$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/19afd18e-287c-3db4-960b-34415a90c70e.roa File: 19afd18e-287c-3db4-960b-34415a90c70e.roa (raw, json) Hash identifier: bkG86E2XrVfXAlRUJUh3E9u/Aw9fGUJ5VDpWkAla/8g= Subject key identifier: 25:1C:ED:3A:40:DA:E2:F3:80:CB:18:63:5E:4F:86:BB:71:D4:6B:4C Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584E22744CFE76259BFCDD501A00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/19afd18e-287c-3db4-960b-34415a90c70e.roa Signing time: Thu 11 Jun 2026 09:00:12 +0000 ROA not before: Thu 11 Jun 2026 09:00:12 +0000 ROA not after: Wed 09 Sep 2026 09:00:12 +0000 asID: 21433 IP address blocks: 144.36.120.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:74:4c:fe:76:25:9b:fc:dd:50:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Jun 11 09:00:12 2026 GMT Not After : Sep 9 09:00:12 2026 GMT Subject: CN=658e9e2e-2ca2-47c7-bae7-3662431c3037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:db:c9:ea:94:e9:78:63:d0:86:88:9f:89:0d: f7:2e:e1:d5:88:86:be:61:34:37:05:8d:b8:d9:e6: de:10:dc:f0:ba:39:5e:65:5b:e8:db:f9:95:82:23: 5d:29:3a:3c:b2:10:bb:39:7f:35:ab:91:02:79:2f: cb:d1:30:03:10:e2:48:9e:a4:4d:c2:fc:a7:ff:f6: 99:26:ef:a3:11:c6:33:53:36:9d:3c:f1:e0:ed:7e: 7b:01:80:8d:db:e8:e9:fa:46:4a:1b:f4:8e:36:85: 95:f0:44:ea:04:9e:5a:f9:4f:e3:4e:7e:39:fc:bb: dd:9c:fb:0e:98:b3:71:a1:b8:e3:22:3f:95:d8:95: 23:f6:68:3c:cc:d2:06:19:ec:3d:80:d9:8e:3f:e0: b1:33:c2:6d:ee:59:5d:ae:f3:24:c4:a0:c4:73:ab: bc:e3:b5:d0:64:92:05:3a:38:d3:de:09:13:36:86: 07:1b:52:5b:c9:96:17:3c:43:50:b7:4c:36:0f:bd: 7b:16:0a:db:77:7a:aa:76:8b:5c:e7:d0:5b:48:b7: 91:f4:41:c9:2f:11:cd:8a:a2:cf:ed:8d:78:e5:d2: 9e:51:08:d6:97:9a:2a:0c:00:c3:36:55:3a:10:32: 70:26:9e:5c:70:3e:4d:2c:e1:4c:a4:82:d7:dd:4b: 7e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1C:ED:3A:40:DA:E2:F3:80:CB:18:63:5E:4F:86:BB:71:D4:6B:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/19afd18e-287c-3db4-960b-34415a90c70e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 144.36.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:59:bf:47:c8:e7:89:dd:55:41:65:4b:f6:a2:f6:a5:d7:68: 04:20:5b:76:1c:e2:08:1c:98:8e:ef:bf:e5:1c:89:d0:06:47: c5:04:ab:62:c7:e8:6c:99:b7:b2:c5:74:c8:6c:14:39:45:32: dc:94:c8:03:97:1c:86:a4:a0:e4:7b:93:47:31:0b:31:d4:24: 3d:18:d0:82:49:59:17:8a:d2:b3:5b:d8:7b:d2:55:1d:f2:54: e3:67:16:71:14:a5:e1:3a:b6:6d:0f:f3:7e:cb:e2:78:b1:61: 4c:84:f8:af:e2:1c:b2:16:79:57:ac:ef:d6:9a:e0:99:3c:3f: 9d:28:cb:d9:b7:bf:ec:bd:4b:ce:6f:3b:46:25:62:b2:9d:b4: 25:3f:13:d2:19:32:f4:d5:5c:58:eb:c8:9b:b0:5a:57:01:56: b0:4b:ec:a7:7b:d3:7c:02:4b:8a:01:47:28:8e:31:2e:b2:5c: d4:10:bf:ea:00:11:ad:85:c3:ca:2c:47:5b:92:f9:82:dc:bc: a2:6b:47:ee:e7:be:8e:29:58:95:d0:ec:3a:d5:d2:80:3b:42: 49:46:05:8c:0a:53:97:02:7e:98:75:8b:49:43:2e:ba:a5:98: 1f:15:00:d2:7c:cb:a1:69:7a:ba:93:2e:e4:39:d2:68:24:41: 24:ea:d2:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEz+diWb/N1QGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk NjU4ZTllMmUtMmNhMi00N2M3LWJhZTctMzY2MjQzMWMzMDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdvJ6pTpeGPQhoifiQ33LuHViIa+YTQ3BY24 2ebeENzwujleZVvo2/mVgiNdKTo8shC7OX81q5ECeS/L0TADEOJInqRNwvyn//aZ Ju+jEcYzUzadPPHg7X57AYCN2+jp+kZKG/SONoWV8ETqBJ5a+U/jTn45/LvdnPsO mLNxobjjIj+V2JUj9mg8zNIGGew9gNmOP+CxM8Jt7lldrvMkxKDEc6u847XQZJIF OjjT3gkTNoYHG1JbyZYXPENQt0w2D717Fgrbd3qqdotc59BbSLeR9EHJLxHNiqLP 7Y145dKeUQjWl5oqDADDNlU6EDJwJp5ccD5NLOFMpILX3Ut+BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUc7TpA2uLzgMsYY15Phrtx1GtMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMTlhZmQxOGUtMjg3Yy0z ZGI0LTk2MGItMzQ0MTVhOTBjNzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBkCR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVZv0fI54ndVUFlS/ai9qXXaAQgW3Yc4ggcmI7vv+UcidAGR8UEq2LH 6GyZt7LFdMhsFDlFMtyUyAOXHIakoOR7k0cxCzHUJD0Y0IJJWReK0rNb2HvSVR3y VONnFnEUpeE6tm0P837L4nixYUyE+K/iHLIWeVes79aa4Jk8P50oy9m3v+y9S85v O0YlYrKdtCU/E9IZMvTVXFjryJuwWlcBVrBL7Kd703wCS4oBRyiOMS6yXNQQv+oA Ea2Fw8osR1uS+YLcvKJrR+7nvo4pWJXQ7DrV0oA7QklGBYwKU5cCfph1i0lDLrql mB8VANJ8y6FperqTLuQ50mgkQSTq0vE= -----END CERTIFICATE-----Generated at Sat Jun 13 13:33:04 2026 by rpki-client