$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa File: 32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa (raw, json) Hash identifier: B2405GsdoZiv/mgVk8VxFgEpbxx8YD2PhE/tOShlQmU= Subject key identifier: DB:B3:14:01:23:AB:12:08:28:99:F6:58:5C:8F:F5:C0:B7:E1:37:B7 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584CF587B061BAEAD421F0CB1A00 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa Signing time: Mon 23 Feb 2026 14:00:41 +0000 ROA not before: Mon 23 Feb 2026 14:00:41 +0000 ROA not after: Sun 24 May 2026 13:00:41 +0000 asID: 21433 IP address blocks: 170.248.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f5:87:b0:61:ba:ea:d4:21:f0:cb:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Feb 23 14:00:41 2026 GMT Not After : May 24 13:00:41 2026 GMT Subject: CN=6b8b3bd3-ba4f-4fcd-b1d9-d9b8a2b62250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:25:09:6e:69:39:17:98:c9:d7:b9:ea:87:3f: 65:b8:14:45:f6:b9:c7:88:38:db:3b:e6:21:7c:94: bb:16:04:06:f3:26:aa:25:0b:a4:6e:40:7e:79:8b: 7c:b8:3e:c5:78:b7:83:6d:19:5f:c4:9c:1d:ac:2c: 1c:2a:5e:2c:14:97:ac:ad:26:ca:6f:31:a3:7f:18: f7:4a:cc:a8:ef:47:91:e7:37:fc:78:35:e9:be:68: 49:2b:26:0d:0e:aa:e3:71:c9:67:5a:b0:5a:97:84: 7f:26:e2:5b:b5:5b:16:f0:07:5b:2f:49:15:1a:7b: 04:c1:5e:29:f7:f0:93:fc:99:5a:a4:94:57:1b:51: d6:5c:59:31:f7:ab:89:a6:87:86:43:ac:e3:c7:75: 15:d4:1c:a9:4e:9b:cd:b8:b3:4f:83:3b:f5:37:81: 39:72:17:c5:b8:f5:f4:66:93:ac:7a:c6:82:72:83: 86:9b:b0:94:59:c2:82:1f:98:08:0d:b4:94:07:4c: 6d:b2:b1:3e:2c:77:bb:39:b1:02:9f:32:5f:9b:06: 5d:ea:b2:4c:99:f2:44:5b:a6:c8:44:76:c2:86:a7: b5:eb:3a:2f:c8:aa:37:b8:64:e5:44:90:da:ae:3b: c2:7a:61:c3:9f:8a:ac:38:84:a6:3f:a2:64:5c:69: b9:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B3:14:01:23:AB:12:08:28:99:F6:58:5C:8F:F5:C0:B7:E1:37:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/32dd9e0d-a1c6-3e45-b5e4-db8f25c33484.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:12:71:5f:91:1b:d0:d8:64:13:73:19:df:8a:39:16:2d:1f: f1:6e:0a:03:ca:5b:82:82:25:65:cb:cb:d7:07:3c:14:e9:16: d8:11:b6:bd:a8:73:57:df:74:e7:45:c4:db:b7:a1:5e:03:b2: 3e:6c:82:d3:d5:e9:0c:a2:a7:21:64:22:58:95:29:31:24:2b: eb:2a:1d:7c:43:af:9f:97:fc:fc:19:d6:3b:9b:4f:96:48:5b: 24:05:b2:59:b7:00:42:9c:b2:01:17:43:69:68:3c:dd:c2:c1: 53:37:87:a7:12:20:a4:78:e6:22:bd:b0:9e:13:7f:de:5c:10: c3:58:c7:06:ea:3f:08:a4:b1:63:66:28:36:dd:2f:66:ca:e5: 13:37:72:68:87:f6:b6:39:28:cc:c1:c4:07:fe:01:bd:d7:de: bc:7f:23:7a:06:90:e4:5d:ca:06:1b:e2:df:29:79:f1:c4:f4: a1:3e:9b:74:f3:2e:ac:f1:b9:97:31:83:7b:17:31:47:b7:ed: e8:5e:9b:56:40:ed:ca:5a:b3:62:8f:2d:0b:77:af:85:66:ee: f0:16:84:e5:74:e5:25:80:74:b0:72:9c:e1:d3:6c:c6:35:76: 4f:7d:a0:d9:29:2f:12:63:3d:99:0d:20:ff:5a:f8:13:7a:28: 87:13:55:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz1h7BhuurUIfDLGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk NmI4YjNiZDMtYmE0Zi00ZmNkLWIxZDktZDliOGEyYjYyMjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryUJbmk5F5jJ17nqhz9luBRF9rnHiDjbO+Yh fJS7FgQG8yaqJQukbkB+eYt8uD7FeLeDbRlfxJwdrCwcKl4sFJesrSbKbzGjfxj3 Ssyo70eR5zf8eDXpvmhJKyYNDqrjcclnWrBal4R/JuJbtVsW8AdbL0kVGnsEwV4p 9/CT/JlapJRXG1HWXFkx96uJpoeGQ6zjx3UV1BypTpvNuLNPgzv1N4E5chfFuPX0 ZpOsesaCcoOGm7CUWcKCH5gIDbSUB0xtsrE+LHe7ObECnzJfmwZd6rJMmfJEW6bI RHbChqe16zovyKo3uGTlRJDarjvCemHDn4qsOISmP6JkXGm5NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNuzFAEjqxIIKJn2WFyP9cC34Te3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMzJkZDllMGQtYTFjNi0z ZTQ1LWI1ZTQtZGI4ZjI1YzMzNDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqviAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8ScV+RG9DYZBNzGd+KORYtH/FuCgPKW4KCJWXLy9cHPBTpFtgRtr2o c1ffdOdFxNu3oV4Dsj5sgtPV6QyipyFkIliVKTEkK+sqHXxDr5+X/PwZ1jubT5ZI WyQFslm3AEKcsgEXQ2loPN3CwVM3h6cSIKR45iK9sJ4Tf95cEMNYxwbqPwiksWNm KDbdL2bK5RM3cmiH9rY5KMzBxAf+Ab3X3rx/I3oGkORdygYb4t8pefHE9KE+m3Tz LqzxuZcxg3sXMUe37ehem1ZA7cpas2KPLQt3r4Vm7vAWhOV05SWAdLBynOHTbMY1 dk99oNkpLxJjPZkNIP9a+BN6KIcTVWg= -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:22 2026 by rpki-client