$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/975d4f84-dda2-387f-87cb-4c92ede16dd0.roa File: 975d4f84-dda2-387f-87cb-4c92ede16dd0.roa (raw, json) Hash identifier: tYsXXGbf96Isyzt5J+5AYIJ5ImAHyrUHr497r4DWDnQ= Subject key identifier: 4B:21:6A:EF:CE:3F:1B:01:AF:4C:A1:FC:EC:F7:CB:09:39:38:A6:68 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D40CBA01AFCC5ECE4D90ED8E0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/975d4f84-dda2-387f-87cb-4c92ede16dd0.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 21433 IP address blocks: 144.36.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:a0:1a:fc:c5:ec:e4:d9:0e:d8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=0da53034-7a0c-4920-9121-5f0365310791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8c:4c:77:83:4d:04:05:65:db:33:c4:f4:a0: 18:9e:3d:a4:36:26:b8:e4:4b:94:ee:78:3a:5e:8a: 60:30:67:1f:82:68:79:fb:75:be:5d:3a:0a:d9:d6: f2:da:9a:ab:a4:13:3c:0c:d0:63:48:10:a2:8f:02: f7:c0:fe:bf:a9:dd:52:3f:90:ef:31:cc:5c:ce:07: c3:6f:00:39:89:8f:83:e3:e1:21:11:63:64:6e:70: e8:37:41:de:f9:cc:e0:a7:99:4b:63:42:fd:3c:6c: b7:c6:7a:70:51:0b:04:13:9f:7c:30:e6:e9:ec:48: ca:13:3f:2d:d8:4e:6f:23:81:8a:4e:8b:fe:bb:cc: 27:e4:2c:5d:93:06:9b:6a:fb:29:db:39:13:fb:b2: bb:c1:6f:38:b5:f2:df:4f:79:34:80:54:0d:c5:4d: 36:96:a9:54:cf:14:52:84:ac:ae:be:2a:e1:21:31: 65:bf:01:81:2c:82:ff:ca:b3:3e:8e:58:57:29:ae: cd:c1:7f:93:cd:17:39:b3:a9:ab:21:6d:4f:d0:fb: 7d:8f:3a:76:6e:37:bb:74:91:2b:e7:3a:fe:50:44: 1d:9e:d7:e8:eb:1f:6e:a3:de:d7:9e:88:61:da:5b: ac:ea:a7:4f:9d:81:eb:a6:97:30:fa:43:c4:e1:e4: c7:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:21:6A:EF:CE:3F:1B:01:AF:4C:A1:FC:EC:F7:CB:09:39:38:A6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/975d4f84-dda2-387f-87cb-4c92ede16dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:d3:42:f2:bd:cc:d4:39:8b:be:86:3b:df:22:b1:ef:02:ab: f0:9e:9c:66:e6:ff:af:a1:28:07:5e:73:01:fa:89:5c:8b:a3: 43:e3:c2:8f:24:ae:bb:d2:86:08:12:25:3d:61:0f:4d:d3:a2: cd:ad:2c:1b:00:c9:ce:a7:ca:0e:b6:4f:8c:7e:2f:38:49:da: fb:af:d6:0c:ff:cf:2a:58:a2:72:c5:82:8d:6f:65:11:17:9b: 64:87:71:84:43:88:0b:cf:f1:f0:c1:42:08:cb:50:8c:e3:86: 2a:4d:fa:91:bf:da:34:3e:88:08:07:c0:45:37:b5:a3:f7:4a: 04:9e:2f:bd:45:52:24:30:ae:ec:df:d5:7f:06:cb:c8:9e:03: da:85:76:35:65:7f:60:b6:f3:f7:ac:e1:a0:aa:87:06:20:40: 70:ad:c7:31:5e:d1:b4:e1:66:5a:56:a3:68:8a:89:e9:e1:78: ca:a5:27:9d:63:52:78:ba:61:aa:13:65:4d:3e:e6:87:3f:39: a3:65:22:7a:fd:62:e1:58:30:11:7c:26:16:a4:4e:79:e0:6f: 97:52:0b:f5:6b:4b:56:53:22:f1:2f:ff:40:0b:84:91:29:5b: c4:02:75:ee:01:b2:46:27:91:c1:dc:8c:59:b5:13:ad:3f:7d: 83:59:b5:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay6Aa/MXs5NkO2OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk MGRhNTMwMzQtN2EwYy00OTIwLTkxMjEtNWYwMzY1MzEwNzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIxMd4NNBAVl2zPE9KAYnj2kNia45EuU7ng6 XopgMGcfgmh5+3W+XToK2dby2pqrpBM8DNBjSBCijwL3wP6/qd1SP5DvMcxczgfD bwA5iY+D4+EhEWNkbnDoN0He+czgp5lLY0L9PGy3xnpwUQsEE598MObp7EjKEz8t 2E5vI4GKTov+u8wn5Cxdkwabavsp2zkT+7K7wW84tfLfT3k0gFQNxU02lqlUzxRS hKyuvirhITFlvwGBLIL/yrM+jlhXKa7NwX+TzRc5s6mrIW1P0Pt9jzp2bje7dJEr 5zr+UEQdntfo6x9uo97Xnohh2lus6qdPnYHrppcw+kPE4eTHzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEshau/OPxsBr0yh/Oz3ywk5OKZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOTc1ZDRmODQtZGRhMi0z ODdmLTg3Y2ItNGM5MmVkZTE2ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCSDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7TQvK9zNQ5i76GO98ise8Cq/CenGbm/6+hKAdecwH6iVyLo0Pjwo8k rrvShggSJT1hD03Tos2tLBsAyc6nyg62T4x+LzhJ2vuv1gz/zypYonLFgo1vZREX m2SHcYRDiAvP8fDBQgjLUIzjhipN+pG/2jQ+iAgHwEU3taP3SgSeL71FUiQwruzf 1X8Gy8ieA9qFdjVlf2C28/es4aCqhwYgQHCtxzFe0bThZlpWo2iKienheMqlJ51j Uni6YaoTZU0+5oc/OaNlInr9YuFYMBF8JhakTnngb5dSC/VrS1ZTIvEv/0ALhJEp W8QCde4BskYnkcHcjFm1E60/fYNZtX0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:26:04 2026 by rpki-client