$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa File: 2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa (raw, json) Hash identifier: xPiWpUM3oGq32ZgFs3ubWJX1O9yv6gtEEyjQecZaVRs= Subject key identifier: 04:25:C5:03:2F:FA:A6:2D:9A:3B:02:32:DE:13:38:C9:C2:48:FF:D7 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584E22744664BB15CF0881C7F300 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa Signing time: Thu 11 Jun 2026 09:00:12 +0000 ROA not before: Thu 11 Jun 2026 09:00:12 +0000 ROA not after: Wed 09 Sep 2026 09:00:12 +0000 asID: 21433 IP address blocks: 170.248.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:22:74:46:64:bb:15:cf:08:81:c7:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Jun 11 09:00:12 2026 GMT Not After : Sep 9 09:00:12 2026 GMT Subject: CN=805e8252-52bc-4cff-83c0-37d38d0aeb47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:84:4f:48:81:15:44:f0:2b:fa:ea:50:70: 9a:b9:11:02:0c:6a:2a:03:bb:20:72:2d:dd:8e:e4: c8:0c:45:83:63:5f:fc:d8:d1:02:6d:db:07:bc:43: 5e:0a:cb:fd:fd:b8:de:4d:42:04:e0:0f:ef:eb:cc: f1:ae:29:96:09:b3:54:88:4a:56:13:d2:87:32:3d: 04:a8:ce:24:f3:b6:21:2e:e3:49:68:70:3e:97:50: 8d:43:d1:31:43:75:95:f1:e9:2e:db:fb:80:1d:11: d4:bc:58:a2:1b:e4:12:b3:93:82:d3:32:c1:62:00: a6:ae:06:f0:e5:a6:c2:10:d6:aa:a6:5e:4d:a7:93: 06:47:ad:b3:76:19:76:24:f6:cc:3d:45:9f:16:77: 33:1f:16:a6:51:aa:52:4a:79:0b:10:aa:18:d2:bb: e7:0e:4c:eb:e1:a2:e6:d4:3f:a6:a5:5c:be:93:85: 2b:6d:8b:09:e4:ce:8a:54:8c:58:55:f9:17:90:da: 98:4a:ad:3c:31:6d:bb:f3:c8:06:92:15:bd:fd:26: 93:6e:89:43:64:91:f8:38:f1:c5:e3:7d:00:d0:93: 5a:cb:f0:b2:d4:b7:bc:9e:04:47:62:79:c7:81:e1: 08:c2:f2:85:8f:fe:f9:92:ad:d4:aa:55:fb:7f:e3: 3a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:25:C5:03:2F:FA:A6:2D:9A:3B:02:32:DE:13:38:C9:C2:48:FF:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/2c3827ab-751a-3d17-aa1e-91ec6379dda4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:30:26:62:0c:43:57:be:af:9e:48:6e:58:4a:90:0c:4e:3c: f1:6e:64:10:1b:23:0f:01:72:56:92:34:ee:df:be:41:7a:c1: 28:04:71:16:df:ab:0f:a5:c4:ea:a5:e9:f0:a1:90:0a:b8:c6: cc:4a:da:7e:2f:38:3c:21:c9:99:da:64:40:71:df:17:b6:e9: a5:ab:42:f0:a9:4a:22:c0:60:e9:ad:42:4c:10:aa:93:c4:2d: 4d:8f:ef:c7:43:34:f1:29:28:69:fe:0d:34:90:56:42:bb:5e: 8b:dd:7e:cd:0a:a4:7f:11:a9:d1:95:39:02:ab:53:52:2e:8c: 28:71:4b:df:32:4f:fb:f5:17:92:77:25:b7:2e:9a:d7:c5:d4: 4e:e3:5b:73:25:bb:00:ad:0c:59:1a:cc:53:0d:ec:f2:15:a3: 1f:6c:9a:b2:3d:66:c7:e3:3f:9e:a8:01:da:dd:ed:23:55:99: b6:64:15:86:ab:7f:9b:c3:4f:76:50:c3:a6:83:75:32:0d:c4: a9:ba:b2:4a:01:be:3b:0b:ae:77:cb:1e:6d:8c:13:67:84:ce: 6f:bd:f0:c2:be:70:7d:0e:5a:a5:a5:2e:93:d9:42:79:dc:d8: 4f:18:09:62:8f:05:db:43:40:c2:eb:25:a1:3c:5b:c5:6f:db: 92:14:78:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEZkuxXPCIHH8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk ODA1ZTgyNTItNTJiYy00Y2ZmLTgzYzAtMzdkMzhkMGFlYjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspWET0iBFUTwK/rqUHCauRECDGoqA7sgci3d juTIDEWDY1/82NECbdsHvENeCsv9/bjeTUIE4A/v68zxrimWCbNUiEpWE9KHMj0E qM4k87YhLuNJaHA+l1CNQ9ExQ3WV8eku2/uAHRHUvFiiG+QSs5OC0zLBYgCmrgbw 5abCENaqpl5Np5MGR62zdhl2JPbMPUWfFnczHxamUapSSnkLEKoY0rvnDkzr4aLm 1D+mpVy+k4UrbYsJ5M6KVIxYVfkXkNqYSq08MW2788gGkhW9/SaTbolDZJH4OPHF 430A0JNay/Cy1Le8ngRHYnnHgeEIwvKFj/75kq3UqlX7f+M6gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQlxQMv+qYtmjsCMt4TOMnCSP/XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMmMzODI3YWItNzUxYS0z ZDE3LWFhMWUtOTFlYzYzNzlkZGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvhYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0wJmIMQ1e+r55IblhKkAxOPPFuZBAbIw8BclaSNO7fvkF6wSgEcRbf qw+lxOql6fChkAq4xsxK2n4vODwhyZnaZEBx3xe26aWrQvCpSiLAYOmtQkwQqpPE LU2P78dDNPEpKGn+DTSQVkK7Xovdfs0KpH8RqdGVOQKrU1IujChxS98yT/v1F5J3 JbcumtfF1E7jW3MluwCtDFkazFMN7PIVox9smrI9ZsfjP56oAdrd7SNVmbZkFYar f5vDT3ZQw6aDdTINxKm6skoBvjsLrnfLHm2ME2eEzm+98MK+cH0OWqWlLpPZQnnc 2E8YCWKPBdtDQMLrJaE8W8Vv25IUeGI= -----END CERTIFICATE-----Generated at Sat Jun 13 14:04:38 2026 by rpki-client