$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/df56ae4d-81a9-380e-8f97-5957e89f9c2f.roa File: df56ae4d-81a9-380e-8f97-5957e89f9c2f.roa (raw, json) Hash identifier: TlFQ7tLEnGzHLxhneRHFD7WHTJuy1YLhRVw5T3PS+74= Subject key identifier: 93:72:23:12:88:A9:AB:2E:16:39:C5:67:9B:E2:C4:56:7D:7B:C0:E0 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584D40CB9E61B6722640952D0C50 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/df56ae4d-81a9-380e-8f97-5957e89f9c2f.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 21433 IP address blocks: 144.36.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:cb:9e:61:b6:72:26:40:95:2d:0c:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=feae0078-2696-49b1-9f52-6202be6cd377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:00:d0:20:2a:92:9a:6e:06:a0:ad:34:d3:6d: 96:e8:fa:b9:a4:b7:f2:25:53:cd:24:0e:20:d1:13: 66:cd:bb:e0:29:6e:e9:65:1d:bd:d6:5b:0a:c5:88: 28:52:f3:ee:8e:f6:5b:6e:00:04:30:44:b2:62:01: 33:b2:3e:4d:e7:43:6a:b6:48:1e:72:4b:31:b5:52: 15:1c:a0:bb:c6:58:07:8f:7b:4a:d2:5f:5a:28:8f: 60:06:f4:e1:3b:07:5e:22:ed:d8:72:d3:5f:df:39: 9e:55:b4:a3:c1:16:24:79:54:3a:2a:a1:c4:23:43: 8e:1a:f9:62:83:70:c7:a7:bb:f4:c2:ab:6c:8e:c8: 51:9b:27:4f:43:77:03:90:59:b3:22:65:5b:27:7a: c4:55:e6:45:f4:e5:6c:f9:7e:cd:9d:97:51:e2:2d: 16:d3:0c:73:2b:15:49:b2:d0:42:d4:02:44:d0:19: 8a:26:b7:db:af:85:b3:30:26:82:78:7c:0b:69:da: 13:65:7a:a4:a0:cf:d7:85:1e:96:3f:45:a2:3b:05: 6b:81:02:77:8b:73:38:ac:5a:22:4f:33:ec:96:41: cb:6d:4b:b9:a1:6d:21:41:9d:17:70:6b:9a:4b:55: 39:57:fc:9d:11:6b:35:a0:47:20:61:0c:9f:af:ca: f2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:72:23:12:88:A9:AB:2E:16:39:C5:67:9B:E2:C4:56:7D:7B:C0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/df56ae4d-81a9-380e-8f97-5957e89f9c2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:f5:b6:a2:a4:f6:b1:aa:b2:b0:82:28:b5:61:d6:b4:b3:fb: 6b:7b:9a:32:82:48:ee:60:84:1f:21:e9:89:c8:b1:3f:2b:6d: a0:8c:5b:3f:b0:32:30:5a:bf:3a:1a:90:ee:e8:bf:bc:79:38: e3:4d:54:2a:4a:61:91:3c:75:d0:bd:cd:d4:1d:08:d0:ce:87: cc:b4:b7:a5:24:6b:51:81:b8:69:fa:ae:3d:e6:bb:f6:0d:35: 4c:04:87:48:b1:83:96:e7:1a:f2:22:0c:8f:10:80:50:b9:f7: 7f:34:2d:d8:34:6e:dd:e8:78:7b:e7:92:e7:15:b3:9e:56:34: 24:25:71:54:f5:9d:44:f2:34:78:20:21:62:2e:8d:3e:c7:73: cb:eb:a2:44:0a:b7:3e:79:5b:55:ca:7f:6b:5f:50:df:4e:29: b7:b0:59:fc:35:f0:d8:e4:8e:b3:68:e0:7f:eb:41:c4:09:19: 09:a1:3a:7b:8b:a9:dc:5f:7c:d9:71:25:bb:8c:26:80:79:9e: 81:02:5d:d3:a7:f3:03:37:18:48:31:51:e0:ab:66:fc:1e:28: 64:4a:76:74:f9:c3:45:10:bf:93:a0:77:d0:e9:e4:19:cd:7b: bc:3c:3b:c4:58:33:a9:e3:08:e3:7a:2c:d1:68:7f:a5:78:1f: b2:11:09:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Ay55htnImQJUtDFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk ZmVhZTAwNzgtMjY5Ni00OWIxLTlmNTItNjIwMmJlNmNkMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQDQICqSmm4GoK00022W6Pq5pLfyJVPNJA4g 0RNmzbvgKW7pZR291lsKxYgoUvPujvZbbgAEMESyYgEzsj5N50NqtkgecksxtVIV HKC7xlgHj3tK0l9aKI9gBvThOwdeIu3YctNf3zmeVbSjwRYkeVQ6KqHEI0OOGvli g3DHp7v0wqtsjshRmydPQ3cDkFmzImVbJ3rEVeZF9OVs+X7NnZdR4i0W0wxzKxVJ stBC1AJE0BmKJrfbr4WzMCaCeHwLadoTZXqkoM/XhR6WP0WiOwVrgQJ3i3M4rFoi TzPslkHLbUu5oW0hQZ0XcGuaS1U5V/ydEWs1oEcgYQyfr8rySQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNyIxKIqasuFjnFZ5vixFZ9e8DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvZGY1NmFlNGQtODFhOS0z ODBlLThmOTctNTk1N2U4OWY5YzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCSCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/1tqKk9rGqsrCCKLVh1rSz+2t7mjKCSO5ghB8h6YnIsT8rbaCMWz+w MjBavzoakO7ov7x5OONNVCpKYZE8ddC9zdQdCNDOh8y0t6Uka1GBuGn6rj3mu/YN NUwEh0ixg5bnGvIiDI8QgFC59380Ldg0bt3oeHvnkucVs55WNCQlcVT1nUTyNHgg IWIujT7Hc8vrokQKtz55W1XKf2tfUN9OKbewWfw18NjkjrNo4H/rQcQJGQmhOnuL qdxffNlxJbuMJoB5noECXdOn8wM3GEgxUeCrZvweKGRKdnT5w0UQv5Ogd9Dp5BnN e7w8O8RYM6njCON6LNFof6V4H7IRCX8= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:48 2026 by rpki-client