$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa File: 77360824-da3b-363f-b777-38165a764b5a.roa (raw, json) Hash identifier: WVpC/0NzstRzN4lGDfJxTcElpwu1fb3RHlBahZ3zL/8= Subject key identifier: 0A:16:E6:DE:0A:A8:08:EF:0B:68:0C:71:93:0B:0F:30:66:62:26:AE Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D316F737FCD33889E529AE200 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.248.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:73:7f:cd:33:88:9e:52:9a:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=f250cb02-6c80-4c2e-920d-607ea425a5e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:32:36:a0:5f:fe:a2:a4:5b:d1:64:a6:22:85: 66:a7:14:fd:0d:7c:af:a8:1d:07:60:46:4f:5f:0e: 11:7d:b0:4d:38:4e:3d:70:29:e1:9a:69:d6:88:8e: 57:f8:06:ad:f2:fc:a4:0b:00:cb:94:6e:33:f3:75: e9:c3:95:9c:9e:9e:6d:96:01:de:4f:50:be:31:6e: bc:4f:4a:94:35:1c:a0:f0:8f:8f:3f:13:a7:3a:96: bf:06:6f:76:78:60:5c:59:6d:29:d2:0d:5a:c2:1b: ba:31:3e:00:9d:8a:0f:98:5b:69:a2:67:c9:86:d8: 07:03:b7:9c:df:5c:3e:b9:02:b4:90:48:80:bd:0f: ce:27:65:f4:1d:f6:0b:31:54:e4:aa:cd:ba:1f:63: 8a:39:13:0b:46:21:9f:31:23:d4:b9:c6:17:40:28: 01:9c:5d:0f:2e:fe:17:62:80:07:7b:37:fc:85:a9: 52:8c:7b:e9:51:f1:20:f6:7a:7b:43:76:54:26:a5: 67:ce:0d:8a:9e:04:fd:5d:1c:a6:15:7b:42:28:09: c7:fc:14:c0:ba:ac:6f:0d:1c:c6:ba:22:08:0f:2a: 5e:22:cb:82:6a:24:77:d6:ae:e3:1f:2b:13:59:cb: 16:fd:fa:91:21:6f:8d:59:29:e3:23:58:ba:0e:12: c5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:16:E6:DE:0A:A8:08:EF:0B:68:0C:71:93:0B:0F:30:66:62:26:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/77360824-da3b-363f-b777-38165a764b5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b5:4a:9d:4e:92:70:55:d3:66:49:f1:02:cc:1b:06:7b:bd: ad:f9:03:43:ba:79:0b:a5:c5:89:3d:a4:96:d6:3d:5d:a9:08: c6:ad:f6:d6:21:95:b1:f3:be:96:5e:d7:0f:f6:e2:fd:be:19: 95:2d:dc:c8:c1:f2:e6:a2:fb:15:fb:8a:66:55:ff:79:47:fe: 67:a1:06:e8:99:b3:10:ce:e4:b8:66:0f:fa:e2:d3:6e:f5:d7: 65:c1:30:8d:6b:19:92:66:34:12:c9:a6:1c:66:f2:bd:a1:67: a5:e3:47:b3:ad:2c:eb:7a:8f:42:ee:3d:9a:cd:13:3f:8e:6a: 2d:37:cb:f4:e3:2f:f8:11:2d:91:c4:9c:62:88:69:32:ae:60: 6d:d9:36:7e:f6:30:35:e1:27:d0:c5:06:4c:10:f5:a8:0d:63: 79:e5:90:ca:22:51:87:b5:12:2e:df:1e:a4:f3:43:31:84:6c: f0:80:fa:a9:a9:82:c2:b7:df:95:37:d6:1d:7d:d1:df:41:46: 2d:b3:49:30:4a:e9:9c:ed:91:4b:50:38:f5:44:a7:54:ba:ee: cf:25:9a:45:7b:91:25:6e:39:26:3f:ff:26:72:f3:37:2d:3d: ea:34:21:4a:61:1f:5d:4c:ac:61:08:72:65:9f:e3:a0:f3:85: be:30:d1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3N/zTOInlKa4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk ZjI1MGNiMDItNmM4MC00YzJlLTkyMGQtNjA3ZWE0MjVhNWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTI2oF/+oqRb0WSmIoVmpxT9DXyvqB0HYEZP Xw4RfbBNOE49cCnhmmnWiI5X+Aat8vykCwDLlG4z83Xpw5Wcnp5tlgHeT1C+MW68 T0qUNRyg8I+PPxOnOpa/Bm92eGBcWW0p0g1awhu6MT4AnYoPmFtpomfJhtgHA7ec 31w+uQK0kEiAvQ/OJ2X0HfYLMVTkqs26H2OKORMLRiGfMSPUucYXQCgBnF0PLv4X YoAHezf8halSjHvpUfEg9np7Q3ZUJqVnzg2KngT9XRymFXtCKAnH/BTAuqxvDRzG uiIIDypeIsuCaiR31q7jHysTWcsW/fqRIW+NWSnjI1i6DhLF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoW5t4KqAjvC2gMcZMLDzBmYiauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvNzczNjA4MjQtZGEzYi0z NjNmLWI3NzctMzgxNjVhNzY0YjVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvgxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACW1Sp1OknBV02ZJ8QLMGwZ7va35A0O6eQulxYk9pJbWPV2pCMat9tYh lbHzvpZe1w/24v2+GZUt3MjB8uai+xX7imZV/3lH/mehBuiZsxDO5LhmD/ri0271 12XBMI1rGZJmNBLJphxm8r2hZ6XjR7OtLOt6j0LuPZrNEz+Oai03y/TjL/gRLZHE nGKIaTKuYG3ZNn72MDXhJ9DFBkwQ9agNY3nlkMoiUYe1Ei7fHqTzQzGEbPCA+qmp gsK335U31h190d9BRi2zSTBK6ZztkUtQOPVEp1S67s8lmkV7kSVuOSY//yZy8zct Peo0IUphH11MrGEIcmWf46Dzhb4w0VE= -----END CERTIFICATE-----Generated at Thu Mar 26 12:44:49 2026 by rpki-client