$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa File: 89106f7c-2016-37c5-a592-0e9f8ee04f96.roa (raw, json) Hash identifier: oTQJ9IRUt9mDVGutP/m9PRUzj14XL9nBdcRJ1SrXKJc= Subject key identifier: D5:E9:14:FE:E6:5E:82:3F:C9:01:BD:41:FC:BD:CD:C9:8F:A7:7A:EC Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8D35BD1CFC4800D03980 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.251.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8d:35:bd:1c:fc:48:00:d0:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=ae5404a6-14c2-4a21-947c-551675f65bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b2:a8:ae:92:dd:ab:36:4e:e8:37:10:f2:0c: 4e:3e:2d:62:d5:7e:b0:88:88:11:db:17:aa:fc:fa: 3a:80:69:af:12:ec:23:49:0a:86:a9:38:a6:10:3c: 5c:c8:a2:db:7b:bb:d4:db:f0:1a:7d:1a:74:12:67: 3d:87:d3:8c:dc:af:5e:05:26:af:4c:85:99:97:4c: 78:c8:18:71:4e:9e:a9:5d:00:5e:ee:1c:d0:12:4f: c1:e7:25:e5:37:c6:ef:15:7e:7b:29:01:c0:74:14: de:57:3f:bc:a5:c1:03:6a:37:26:d3:a0:25:a0:77: a5:4c:48:b2:71:bf:25:04:0a:ff:ad:fe:fc:ab:a9: a1:d6:5b:d6:19:7f:82:63:a5:04:78:3c:1c:56:87: b6:f4:f2:0e:79:c8:f4:72:0e:93:db:79:b0:3b:86: 7f:eb:df:33:d0:9a:e6:c1:46:5a:a3:a1:01:52:f7: e6:ce:bd:84:6a:15:4d:86:56:8e:6e:5b:34:67:db: 65:30:ce:11:b3:93:61:92:38:51:1f:87:2f:65:57: c8:41:9c:aa:03:25:e6:e9:c9:2c:c5:c1:0f:c2:58: 76:5a:65:a4:7f:ec:d9:a1:17:3b:6f:22:dd:72:87: d6:61:f7:65:fe:52:a6:53:e8:d3:59:15:04:8a:46: 44:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:E9:14:FE:E6:5E:82:3F:C9:01:BD:41:FC:BD:CD:C9:8F:A7:7A:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/89106f7c-2016-37c5-a592-0e9f8ee04f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:b1:a9:39:3b:a2:b1:bd:40:9b:fc:9d:72:6c:b9:a0:1c:5d: 8b:1a:db:9e:95:a9:c3:9f:ee:29:ef:14:13:4a:f7:9a:1f:dc: 0b:73:91:de:93:29:be:b3:e1:47:1f:fa:af:bf:62:ba:4d:c8: cd:aa:23:b1:92:a0:f5:1e:e4:47:bb:78:53:7b:65:14:b3:ab: 48:7c:b3:4e:51:e4:10:f2:71:95:0e:e4:58:ae:8a:ab:d6:6c: 7c:d0:ed:99:a1:1c:84:da:58:ab:d1:17:2d:bd:3d:86:88:c1: 2f:c7:a1:90:e6:28:25:bd:21:d7:19:1d:f5:f7:a0:e9:5c:8a: 3a:ca:7f:b2:51:ad:f4:01:0e:5e:a5:18:d2:a2:89:43:92:92: 95:93:7c:50:c7:34:5a:31:eb:9b:19:38:59:cf:76:d5:0d:6d: 6b:61:81:5e:2d:e4:1b:a4:82:c1:5b:4f:04:6a:86:4a:45:9b: 65:15:49:a7:b4:9b:55:81:63:44:24:9a:62:eb:5f:22:f8:95: a1:f4:3f:e9:95:0c:6f:46:f9:34:a6:31:6c:20:f1:e5:0c:a6: d3:c5:98:44:f7:66:c6:35:5a:76:ad:6e:a1:0a:67:39:74:2b: 39:e8:f8:01:75:b4:0e:31:24:b8:7c:94:ee:de:5d:e7:f4:b3: a3:89:5c:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL401vRz8SADQOYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YWU1NDA0YTYtMTRjMi00YTIxLTk0N2MtNTUxNjc1ZjY1YmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLKorpLdqzZO6DcQ8gxOPi1i1X6wiIgR2xeq /Po6gGmvEuwjSQqGqTimEDxcyKLbe7vU2/AafRp0Emc9h9OM3K9eBSavTIWZl0x4 yBhxTp6pXQBe7hzQEk/B5yXlN8bvFX57KQHAdBTeVz+8pcEDajcm06AloHelTEiy cb8lBAr/rf78q6mh1lvWGX+CY6UEeDwcVoe29PIOecj0cg6T23mwO4Z/698z0Jrm wUZao6EBUvfmzr2EahVNhlaObls0Z9tlMM4Rs5NhkjhRH4cvZVfIQZyqAyXm6cks xcEPwlh2WmWkf+zZoRc7byLdcofWYfdl/lKmU+jTWRUEikZEOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNXpFP7mXoI/yQG9Qfy9zcmPp3rsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvODkxMDZmN2MtMjAxNi0z N2M1LWE1OTItMGU5ZjhlZTA0Zjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOxqTk7orG9QJv8nXJsuaAcXYsa256VqcOf7invFBNK95of3Atzkd6T Kb6z4Ucf+q+/YrpNyM2qI7GSoPUe5Ee7eFN7ZRSzq0h8s05R5BDycZUO5FiuiqvW bHzQ7ZmhHITaWKvRFy29PYaIwS/HoZDmKCW9IdcZHfX3oOlcijrKf7JRrfQBDl6l GNKiiUOSkpWTfFDHNFox65sZOFnPdtUNbWthgV4t5BukgsFbTwRqhkpFm2UVSae0 m1WBY0QkmmLrXyL4laH0P+mVDG9G+TSmMWwg8eUMptPFmET3ZsY1WnatbqEKZzl0 Kzno+AF1tA4xJLh8lO7eXef0s6OJXLg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:38:45 2026 by rpki-client