$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa File: ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa (raw, json) Hash identifier: Sfy/oX9uPitLqxnAdb5k3iW4a+YrmVCLJriDtAVTl74= Subject key identifier: 3B:6E:B0:69:9E:0B:EF:32:DA:3A:95:FE:E6:EF:AA:B7:E6:CB:BD:9E Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D422F8DE932F95FA212C9C200 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa Signing time: Mon 23 Mar 2026 01:00:32 +0000 ROA not before: Mon 23 Mar 2026 01:00:32 +0000 ROA not after: Sun 21 Jun 2026 01:00:32 +0000 asID: 21433 IP address blocks: 170.248.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:42:2f:8d:e9:32:f9:5f:a2:12:c9:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 23 01:00:32 2026 GMT Not After : Jun 21 01:00:32 2026 GMT Subject: CN=537b2336-99f5-431d-ac09-749a5f2648b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:86:4b:ff:e9:49:65:68:b3:91:78:e8:b1: 8b:66:4a:07:ad:14:df:5d:33:43:15:ff:12:95:2d: 96:04:2c:c9:f6:2a:7d:fb:e9:c5:b8:c1:8b:10:81: 17:4e:91:eb:cf:be:89:b5:53:e3:e9:c6:c2:9f:09: 86:c0:9a:80:92:2a:db:ac:38:a2:1d:60:35:b9:2a: 9d:df:3e:f2:45:34:ce:67:10:ad:86:34:fe:a5:ed: d1:21:53:1f:0d:91:93:03:94:da:32:ec:94:bd:7b: b2:d2:54:c7:b4:32:9b:2c:b6:ea:5a:43:af:73:0f: 59:f0:2e:6d:c1:15:0d:97:af:25:00:a2:58:50:27: 1b:6e:64:94:8f:46:58:d6:9c:b2:3b:59:73:3b:0f: 55:4b:dd:b7:6a:73:c6:6f:a0:ce:6c:fd:7e:f6:32: 5c:68:93:18:40:3a:f2:16:04:2f:74:17:52:76:c6: 9f:3d:cc:a3:10:c9:a4:ae:95:e1:a0:58:17:74:fc: a5:11:1c:ec:f8:da:f4:a5:d6:61:db:99:22:7b:d7: c5:23:e6:da:4b:59:dd:c0:3e:d8:5c:71:48:0e:cd: b0:a0:73:41:2d:65:e9:c4:88:ca:d0:ca:47:0a:3f: 51:18:31:1f:39:e3:6c:20:eb:e0:b5:1c:a1:52:83: 1a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:6E:B0:69:9E:0B:EF:32:DA:3A:95:FE:E6:EF:AA:B7:E6:CB:BD:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/ccc9cc00-66c4-3020-94b2-d8ff4d561b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:40:95:e1:5b:3f:83:45:3a:fb:8e:29:c2:06:cc:ec:f3:fb: 29:05:9c:0a:69:c9:a4:13:f4:6e:7b:e5:33:09:5f:77:af:9d: c1:ce:53:8f:ac:92:4b:61:fe:02:c6:4b:94:52:96:86:ef:43: bf:47:48:64:47:07:91:c5:47:0c:6f:95:85:1e:a6:11:17:16: f9:58:9a:7c:09:5f:8c:ab:65:83:ea:59:1e:53:bb:7a:78:9a: f4:77:15:23:b8:37:ef:94:05:c6:e2:f2:e9:6e:02:fc:65:95: 58:52:13:73:13:a5:5b:91:3a:32:c8:9c:54:d2:0d:55:f7:1b: 41:bb:79:53:41:f3:ab:87:76:f4:e3:45:c8:85:67:01:4f:25: c1:f9:2f:23:ca:bc:29:8b:e0:74:f3:0d:fb:93:89:66:ab:92: 61:09:fa:ed:5c:fa:04:68:ba:5f:1d:51:bc:b8:4c:63:cc:80: a3:50:80:58:26:89:34:24:2c:94:dc:1b:0b:f6:64:e9:75:88: f4:f7:f9:23:4a:fc:76:5f:ef:e4:1a:df:59:96:17:c0:30:13: df:f9:8b:23:c4:77:8d:62:a2:12:27:29:aa:4c:a6:fb:16:21: 13:c6:e1:3d:bb:99:57:9a:63:9f:bd:e4:44:3f:86:cb:14:bd: f2:d5:71:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1CL43pMvlfohLJwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMzAxMDAzMloXDTI2MDYyMTAxMDAzMlowLzEtMCsGA1UEAxMk NTM3YjIzMzYtOTlmNS00MzFkLWFjMDktNzQ5YTVmMjY0OGIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0OGS//pSWVos5F46LGLZkoHrRTfXTNDFf8S lS2WBCzJ9ip9++nFuMGLEIEXTpHrz76JtVPj6cbCnwmGwJqAkirbrDiiHWA1uSqd 3z7yRTTOZxCthjT+pe3RIVMfDZGTA5TaMuyUvXuy0lTHtDKbLLbqWkOvcw9Z8C5t wRUNl68lAKJYUCcbbmSUj0ZY1pyyO1lzOw9VS923anPGb6DObP1+9jJcaJMYQDry FgQvdBdSdsafPcyjEMmkrpXhoFgXdPylERzs+Nr0pdZh25kie9fFI+baS1ndwD7Y XHFIDs2woHNBLWXpxIjK0MpHCj9RGDEfOeNsIOvgtRyhUoMa9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtusGmeC+8y2jqV/ubvqrfmy72eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvY2NjOWNjMDAtNjZjNC0z MDIwLTk0YjItZDhmZjRkNTYxYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhAleFbP4NFOvuOKcIGzOzz+ykFnAppyaQT9G575TMJX3evncHOU4+s kkth/gLGS5RSlobvQ79HSGRHB5HFRwxvlYUephEXFvlYmnwJX4yrZYPqWR5Tu3p4 mvR3FSO4N++UBcbi8uluAvxllVhSE3MTpVuROjLInFTSDVX3G0G7eVNB86uHdvTj RciFZwFPJcH5LyPKvCmL4HTzDfuTiWarkmEJ+u1c+gRoul8dUby4TGPMgKNQgFgm iTQkLJTcGwv2ZOl1iPT3+SNK/HZf7+Qa31mWF8AwE9/5iyPEd41iohInKapMpvsW IRPG4T27mVeaY5+95EQ/hssUvfLVcVc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:09 2026 by rpki-client