$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/57152b7e-77ae-363a-a5b2-06b6c04b1026.roa File: 57152b7e-77ae-363a-a5b2-06b6c04b1026.roa (raw, json) Hash identifier: vKR4yXmEX95vrSy/3SK1V/AiYyBgsgv8yoh4NSIfOCw= Subject key identifier: A7:61:20:4B:16:00:20:21:06:B2:94:58:AE:89:2F:A1:04:64:39:9D Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8AF8332EFDB65A96B780 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/57152b7e-77ae-363a-a5b2-06b6c04b1026.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8a:f8:33:2e:fd:b6:5a:96:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=2a0c94ce-c914-4140-8d13-638967dfcb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a9:c5:f9:d6:ed:30:2d:bf:14:57:7c:a9:1d: d1:b4:49:94:c1:bc:68:dd:ad:2f:91:58:04:2c:69: 77:98:9c:f0:18:11:6a:5f:7b:8f:da:7b:44:dd:52: 62:3a:23:3e:1c:72:2e:82:f8:f7:a0:a6:55:ff:d0: 18:82:66:ef:87:92:c3:71:b5:c2:9f:7f:0e:33:30: f3:ad:44:ac:c3:03:95:45:ef:02:5b:c0:7c:6e:aa: 0f:23:3a:0c:4a:57:b8:8b:58:16:60:f9:bd:c6:aa: e6:0b:90:d1:af:2e:e7:bf:53:f5:4c:4c:c8:a7:c2: 87:57:de:61:16:b3:ad:57:7f:7a:eb:85:7e:4f:6f: 16:f4:e8:10:50:97:de:8d:3f:e2:f6:39:be:5c:14: 26:c9:c4:6c:76:31:2a:79:0f:2b:e3:7a:6e:c2:af: 01:d6:52:b2:24:af:fa:07:29:9b:19:37:54:21:2f: 5e:98:15:1e:c6:75:5e:65:85:4c:fd:c9:23:8a:97: 6f:2e:1e:2d:99:30:18:17:35:dc:2e:ff:4f:99:1a: 57:b7:58:52:67:6d:17:80:d4:a0:6d:14:67:60:78: 79:88:c3:f8:1f:2c:b4:86:fa:bc:60:9b:62:9e:7d: 82:68:ce:bc:54:90:98:3f:1a:cd:fd:ea:99:ec:b4: ba:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:61:20:4B:16:00:20:21:06:B2:94:58:AE:89:2F:A1:04:64:39:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/57152b7e-77ae-363a-a5b2-06b6c04b1026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.238.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:60:42:b0:a9:88:46:7d:08:c4:0d:ad:57:03:d7:e9:a4:5e: 87:ee:2c:13:4b:42:a1:bd:32:31:a7:fd:6b:b2:9d:3f:5b:2c: 7b:bc:7f:0c:c8:ff:34:0e:0d:cf:9b:37:7b:8c:34:7f:9a:1d: 9c:18:3b:f7:b3:0d:b9:b4:36:af:02:8f:49:2b:e8:17:8c:ae: f5:21:eb:c8:18:8b:68:73:54:40:90:26:6a:dd:0f:40:b1:54: d3:60:2c:2e:2b:ef:63:82:1b:3f:3a:89:14:66:20:24:8a:96: 86:14:9c:3f:3b:1b:f5:a6:2e:9a:c6:b8:7a:e9:36:a9:8f:fd: e5:27:88:78:33:eb:44:f2:a5:a3:5e:f6:31:9a:2d:3d:9c:a9: 83:37:9e:a7:c9:a3:23:ac:bf:50:da:bc:1b:93:59:4a:60:ae: 43:3c:28:8d:cb:98:9f:83:8e:62:5d:a0:0d:d5:66:5e:0d:55: e1:bf:e3:74:a0:3e:ed:68:61:16:fc:b9:70:91:32:55:cb:83: 12:4b:fc:f6:37:6f:4f:2e:cc:bc:b7:a5:f6:b7:3d:a8:dd:59: 38:4f:37:7d:40:33:47:90:da:86:49:66:91:3f:85:fe:0f:d7: f5:99:4c:51:7f:39:71:51:aa:c7:34:8b:79:61:a8:b7:2f:67: d4:1e:2c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4r4My79tlqWt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MmEwYzk0Y2UtYzkxNC00MTQwLThkMTMtNjM4OTY3ZGZjYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKnF+dbtMC2/FFd8qR3RtEmUwbxo3a0vkVgE LGl3mJzwGBFqX3uP2ntE3VJiOiM+HHIugvj3oKZV/9AYgmbvh5LDcbXCn38OMzDz rUSswwOVRe8CW8B8bqoPIzoMSle4i1gWYPm9xqrmC5DRry7nv1P1TEzIp8KHV95h FrOtV39664V+T28W9OgQUJfejT/i9jm+XBQmycRsdjEqeQ8r43puwq8B1lKyJK/6 BymbGTdUIS9emBUexnVeZYVM/ckjipdvLh4tmTAYFzXcLv9PmRpXt1hSZ20XgNSg bRRnYHh5iMP4Hyy0hvq8YJtinn2CaM68VJCYPxrN/eqZ7LS61wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdhIEsWACAhBrKUWK6JL6EEZDmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNTcxNTJiN2UtNzdhZS0z NjNhLWE1YjItMDZiNmMwNGIxMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCTuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtgQrCpiEZ9CMQNrVcD1+mkXofuLBNLQqG9MjGn/WuynT9bLHu8fwzI /zQODc+bN3uMNH+aHZwYO/ezDbm0Nq8Cj0kr6BeMrvUh68gYi2hzVECQJmrdD0Cx VNNgLC4r72OCGz86iRRmICSKloYUnD87G/WmLprGuHrpNqmP/eUniHgz60TypaNe 9jGaLT2cqYM3nqfJoyOsv1DavBuTWUpgrkM8KI3LmJ+DjmJdoA3VZl4NVeG/43Sg Pu1oYRb8uXCRMlXLgxJL/PY3b08uzLy3pfa3PajdWThPN31AM0eQ2oZJZpE/hf4P 1/WZTFF/OXFRqsc0i3lhqLcvZ9QeLMU= -----END CERTIFICATE-----Generated at Thu Mar 26 15:17:50 2026 by rpki-client