$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/705c19a2-2121-3687-85ab-eb5acdc10286.roa File: 705c19a2-2121-3687-85ab-eb5acdc10286.roa (raw, json) Hash identifier: h9PPWVOvFEqAmNikV98P/4OiNAmTLVvrh9ciix9uCzY= Subject key identifier: 13:B8:B1:77:8E:94:A5:33:26:4B:7D:75:ED:1F:D3:91:67:0B:67:0E Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F87E6B14A844CEC8439C0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/705c19a2-2121-3687-85ab-eb5acdc10286.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.251.38.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:87:e6:b1:4a:84:4c:ec:84:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=b85784e8-3e6d-499a-8223-2f43cff2660c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:20:a3:87:6d:2c:02:9a:98:f4:93:53:40: 1a:12:b4:83:6b:0a:e8:70:15:8c:5e:ff:f0:49:e3: 02:b1:23:c6:1e:c0:31:15:84:1a:d8:75:db:e6:89: f6:14:03:d5:2e:be:af:a3:57:bb:51:cc:10:31:f6: e5:78:04:aa:c4:d3:5d:dd:8c:32:ca:f1:63:98:8d: d0:9d:ee:4e:5c:09:4e:d4:b3:5e:7a:12:e2:65:4b: 39:86:dd:0a:3a:88:71:db:70:54:b1:60:71:19:79: 9a:f5:e4:f2:c7:2a:01:68:51:7e:b1:97:f3:3e:a0: a4:a6:8e:de:9b:41:ef:15:d3:7f:b1:70:0e:12:b6: 60:20:55:e2:82:ae:d4:6f:38:45:42:bf:0a:54:be: 23:33:76:3a:89:83:4b:1b:ef:11:51:14:ea:28:22: ad:10:ed:03:41:9f:1d:e8:a1:88:a7:e8:4e:fe:49: eb:34:91:8a:83:f2:17:65:49:2d:99:98:62:75:36: da:e5:69:96:99:46:b0:9f:59:ef:f9:96:59:f5:b6: 1b:1f:44:24:b5:a4:63:7f:0b:2b:39:ca:61:6a:ca: b4:a7:eb:29:26:f1:85:f9:73:3a:8b:92:ca:ad:7c: 18:7b:21:37:a1:be:c9:93:cd:60:25:0d:ce:43:74: bd:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B8:B1:77:8E:94:A5:33:26:4B:7D:75:ED:1F:D3:91:67:0B:67:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/705c19a2-2121-3687-85ab-eb5acdc10286.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.38.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:20:bd:8f:c4:82:1b:b5:c8:6c:85:4b:c4:34:90:fe:53:63: b5:a6:a6:ea:fe:99:a5:5c:31:95:82:96:2c:69:0b:23:94:33: 22:4d:02:54:50:7f:93:36:4a:7f:67:bb:ad:fc:a7:57:dd:d6: 78:d6:4f:9f:a1:b5:e5:26:4a:4c:17:c1:84:34:d5:5f:92:a0: be:cc:44:d1:a6:48:ff:c0:b3:72:bd:ad:6a:0e:6f:98:aa:4b: cc:f4:b5:71:00:bf:14:7b:0e:a2:80:3c:cd:d1:ad:35:55:93: f3:30:5a:47:03:4e:8e:62:b5:ba:6a:e6:d1:cd:d6:34:36:df: ca:1e:d5:5b:76:85:0b:ed:88:cd:72:7f:7a:cf:73:79:bc:96: df:d6:77:17:4c:68:f3:5c:b1:91:44:1b:80:9e:9a:d0:1c:fe: 52:2a:6d:81:19:bd:e3:42:f9:df:14:58:6a:38:b8:dd:29:59: 20:e9:db:40:34:4d:38:fa:02:25:d6:de:8e:6e:ac:35:b7:82: 7c:32:f8:39:a1:54:51:9b:2d:d3:3b:cf:32:ce:7a:a5:e9:88: 6c:2d:1b:3f:bd:49:2a:51:7f:13:ae:ec:70:10:e5:b2:d6:65: 1c:8e:12:f8:1a:47:14:3e:5c:ce:37:e7:f7:13:1c:7d:bc:ba: 1a:be:58:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4fmsUqETOyEOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk Yjg1Nzg0ZTgtM2U2ZC00OTlhLTgyMjMtMmY0M2NmZjI2NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDMgo4dtLAKamPSTU0AaErSDawrocBWMXv/w SeMCsSPGHsAxFYQa2HXb5on2FAPVLr6vo1e7UcwQMfbleASqxNNd3YwyyvFjmI3Q ne5OXAlO1LNeehLiZUs5ht0KOohx23BUsWBxGXma9eTyxyoBaFF+sZfzPqCkpo7e m0HvFdN/sXAOErZgIFXigq7UbzhFQr8KVL4jM3Y6iYNLG+8RURTqKCKtEO0DQZ8d 6KGIp+hO/knrNJGKg/IXZUktmZhidTba5WmWmUawn1nv+ZZZ9bYbH0QktaRjfwsr Ocphasq0p+spJvGF+XM6i5LKrXwYeyE3ob7Jk81gJQ3OQ3S9bQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO4sXeOlKUzJkt9de0f05FnC2cOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNzA1YzE5YTItMjEyMS0z Njg3LTg1YWItZWI1YWNkYzEwMjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqvsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4gvY/Eghu1yGyFS8Q0kP5TY7Wmpur+maVcMZWClixpCyOUMyJNAlRQ f5M2Sn9nu638p1fd1njWT5+hteUmSkwXwYQ01V+SoL7MRNGmSP/As3K9rWoOb5iq S8z0tXEAvxR7DqKAPM3RrTVVk/MwWkcDTo5itbpq5tHN1jQ238oe1Vt2hQvtiM1y f3rPc3m8lt/WdxdMaPNcsZFEG4CemtAc/lIqbYEZveNC+d8UWGo4uN0pWSDp20A0 TTj6AiXW3o5urDW3gnwy+DmhVFGbLdM7zzLOeqXpiGwtGz+9SSpRfxOu7HAQ5bLW ZRyOEvgaRxQ+XM435/cTHH28uhq+WNI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:32:16 2026 by rpki-client