$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa File: 7cf08e17-a54b-3835-8100-17a3c8704db8.roa (raw, json) Hash identifier: K9EVhoNpq72soNUSLBwTt1PPgapm9HFOsQ3ePhCdyV0= Subject key identifier: 47:07:E7:FF:FC:14:7C:ED:51:A0:E3:B2:76:09:39:DC:86:A8:73:21 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F811C2876F4C6CE7663C0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.248.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:81:1c:28:76:f4:c6:ce:76:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=3a4977ba-3d57-479b-9a25-baa0567ecc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:10:78:76:09:22:c5:1c:36:2f:f7:4d:c2:81: 64:7b:d0:07:b5:22:6c:a5:5d:ff:62:0f:80:7e:28: 95:e5:13:9b:7c:b3:6f:db:e2:0a:64:9b:10:4d:72: 66:a9:5b:d0:3a:71:a6:b6:3d:46:83:8b:38:2b:2f: 06:f7:af:66:12:d2:ad:70:98:98:c6:21:89:57:e0: 40:c4:6e:26:51:a0:3a:bf:78:cc:ef:f6:4f:be:1a: b8:d6:33:b9:dc:ac:7b:0a:ed:cc:5d:1c:8d:96:1f: e6:0a:18:ea:69:88:51:a8:54:14:b3:5d:2d:f5:e5: a6:69:af:9e:bc:f7:7d:66:7c:48:c3:40:c6:c4:b4: a0:cd:b1:26:85:d4:60:e3:fe:34:93:22:0f:94:25: 4b:dd:3e:6a:37:9b:04:86:8d:91:ca:52:cc:a6:6a: 72:21:de:85:0e:7c:b2:9e:7a:51:eb:4a:1e:fc:30: 6d:29:a0:e6:33:f8:e5:2d:b7:6b:97:8f:c9:18:c3: 34:5c:b6:74:87:98:1a:65:04:ae:25:57:32:98:a3: 32:a4:1c:b0:58:4d:04:48:f2:3f:4a:5e:f5:85:ee: f5:de:14:af:9b:1b:4d:51:cb:fc:6b:4d:cd:ce:1a: 59:0d:3a:0c:2e:eb:97:fa:a2:69:47:f5:a1:9e:63: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:07:E7:FF:FC:14:7C:ED:51:A0:E3:B2:76:09:39:DC:86:A8:73:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/7cf08e17-a54b-3835-8100-17a3c8704db8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:0a:44:b4:5e:68:74:b7:cb:1c:d2:71:05:8e:29:3c:79:ac: 4f:48:be:e0:2b:38:28:73:d7:44:e0:69:8e:a6:08:5a:3f:28: ea:c4:f8:95:b9:70:3a:5e:4c:1b:a2:bb:d1:be:b9:55:41:b4: 8a:75:bb:8a:ef:8b:30:2d:a1:51:08:54:ea:2c:57:ff:c0:09: 9e:42:78:b5:be:65:80:f4:72:08:77:25:58:59:35:46:2c:a7: 86:71:17:b1:83:82:1b:3f:85:fd:a0:7b:ac:09:e1:72:28:4a: 8d:d1:17:d6:ad:bb:9f:80:8e:05:fc:92:56:35:09:93:a1:20: e4:e5:72:ba:31:d0:fb:91:3c:73:be:1e:51:72:16:16:e2:b7: 7c:22:fc:a8:fe:fd:5e:5a:30:fe:b1:f9:e3:1a:7b:f4:a0:39: 62:6f:fd:e0:f5:ff:16:60:d7:2a:b5:c9:f8:41:01:74:d4:1f: 81:36:26:31:61:67:e3:68:0d:7f:42:6c:dd:17:c7:45:b8:91: 5f:53:dd:e5:c2:9f:8c:1f:0f:9d:b6:d6:4c:dc:fc:ff:13:18: a6:11:6e:21:61:e8:b3:e4:26:45:2a:55:8a:74:53:7c:e0:19: 5e:8d:15:22:a2:79:cd:26:60:77:9e:a9:56:12:ce:d7:7e:c3: a5:f3:2a:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4EcKHb0xs52Y8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk M2E0OTc3YmEtM2Q1Ny00NzliLTlhMjUtYmFhMDU2N2VjYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxB4dgkixRw2L/dNwoFke9AHtSJspV3/Yg+A fiiV5RObfLNv2+IKZJsQTXJmqVvQOnGmtj1Gg4s4Ky8G969mEtKtcJiYxiGJV+BA xG4mUaA6v3jM7/ZPvhq41jO53Kx7Cu3MXRyNlh/mChjqaYhRqFQUs10t9eWmaa+e vPd9ZnxIw0DGxLSgzbEmhdRg4/40kyIPlCVL3T5qN5sEho2RylLMpmpyId6FDnyy nnpR60oe/DBtKaDmM/jlLbdrl4/JGMM0XLZ0h5gaZQSuJVcymKMypBywWE0ESPI/ Sl71he713hSvmxtNUcv8a03NzhpZDToMLuuX+qJpR/WhnmN0uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcH5//8FHztUaDjsnYJOdyGqHMhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvN2NmMDhlMTctYTU0Yi0z ODM1LTgxMDAtMTdhM2M4NzA0ZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvgUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcKRLReaHS3yxzScQWOKTx5rE9IvuArOChz10TgaY6mCFo/KOrE+JW5 cDpeTBuiu9G+uVVBtIp1u4rvizAtoVEIVOosV//ACZ5CeLW+ZYD0cgh3JVhZNUYs p4ZxF7GDghs/hf2ge6wJ4XIoSo3RF9atu5+AjgX8klY1CZOhIOTlcrox0PuRPHO+ HlFyFhbit3wi/Kj+/V5aMP6x+eMae/SgOWJv/eD1/xZg1yq1yfhBAXTUH4E2JjFh Z+NoDX9CbN0Xx0W4kV9T3eXCn4wfD5221kzc/P8TGKYRbiFh6LPkJkUqVYp0U3zg GV6NFSKiec0mYHeeqVYSztd+w6XzKvM= -----END CERTIFICATE-----Generated at Thu Mar 26 21:14:12 2026 by rpki-client