$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa File: a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa (raw, json) Hash identifier: DuGhSgxAKe72G/b/aYg4aLPq/zZfFpqalHTDG+juDWw= Subject key identifier: 46:2C:0D:BF:83:C8:16:F7:E4:D4:16:9E:8E:0E:4D:D6:A7:22:A6:A2 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8EE90F6A8D6FE8386E80 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.251.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8e:e9:0f:6a:8d:6f:e8:38:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=ddfc2b12-c0b2-4845-ac43-801feee2ee50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:97:c2:95:59:43:15:e2:37:18:71:12:a0:34: bc:a3:cb:6a:97:ee:db:8b:d1:20:55:2e:91:f4:16: 6c:2f:3c:5a:c0:ee:36:41:95:4a:e1:a8:59:49:bc: 83:49:0d:83:2a:14:53:58:ed:68:55:2b:3b:b6:53: 07:0d:b0:b0:6e:8b:8c:4b:95:9b:bf:7f:49:bb:40: 15:ed:3b:72:d7:30:31:b8:4b:b4:2c:fe:d8:dc:ea: 31:79:a2:75:d4:66:aa:f8:3c:34:90:49:e1:8f:6b: ab:b2:e5:e8:9e:0c:23:d5:5f:1f:5b:84:b5:5e:5f: d9:e9:8c:0a:78:92:69:83:88:57:31:d9:71:b3:25: f3:05:14:54:8c:c4:f5:85:ac:80:a9:c5:75:98:d1: a2:2e:49:26:45:c2:8f:47:75:fe:2a:3f:c5:47:6f: b3:2e:bb:ed:78:a7:38:b8:12:df:e3:2e:c8:07:1d: 14:0e:5e:44:c1:9a:ce:ce:36:50:02:7c:b4:7b:72: 52:c3:69:9d:2b:2e:80:58:2f:d2:e2:87:2e:0b:f2: bb:57:84:ff:c6:98:ba:bb:74:b9:c1:37:7c:c7:92: 30:e1:aa:45:02:1b:40:a9:fd:94:2f:c6:bb:c6:ac: 06:b3:89:90:1b:25:58:43:d5:fa:1e:91:ae:6a:27: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:2C:0D:BF:83:C8:16:F7:E4:D4:16:9E:8E:0E:4D:D6:A7:22:A6:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/a102dfb0-2d72-3cf6-8ff1-81c5b7b6fd66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.251.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:17:dc:d3:61:5d:aa:32:9f:19:fd:62:74:35:5a:aa:d5:de: 0c:35:31:9d:f7:2c:0b:ce:66:e1:2b:b4:00:8b:bb:d8:99:b0: 82:53:3c:90:93:df:02:d5:7a:7d:c9:c0:fa:7c:f9:aa:c2:11: 43:6c:cf:ba:ab:27:10:d3:94:82:c6:ce:de:d0:a4:0b:3d:fa: cb:16:54:1e:79:74:2d:31:ab:b2:81:63:db:ac:7f:92:05:59: a0:a0:db:3b:51:f4:f6:63:fe:5d:af:a8:c2:cc:6b:e3:50:eb: 59:23:5a:7c:cf:f0:e9:79:2a:ed:95:16:b0:09:da:c5:ab:7a: 3a:fd:96:7e:77:17:7f:38:51:81:e3:86:24:c5:8f:f7:f7:f1: af:13:f4:99:c3:45:c6:89:0e:1a:d2:e0:1f:86:64:27:e9:a0: 81:27:73:08:da:67:94:a1:9d:7a:2f:39:cd:73:e2:98:5a:0b: c0:89:31:be:7f:93:d8:07:8f:f7:fa:4c:ee:26:1d:ee:2e:2c: eb:0b:09:18:c4:6d:e9:85:fc:39:6a:f4:77:89:e1:4c:c3:3a: 17:f9:33:6b:95:af:f2:19:42:93:57:e8:f2:3b:d1:84:3a:2f: 47:2a:c4:3a:f4:38:e5:29:d5:f6:4d:fd:88:77:df:1e:4b:d0: de:d5:3a:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL47pD2qNb+g4boAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk ZGRmYzJiMTItYzBiMi00ODQ1LWFjNDMtODAxZmVlZTJlZTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpfClVlDFeI3GHESoDS8o8tql+7bi9EgVS6R 9BZsLzxawO42QZVK4ahZSbyDSQ2DKhRTWO1oVSs7tlMHDbCwbouMS5Wbv39Ju0AV 7Tty1zAxuEu0LP7Y3OoxeaJ11Gaq+Dw0kEnhj2ursuXongwj1V8fW4S1Xl/Z6YwK eJJpg4hXMdlxsyXzBRRUjMT1hayAqcV1mNGiLkkmRcKPR3X+Kj/FR2+zLrvteKc4 uBLf4y7IBx0UDl5EwZrOzjZQAny0e3JSw2mdKy6AWC/S4ocuC/K7V4T/xpi6u3S5 wTd8x5Iw4apFAhtAqf2UL8a7xqwGs4mQGyVYQ9X6HpGuaifUjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYsDb+DyBb35NQWno4OTdanIqaiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYTEwMmRmYjAtMmQ3Mi0z Y2Y2LThmZjEtODFjNWI3YjZmZDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAX3NNhXaoynxn9YnQ1WqrV3gw1MZ33LAvOZuErtACLu9iZsIJTPJCT 3wLVen3JwPp8+arCEUNsz7qrJxDTlILGzt7QpAs9+ssWVB55dC0xq7KBY9usf5IF WaCg2ztR9PZj/l2vqMLMa+NQ61kjWnzP8Ol5Ku2VFrAJ2sWrejr9ln53F384UYHj hiTFj/f38a8T9JnDRcaJDhrS4B+GZCfpoIEncwjaZ5ShnXovOc1z4phaC8CJMb5/ k9gHj/f6TO4mHe4uLOsLCRjEbemF/Dlq9HeJ4UzDOhf5M2uVr/IZQpNX6PI70YQ6 L0cqxDr0OOUp1fZN/Yh33x5L0N7VOv4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:54:15 2026 by rpki-client