$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa File: ba2cd3da-986b-378d-a0be-391b87dfb736.roa (raw, json) Hash identifier: o9IDhzbZ06cYUg/Rh/T6qPXiSlB+Jx6v/s+x06+DSUE= Subject key identifier: 36:2E:A5:14:C5:3F:48:FE:32:2B:79:BA:5B:11:31:06:BE:01:77:1A Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F88ED0FFB530845AFABC0 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 144.36.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:88:ed:0f:fb:53:08:45:af:ab:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=bfc28983-fee3-4bd7-b4ce-d42248a4a6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3e:2a:24:cd:7c:31:64:84:23:5a:27:82:9e: 57:24:8c:70:42:65:55:ab:db:28:cb:8c:61:59:44: 7d:a6:77:45:cf:0d:18:24:b1:51:5c:56:e8:3a:fc: 96:c2:d6:b9:d6:5c:5d:cb:ed:0b:b1:15:69:e3:1d: 73:f2:fd:e3:df:cf:c2:99:b4:18:50:86:d3:59:d2: f9:c2:f0:80:a1:35:b6:04:56:8c:1c:1a:16:f8:ce: 65:76:fa:39:2a:4a:78:6b:43:c1:6f:4a:8f:63:e3: 80:bf:0a:04:bb:ef:5a:96:7e:af:be:72:78:a7:f5: 11:85:da:94:50:fe:7c:a3:48:9c:11:8f:f4:b8:c3: 81:a6:53:8b:9f:97:92:1c:9f:cd:7f:c2:53:3b:2c: 9a:42:03:0e:54:77:2b:42:3f:19:76:8c:7c:54:94: de:72:8c:23:cc:7f:65:cc:84:26:4c:cf:9d:9c:20: 7f:ff:3b:99:97:b7:c6:6b:80:94:9c:46:87:9a:80: c3:4a:22:c0:3e:dc:f8:95:90:cd:42:1d:b8:a6:01: 94:e3:5a:6a:77:0a:7c:9c:c1:03:7d:d4:0d:6d:da: 67:f5:53:b2:b0:8c:7d:62:c0:be:ae:5c:c1:36:34: a6:09:94:39:a0:ab:8c:10:7f:f9:22:7b:dd:6f:32: 3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:2E:A5:14:C5:3F:48:FE:32:2B:79:BA:5B:11:31:06:BE:01:77:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ba2cd3da-986b-378d-a0be-391b87dfb736.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:d2:e1:83:c0:56:51:d4:1c:d3:75:70:16:5c:d6:07:ec:10: 79:9e:15:84:37:a3:01:d1:96:c0:17:d4:b8:93:05:8c:da:1f: 2a:33:5f:cf:4d:2f:f2:00:fe:c5:90:41:1e:1d:56:a0:94:fc: 62:4b:2b:2e:d1:f2:be:9d:fa:54:1b:08:bf:fa:dc:db:4f:35: 7c:ba:0a:d7:52:7b:6f:f3:5e:34:99:d6:9b:a1:ca:57:0a:1f: 10:c6:10:d9:19:54:e6:03:40:c8:b6:d5:5b:3b:ad:7f:a7:3a: e9:47:65:ff:21:9c:51:c2:3f:a5:1c:d6:5a:c7:46:bd:c0:ee: fc:69:88:3d:4f:e5:15:e2:d9:21:77:86:e8:d8:4f:e4:ba:bb: 57:0d:07:6a:8c:81:3d:9b:06:23:6a:64:f2:fb:49:12:01:3f: 91:a4:bb:e2:32:a0:cf:45:0b:12:f0:88:f9:bd:79:07:c0:f8: 76:d1:d9:9b:ab:30:7a:59:95:0c:72:10:b4:9f:ea:ed:8e:f0: a3:4c:b6:6c:18:98:01:86:c8:9a:80:cf:56:41:a6:8f:ff:40: 76:20:cc:5c:23:60:cf:76:06:eb:b6:39:d6:7e:52:54:c6:07: f5:01:fd:25:95:94:61:10:61:71:24:3e:40:50:59:eb:24:1b: 96:0b:d5:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL4jtD/tTCEWvq8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk YmZjMjg5ODMtZmVlMy00YmQ3LWI0Y2UtZDQyMjQ4YTRhNmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5D4qJM18MWSEI1ongp5XJIxwQmVVq9soy4xh WUR9pndFzw0YJLFRXFboOvyWwta51lxdy+0LsRVp4x1z8v3j38/CmbQYUIbTWdL5 wvCAoTW2BFaMHBoW+M5ldvo5Kkp4a0PBb0qPY+OAvwoEu+9aln6vvnJ4p/URhdqU UP58o0icEY/0uMOBplOLn5eSHJ/Nf8JTOyyaQgMOVHcrQj8Zdox8VJTecowjzH9l zIQmTM+dnCB//zuZl7fGa4CUnEaHmoDDSiLAPtz4lZDNQh24pgGU41pqdwp8nMED fdQNbdpn9VOysIx9YsC+rlzBNjSmCZQ5oKuMEH/5InvdbzI9mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYupRTFP0j+Mit5ulsRMQa+AXcaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYmEyY2QzZGEtOTg2Yi0z NzhkLWEwYmUtMzkxYjg3ZGZiNzM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkCTJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEnS4YPAVlHUHNN1cBZc1gfsEHmeFYQ3owHRlsAX1LiTBYzaHyozX89N L/IA/sWQQR4dVqCU/GJLKy7R8r6d+lQbCL/63NtPNXy6CtdSe2/zXjSZ1puhylcK HxDGENkZVOYDQMi21Vs7rX+nOulHZf8hnFHCP6Uc1lrHRr3A7vxpiD1P5RXi2SF3 hujYT+S6u1cNB2qMgT2bBiNqZPL7SRIBP5Gku+IyoM9FCxLwiPm9eQfA+HbR2Zur MHpZlQxyELSf6u2O8KNMtmwYmAGGyJqAz1ZBpo//QHYgzFwjYM92Buu2OdZ+UlTG B/UB/SWVlGEQYXEkPkBQWeskG5YL1bw= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:54 2026 by rpki-client