$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa File: b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa (raw, json) Hash identifier: kQ7b8etzfvt1Ea6e9jd6t1Ysn5Tn+GOA1oE+d65DL5E= Subject key identifier: F7:44:DE:4D:3B:7B:61:46:13:81:2E:EE:64:5D:AE:A8:9C:24:F1:1D Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8BEB152C709282733700 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8b:eb:15:2c:70:92:82:73:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=70bbeb74-aab8-401c-a8f2-80b08ed0b7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e7:d1:c3:95:04:54:ea:09:38:4d:ba:ea:d6: ad:0f:a8:0e:51:d8:ea:69:a8:28:50:68:4a:65:db: 5b:f0:2c:00:09:ff:a5:7f:1c:9f:1b:f7:31:88:2b: d7:fa:f3:65:9a:a3:13:a1:c4:36:e4:51:8a:cf:c0: dd:d4:c1:7c:39:2e:70:35:e2:a2:b8:cc:bc:c7:18: 5c:1c:a8:58:d4:4b:9e:4c:d9:97:35:95:7c:d1:4b: 20:4a:a8:52:8a:d8:81:db:e9:2d:dc:d5:48:d8:78: 3f:3c:68:8c:d2:d2:48:a2:fa:dc:2f:93:a4:29:34: 6d:c1:40:c3:41:42:cd:55:e4:8d:4e:d4:78:cd:46: a9:55:7f:17:a5:39:eb:be:bf:3e:5b:46:81:91:14: de:2f:8a:d2:55:d3:54:6e:5b:6d:60:20:d2:79:2a: e0:45:4d:9c:1e:c3:b2:73:c4:b3:7f:77:e8:c0:38: b3:02:a8:68:4a:a1:ad:11:97:48:80:d1:be:1c:20: 76:83:c4:83:0e:b0:ec:2b:d2:04:be:c2:57:0e:c7: c1:53:e4:1c:0f:83:9f:49:a5:37:8c:05:9c:bc:0a: 1c:f2:ce:3f:49:44:5f:c7:b0:88:76:57:1a:68:81: 81:fe:51:66:3d:7a:32:d5:24:a2:2c:23:8b:d3:be: f4:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:44:DE:4D:3B:7B:61:46:13:81:2E:EE:64:5D:AE:A8:9C:24:F1:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b5d5827b-a278-3d30-8ef3-dddbc9429e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:50:bf:9f:c3:47:85:f4:38:01:da:34:5c:76:6c:74:3f:05: a5:a6:8e:62:ba:d8:67:63:fb:66:60:13:9c:51:09:a0:3d:65: 5b:f6:05:f4:88:55:83:fe:32:21:7d:c5:33:d2:7f:a0:7f:11: 55:b7:fc:2e:f9:b5:3d:f2:39:50:b6:f3:02:f1:47:b9:c1:71: 02:96:a2:ba:75:5a:45:e4:ba:cc:30:25:64:37:00:29:5b:9c: c7:1a:16:7f:fe:0b:6d:14:64:3d:a2:85:b0:7d:57:32:83:5d: c4:7d:b7:a9:e9:c1:6a:f9:92:ee:ca:01:4e:53:fb:66:1d:fd: 57:09:03:25:06:3f:2d:7f:cb:04:28:53:fd:0b:0c:ca:a8:67: df:df:43:22:c0:78:83:85:7e:52:17:ae:5d:c1:c8:7c:2c:85: 09:b4:92:5b:11:a9:11:5d:7b:98:8d:23:f1:51:df:7d:50:0c: fe:19:fc:52:67:02:dc:5c:64:b7:ea:5b:93:20:8e:07:03:9c: ea:fc:74:39:0e:06:be:06:27:ba:6c:01:46:f1:4e:cd:58:2e: 17:e4:b4:7d:28:f2:c0:a5:d4:8f:11:64:30:e0:df:a7:d9:15: 81:4e:94:08:24:74:64:c2:1d:28:8c:bc:5b:b5:49:ce:7b:64: c1:7a:37:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4vrFSxwkoJzNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NzBiYmViNzQtYWFiOC00MDFjLWE4ZjItODBiMDhlZDBiN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlefRw5UEVOoJOE266tatD6gOUdjqaagoUGhK Zdtb8CwACf+lfxyfG/cxiCvX+vNlmqMTocQ25FGKz8Dd1MF8OS5wNeKiuMy8xxhc HKhY1EueTNmXNZV80UsgSqhSitiB2+kt3NVI2Hg/PGiM0tJIovrcL5OkKTRtwUDD QULNVeSNTtR4zUapVX8XpTnrvr8+W0aBkRTeL4rSVdNUblttYCDSeSrgRU2cHsOy c8Szf3fowDizAqhoSqGtEZdIgNG+HCB2g8SDDrDsK9IEvsJXDsfBU+QcD4OfSaU3 jAWcvAoc8s4/SURfx7CIdlcaaIGB/lFmPXoy1SSiLCOL0770SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdE3k07e2FGE4Eu7mRdrqicJPEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjVkNTgyN2ItYTI3OC0z ZDMwLThlZjMtZGRkYmM5NDI5ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCR2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlQv5/DR4X0OAHaNFx2bHQ/BaWmjmK62Gdj+2ZgE5xRCaA9ZVv2BfSI VYP+MiF9xTPSf6B/EVW3/C75tT3yOVC28wLxR7nBcQKWorp1WkXkuswwJWQ3AClb nMcaFn/+C20UZD2ihbB9VzKDXcR9t6npwWr5ku7KAU5T+2Yd/VcJAyUGPy1/ywQo U/0LDMqoZ9/fQyLAeIOFflIXrl3ByHwshQm0klsRqRFde5iNI/FR331QDP4Z/FJn AtxcZLfqW5MgjgcDnOr8dDkOBr4GJ7psAUbxTs1YLhfktH0o8sCl1I8RZDDg36fZ FYFOlAgkdGTCHSiMvFu1Sc57ZMF6N6Q= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:28 2026 by rpki-client