$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa File: 3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa (raw, json) Hash identifier: tj3T4D0kWo/lKEVM+Bxp7OQwzxCjXh7hvYYfMYue3rE= Subject key identifier: 52:8B:FB:54:CF:EC:5A:72:72:49:E0:2C:3B:A2:5D:6B:3B:5B:C3:97 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8877F63729D5EEF29F20 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.248.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:88:77:f6:37:29:d5:ee:f2:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=f438ff45-36e1-4ce8-b4df-e02b85961663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:0d:fe:8f:32:09:1f:2c:a8:35:f2:28:55: 75:5c:04:07:a8:d4:0e:c6:84:94:cf:11:04:fe:51: 31:4d:62:e8:28:40:12:5a:07:74:bd:ea:c3:d6:c9: ff:c2:79:ad:99:97:ea:db:ab:ea:b4:90:32:7f:da: 0c:b7:6f:29:7d:ef:0d:6d:63:4a:79:32:d0:69:82: 64:a6:6b:aa:2c:81:b4:ed:6b:d0:bd:b1:65:4c:34: 47:da:38:d6:3a:8d:88:48:50:84:5b:b7:47:af:01: 5c:bc:67:1c:70:75:de:f0:ff:e5:94:6f:3a:50:c4: e9:79:e9:b6:03:6a:a9:d2:6f:7b:d1:30:cc:88:54: 6c:28:f3:73:91:77:fb:a5:f6:e6:fd:64:fe:c3:85: 20:63:57:10:fd:a2:06:91:31:cf:00:4a:03:3f:05: 19:f9:de:2e:6c:f2:3a:d1:58:c2:82:ab:60:14:0f: b6:08:f3:85:63:b7:3b:68:69:54:da:23:47:80:bb: 33:de:70:ee:db:9b:a7:2c:a3:92:66:3e:9e:9b:6d: d7:ba:7e:ad:35:b5:53:0a:59:84:f6:77:cb:33:6f: 56:e6:40:c9:c4:c0:58:ee:02:dc:2e:0f:2c:37:99: 08:a0:f9:a4:e8:dd:af:4d:bf:24:83:52:d3:4c:16: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8B:FB:54:CF:EC:5A:72:72:49:E0:2C:3B:A2:5D:6B:3B:5B:C3:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:f4:bf:f5:39:90:e8:c0:51:97:4d:4c:67:c7:74:ba:8d:11: 91:d8:9b:76:c7:7f:58:b5:f0:6f:51:c8:13:2b:a4:14:ff:53: d2:18:ad:79:3a:37:02:14:aa:86:c3:c7:61:72:38:60:8f:58: 72:45:9d:de:60:57:3c:00:fd:4f:d5:05:7f:ae:2c:76:e3:56: be:6c:4d:af:42:d3:7e:8c:fb:6f:82:eb:de:be:31:84:3d:9d: cb:7d:29:c0:53:94:34:fd:ee:26:65:79:fa:c3:6e:3e:48:20: 65:33:76:4b:73:d1:7b:a3:9c:e6:46:16:5c:f9:f6:52:6f:09: aa:f6:a0:a4:01:2e:6c:0e:f3:56:16:4b:28:5f:2a:3b:25:35: 03:dc:2b:dc:43:ef:bd:76:cc:78:66:e1:6c:70:3a:21:e0:79: 8b:8e:13:6b:6c:ba:fd:10:0d:7a:fa:99:21:61:12:8b:1a:71: 2c:e5:9d:33:bd:d0:73:d1:57:a0:8b:12:84:14:b5:b3:34:ab: 2d:6d:a9:ce:99:73:d5:31:6e:37:2b:7e:67:af:24:1e:88:eb: 91:9a:89:69:db:b5:62:e7:9e:f6:9a:0e:96:0d:40:11:5b:31: 84:56:72:4b:18:d8:46:9f:d8:55:e4:77:4a:05:5e:0d:4b:64: ff:58:41:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4h39jcp1e7ynyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZjQzOGZmNDUtMzZlMS00Y2U4LWI0ZGYtZTAyYjg1OTYxNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcUN/o8yCR8sqDXyKFV1XAQHqNQOxoSUzxEE /lExTWLoKEASWgd0verD1sn/wnmtmZfq26vqtJAyf9oMt28pfe8NbWNKeTLQaYJk pmuqLIG07WvQvbFlTDRH2jjWOo2ISFCEW7dHrwFcvGcccHXe8P/llG86UMTpeem2 A2qp0m970TDMiFRsKPNzkXf7pfbm/WT+w4UgY1cQ/aIGkTHPAEoDPwUZ+d4ubPI6 0VjCgqtgFA+2CPOFY7c7aGlU2iNHgLsz3nDu25unLKOSZj6em23Xun6tNbVTClmE 9nfLM29W5kDJxMBY7gLcLg8sN5kIoPmk6N2vTb8kg1LTTBaQowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKL+1TP7FpyckngLDuiXWs7W8OXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvM2NjZmRjODAtM2NkOC0z YTEyLWJkODktMjdlYmUxZmZjOTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHb0v/U5kOjAUZdNTGfHdLqNEZHYm3bHf1i18G9RyBMrpBT/U9IYrXk6 NwIUqobDx2FyOGCPWHJFnd5gVzwA/U/VBX+uLHbjVr5sTa9C036M+2+C696+MYQ9 nct9KcBTlDT97iZlefrDbj5IIGUzdktz0XujnOZGFlz59lJvCar2oKQBLmwO81YW SyhfKjslNQPcK9xD7712zHhm4WxwOiHgeYuOE2tsuv0QDXr6mSFhEosacSzlnTO9 0HPRV6CLEoQUtbM0qy1tqc6Zc9UxbjcrfmevJB6I65GaiWnbtWLnnvaaDpYNQBFb MYRWcksY2Eaf2FXkd0oFXg1LZP9YQR8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:45 2026 by rpki-client