh+5eI2/kezC0pi/o3falDj +d6ws0mcpIHsm6+EWqUOtz3CpfdeXQfEUUcZDPGiayF8CI0b8QWbMym3Qi8RI4Qk fHJe6A9vm26O++HOCqMgmGMN1ErYUlg3WyTFCakEAY8yglZRbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5y6KvWOmZTeQzv4sNuxnMf0Y2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMmMzODI3YWItNzUxYS0z ZDE3LWFhMWUtOTFlYzYzNzlkZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUAVC0YcxXh6wf6tV33ezvjLjYRgX4CYKOAIxCT+CL0CaXb5OUWdCJV Tnnons/6aGkNwykaDWX2/HlVoIYmwHLdKtKWNXmCXLe9GcwFJXuDLhRFXc+Vo4qW CEgGyhRSluyd2OeBOP63KxB2PBV90o0KIuNBYuXjG6oHrJnnBsrmgQiFGijpRh7X hlRRsk7niCs5PRWP6Emgv3Vknct/37gC5Lvm4cO0F30j7GEe2ODVIKtC+spvEusI 7BWpjkSyQjTOhgoTkviL6O1HgESUXEix27Ywrkj/3tYqfUyYzLLiFlPA+1Yj1Ok/ 4ZoUiCIs1DnVjsawcCnHOHnOc+45PvM= -----END CERTIFICATE-----Generated at Thu Mar 26 22:40:32 2026 by rpki-client