$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9a584044-7d25-3f17-8696-1cf2cfd4dc62.roa File: 9a584044-7d25-3f17-8696-1cf2cfd4dc62.roa (raw, json) Hash identifier: 65zCRnnyBWjSVEql93uekWBilUUVaJQM7EvW+66y6dc= Subject key identifier: CD:1B:50:C2:55:96:6E:15:50:D9:8A:C5:B2:B4:C1:C5:17:B4:E6:41 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F80D419E24516506EF100 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9a584044-7d25-3f17-8696-1cf2cfd4dc62.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:80:d4:19:e2:45:16:50:6e:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=d03ad109-dff7-4640-a217-8f9616d513c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:79:ce:73:42:fe:72:1a:49:d5:89:e7:ca:3f: cf:63:3a:fd:d6:3d:d9:0f:0e:6c:5e:9b:7a:c1:41: 51:28:ac:99:e9:c1:de:3f:1c:3f:5c:46:e0:f3:de: f8:37:d8:14:85:08:fc:bb:60:3b:2d:c0:1b:69:27: 64:ac:8f:f7:08:c9:53:52:08:da:28:52:62:98:c3: 56:c8:22:00:b8:3c:dd:38:56:bc:ba:ca:83:03:1a: 2f:00:ee:25:1d:39:aa:7e:30:75:11:26:63:07:cc: b7:99:63:48:8c:e1:30:1e:fb:eb:39:70:08:3b:eb: 50:b6:41:8a:7a:64:02:b2:8a:d9:45:99:98:cf:78: 0a:71:5f:c9:d4:99:39:15:c1:15:b3:c7:4d:f6:15: 98:c6:b7:04:ed:cc:d6:a0:e6:88:1b:12:af:d2:82: f5:e4:f4:37:18:d1:13:1a:a6:6a:3d:f4:e6:df:78: bc:fb:fa:b4:c1:09:14:e8:d3:ee:38:a4:8d:8d:7e: d1:ec:88:95:a8:b7:bc:3b:42:f4:93:8d:fa:21:cc: c2:7e:aa:96:1a:be:13:34:91:43:83:41:34:3d:61: 13:27:e8:37:e9:31:2e:5d:1d:76:c3:e2:9c:1f:b9: 99:18:de:1e:1c:7c:56:18:e6:45:88:18:0a:01:2b: 51:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1B:50:C2:55:96:6E:15:50:D9:8A:C5:B2:B4:C1:C5:17:B4:E6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9a584044-7d25-3f17-8696-1cf2cfd4dc62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:08:01:e2:5f:4a:6b:c3:cf:38:8c:5d:8c:2e:d0:87:97:35: 79:39:86:3b:dc:31:cd:5d:b5:78:75:48:15:fc:36:ee:fa:14: 61:00:5b:e8:04:e1:3c:b7:68:74:59:8b:80:da:70:d4:be:2f: c4:89:a2:7b:28:8c:1f:c3:fc:25:0e:a1:f5:37:83:03:eb:b3: 0e:ed:59:c3:5e:45:bb:40:89:2b:b8:63:e2:56:0b:58:6f:f0: 1e:da:2e:2f:5f:06:b3:9f:60:2b:83:d1:1b:53:ac:95:5b:e3: 88:09:bf:74:21:80:3e:f2:be:0b:17:f5:e5:c3:4e:5d:4a:ff: ef:c4:e1:ce:76:81:b1:5f:bd:70:32:c7:46:00:9f:81:9e:2b: 74:88:76:e2:02:7f:78:12:12:50:18:08:f8:35:81:b7:c3:93: 3d:20:14:5a:eb:e0:8c:db:3e:ca:a3:0a:fd:87:99:81:57:81: 59:55:bf:99:e1:73:bf:50:d3:18:e0:bd:74:fb:4c:09:95:07: 4e:61:65:64:eb:28:ab:ca:1e:a6:31:47:6a:2b:b9:99:e8:56: f8:6d:0e:c5:9f:83:f9:46:af:d8:0c:81:31:b0:b5:2b:59:ae: 29:3d:1d:dd:3a:2e:1c:cc:3c:40:db:d0:e7:54:8a:f9:a9:53: 4b:da:20:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4DUGeJFFlBu8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZDAzYWQxMDktZGZmNy00NjQwLWEyMTctOGY5NjE2ZDUxM2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXnOc0L+chpJ1Ynnyj/PYzr91j3ZDw5sXpt6 wUFRKKyZ6cHePxw/XEbg8974N9gUhQj8u2A7LcAbaSdkrI/3CMlTUgjaKFJimMNW yCIAuDzdOFa8usqDAxovAO4lHTmqfjB1ESZjB8y3mWNIjOEwHvvrOXAIO+tQtkGK emQCsorZRZmYz3gKcV/J1Jk5FcEVs8dN9hWYxrcE7czWoOaIGxKv0oL15PQ3GNET GqZqPfTm33i8+/q0wQkU6NPuOKSNjX7R7IiVqLe8O0L0k436IczCfqqWGr4TNJFD g0E0PWETJ+g36TEuXR12w+KcH7mZGN4eHHxWGOZFiBgKAStRBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0bUMJVlm4VUNmKxbK0wcUXtOZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvOWE1ODQwNDQtN2QyNS0z ZjE3LTg2OTYtMWNmMmNmZDRkYzYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkIAeJfSmvDzziMXYwu0IeXNXk5hjvcMc1dtXh1SBX8Nu76FGEAW+gE 4Ty3aHRZi4DacNS+L8SJonsojB/D/CUOofU3gwPrsw7tWcNeRbtAiSu4Y+JWC1hv 8B7aLi9fBrOfYCuD0RtTrJVb44gJv3QhgD7yvgsX9eXDTl1K/+/E4c52gbFfvXAy x0YAn4GeK3SIduICf3gSElAYCPg1gbfDkz0gFFrr4IzbPsqjCv2HmYFXgVlVv5nh c79Q0xjgvXT7TAmVB05hZWTrKKvKHqYxR2oruZnoVvhtDsWfg/lGr9gMgTGwtStZ rik9Hd06LhzMPEDb0OdUivmpU0vaIOU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:13:22 2026 by rpki-client