$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa File: 5bf45f2d-7e44-30b1-a788-cda2637a8626.roa (raw, json) Hash identifier: vb25kbCtK0E+5pG4g6DGKrLG31cnT3sMqy/pwQCzSmE= Subject key identifier: C8:78:87:6E:16:34:4B:0B:0B:CD:01:67:31:1B:C1:7B:D4:D6:21:31 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F80C116C3DCB38CA19880 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.114.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:80:c1:16:c3:dc:b3:8c:a1:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=17702292-8602-4ee6-b1fb-d3bb88eb2dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b3:66:3f:86:0d:55:e4:d9:7e:37:f4:6c:3a: cb:c8:4d:ad:99:7b:80:17:e1:59:d7:1a:be:6c:98: ca:ed:f2:2a:a6:3f:c6:39:2f:03:fd:58:94:8b:9c: 32:80:fb:7e:01:3c:58:ca:c3:ea:3a:c7:cd:aa:d4: c5:f8:74:6e:67:bd:67:78:d0:9b:3e:88:dd:8e:e4: a3:c9:bc:2f:c6:70:76:61:d8:f1:44:1e:0f:f3:d0: a0:ee:e3:af:bf:8e:f2:9f:cf:0b:1f:09:92:ce:2b: 7d:4f:3a:b8:39:79:74:18:ee:40:1b:c7:39:8c:9c: c6:3f:fa:27:65:a2:d0:aa:70:b3:0f:57:1a:a2:33: 3c:79:48:58:5a:f4:f4:ab:bb:ef:e0:40:24:7b:18: d1:22:72:d9:01:18:a6:5a:4d:2e:80:bf:9e:55:b9: db:7e:11:1f:aa:05:a2:09:71:cf:95:83:3e:13:f8: 48:12:72:37:82:34:e6:6d:ab:f9:9f:52:3d:6a:20: 22:46:05:5f:7b:e7:d4:44:f7:61:6f:86:42:b7:10: a0:ed:41:5d:9a:65:fd:5a:fc:02:38:59:7d:83:d1: 1a:ce:b0:ec:0a:2d:47:6d:6e:dc:80:f9:9a:e8:be: f1:d2:bc:2c:41:3c:0d:f4:a4:50:80:eb:61:5d:ff: d8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:78:87:6E:16:34:4B:0B:0B:CD:01:67:31:1B:C1:7B:D4:D6:21:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/5bf45f2d-7e44-30b1-a788-cda2637a8626.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.114.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:dc:1e:14:73:ff:3a:f1:2e:26:31:6e:b6:66:36:21:82:59: c0:a9:0b:a3:6f:0e:21:ed:10:8d:72:25:94:39:5a:7e:39:3b: 37:91:3e:ce:30:d0:b3:4e:36:f4:c9:70:e5:5b:15:cf:80:85: fb:71:f7:35:18:f6:23:8d:a1:95:5a:2c:f6:50:13:c0:ef:fc: 1d:20:10:21:d8:43:43:70:d3:4f:40:36:c0:1b:ce:89:40:b7: e7:e7:77:1a:9f:d8:5b:7c:44:06:68:fc:56:56:3e:79:99:78: a9:57:27:e1:c8:68:64:a8:3d:da:e6:b9:a2:dc:4e:4c:09:09: 0b:2b:83:02:9d:b0:0a:56:b6:2a:3e:ee:39:9d:60:6b:d4:bb: 4a:3d:9a:1c:cd:d2:9a:8d:e0:ac:a4:64:f1:12:95:c2:70:a2: 5a:0a:43:48:27:b2:b7:29:f3:8f:75:89:90:62:22:7c:9f:66: 51:b5:0b:44:59:0c:33:69:c1:38:ed:7e:5c:b5:75:89:1e:6c: 22:68:75:03:89:66:17:ab:65:24:4b:a7:61:38:6d:b0:10:9c: 2f:04:95:a2:89:d3:11:14:65:4a:c5:83:d2:4b:01:aa:8b:63: 27:e2:e5:de:98:dc:6d:6c:a9:87:60:8b:b1:b5:38:eb:39:6f: 16:c1:62:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4DBFsPcs4yhmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk MTc3MDIyOTItODYwMi00ZWU2LWIxZmItZDNiYjg4ZWIyZGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17NmP4YNVeTZfjf0bDrLyE2tmXuAF+FZ1xq+ bJjK7fIqpj/GOS8D/ViUi5wygPt+ATxYysPqOsfNqtTF+HRuZ71neNCbPojdjuSj ybwvxnB2YdjxRB4P89Cg7uOvv47yn88LHwmSzit9Tzq4OXl0GO5AG8c5jJzGP/on ZaLQqnCzD1caojM8eUhYWvT0q7vv4EAkexjRInLZARimWk0ugL+eVbnbfhEfqgWi CXHPlYM+E/hIEnI3gjTmbav5n1I9aiAiRgVfe+fURPdhb4ZCtxCg7UFdmmX9WvwC OFl9g9EazrDsCi1HbW7cgPma6L7x0rwsQTwN9KRQgOthXf/Y/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMh4h24WNEsLC80BZzEbwXvU1iExMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNWJmNDVmMmQtN2U0NC0z MGIxLWE3ODgtY2RhMjYzN2E4NjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCRyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACbcHhRz/zrxLiYxbrZmNiGCWcCpC6NvDiHtEI1yJZQ5Wn45OzeRPs4w 0LNONvTJcOVbFc+Ahftx9zUY9iONoZVaLPZQE8Dv/B0gECHYQ0Nw009ANsAbzolA t+fndxqf2Ft8RAZo/FZWPnmZeKlXJ+HIaGSoPdrmuaLcTkwJCQsrgwKdsApWtio+ 7jmdYGvUu0o9mhzN0pqN4KykZPESlcJwoloKQ0gnsrcp8491iZBiInyfZlG1C0RZ DDNpwTjtfly1dYkebCJodQOJZherZSRLp2E4bbAQnC8ElaKJ0xEUZUrFg9JLAaqL Yyfi5d6Y3G1sqYdgi7G1OOs5bxbBYls= -----END CERTIFICATE-----Generated at Thu Mar 26 11:34:12 2026 by rpki-client