$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa File: 576f9933-f500-3322-be8f-527b7af2e8fb.roa (raw, json) Hash identifier: h74aQfehAGM/aOVQuRW/ipmvL/X6FTODSA75zP07F10= Subject key identifier: 52:45:20:68:B1:6D:8E:70:03:F4:CC:19:B6:E9:53:3B:C2:C9:13:94 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D3F64F59A46535091AAE546D0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:f5:9a:46:53:50:91:aa:e5:46:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=d5d8da2c-22b1-46e2-92d9-aa610de00e3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:5e:75:4c:f8:2f:de:77:bf:42:29:2a:c4: e6:b9:3a:2e:87:ed:99:38:78:32:77:11:d0:5b:6c: 92:ac:1c:c7:bb:29:df:5d:9a:10:23:f0:8a:4c:a4: ca:d3:60:81:c0:30:02:ac:ac:89:71:9d:e5:a4:29: 6e:77:a3:46:09:67:74:5b:ee:14:5f:8f:ed:7f:e0: be:22:4d:eb:cb:a3:d3:8c:c1:0d:6b:02:b5:e1:1f: 88:20:b8:4a:1a:c5:b5:05:d5:ca:f5:98:56:59:d7: 29:b6:f3:86:1d:25:51:5d:de:56:ed:82:e2:0f:0d: a4:53:df:df:ed:a0:79:27:ca:0d:5e:5b:a2:fa:4a: fa:2b:b7:28:0a:60:60:fb:86:00:3b:b1:5c:21:74: 1b:9b:d9:98:bd:eb:8a:b5:9a:65:b0:ca:a9:86:8a: 51:95:95:5b:90:fa:6c:98:de:9e:40:df:24:ae:16: 1b:9f:bd:fa:da:7c:87:a3:71:d2:3e:35:ae:00:47: d4:ce:7e:a4:20:0d:c0:22:04:b3:f3:8d:04:a1:0d: 05:99:ee:58:de:ff:19:18:bd:0d:2b:7c:e9:c6:0c: 1a:75:11:0e:b8:57:1b:54:09:9f:e8:ef:f2:09:ec: f1:c5:79:7c:e5:ce:a9:da:b1:e9:fa:77:c9:8e:0a: 02:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:45:20:68:B1:6D:8E:70:03:F4:CC:19:B6:E9:53:3B:C2:C9:13:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/576f9933-f500-3322-be8f-527b7af2e8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:3e:cf:f3:14:2e:d5:fc:19:fc:18:f7:58:50:2d:19:8a:a8: 62:61:f1:08:4b:13:f2:f4:ac:5e:ed:63:d0:bc:3e:d9:b5:80: e1:4d:3e:b1:9a:40:c6:ba:c7:e8:3e:24:94:66:42:9b:6c:41: ca:2b:fd:5c:7c:f4:d3:a5:fa:a5:b7:be:2a:5c:28:c1:80:e2: 2b:8c:01:19:f1:d8:57:9d:fc:81:45:d3:97:fb:67:11:34:28: 19:18:8c:d1:1b:b3:7c:d1:21:5e:d0:22:52:da:86:7f:db:20: 60:0a:17:51:bf:35:4e:1f:72:4b:de:83:74:54:c9:d5:7e:99: 3f:6f:df:99:39:a5:d3:88:44:90:10:a4:f8:fc:9d:53:d4:e4: ad:d9:39:05:69:e2:cf:f7:e4:16:c4:59:ee:8f:ab:f3:1e:15: 3c:0e:4e:76:85:1e:fb:f3:7b:03:36:34:cd:37:20:3d:88:f4: 7f:4e:44:ad:f7:30:d0:f4:02:a8:74:0c:17:bb:e1:8c:c8:b3: 3c:a8:67:7e:27:c2:f6:96:6b:24:5c:3b:ad:89:7c:79:60:37: ad:56:9f:64:cd:8b:d1:aa:0b:f0:25:70:10:d0:76:b6:d9:bb: 31:92:b0:42:9a:ea:21:c0:e3:22:04:40:02:57:e1:c9:e2:58: 92:a5:88:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZPWaRlNQkarlRtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk ZDVkOGRhMmMtMjJiMS00NmUyLTkyZDktYWE2MTBkZTAwZTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxVedUz4L953v0IpKsTmuTouh+2ZOHgydxHQ W2ySrBzHuynfXZoQI/CKTKTK02CBwDACrKyJcZ3lpClud6NGCWd0W+4UX4/tf+C+ Ik3ry6PTjMENawK14R+IILhKGsW1BdXK9ZhWWdcptvOGHSVRXd5W7YLiDw2kU9/f 7aB5J8oNXlui+kr6K7coCmBg+4YAO7FcIXQbm9mYveuKtZplsMqphopRlZVbkPps mN6eQN8krhYbn7362nyHo3HSPjWuAEfUzn6kIA3AIgSz840EoQ0Fme5Y3v8ZGL0N K3zpxgwadREOuFcbVAmf6O/yCezxxXl85c6p2rHp+nfJjgoCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJFIGixbY5wA/TMGbbpUzvCyROUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNTc2Zjk5MzMtZjUwMC0z MzIyLWJlOGYtNTI3YjdhZjJlOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCSJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIA+z/MULtX8GfwY91hQLRmKqGJh8QhLE/L0rF7tY9C8Ptm1gOFNPrGa QMa6x+g+JJRmQptsQcor/Vx89NOl+qW3vipcKMGA4iuMARnx2Fed/IFF05f7ZxE0 KBkYjNEbs3zRIV7QIlLahn/bIGAKF1G/NU4fckveg3RUydV+mT9v35k5pdOIRJAQ pPj8nVPU5K3ZOQVp4s/35BbEWe6Pq/MeFTwOTnaFHvvzewM2NM03ID2I9H9ORK33 MND0Aqh0DBe74YzIszyoZ34nwvaWayRcO62JfHlgN61Wn2TNi9GqC/AlcBDQdrbZ uzGSsEKa6iHA4yIEQAJX4cniWJKliJk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:53 2026 by rpki-client