$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/955f2498-c344-3345-9ae4-1f671e357812.roa File: 955f2498-c344-3345-9ae4-1f671e357812.roa (raw, json) Hash identifier: LGn2KRFpZKcQlSxho8+hS/3hNf3dqn5yrGoILUliKC4= Subject key identifier: 95:22:54:63:F5:96:C3:B1:B0:CA:FB:CB:C0:C6:F0:98:5C:18:F4:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584D237A09608F5BD2B4C65C923F Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/955f2498-c344-3345-9ae4-1f671e357812.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 19905 IP address blocks: 150.195.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 14 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:09:60:8f:5b:d2:b4:c6:5c:92:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=7d964ce7-aa71-45bb-8cb6-465cbeb7f4e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:fd:77:6f:bc:f7:fd:0f:00:88:53:12:04:df: d2:37:2b:da:92:84:4b:07:0b:c6:49:fd:4e:04:a3: 0a:dd:72:0a:3b:b2:7f:a4:9e:34:21:a8:80:c9:c2: 26:ea:fa:a8:47:50:31:89:80:af:f1:48:7b:e8:0b: 52:45:67:cf:d6:87:e2:9c:92:6a:da:62:ff:95:d3: bc:f6:7c:67:7b:18:43:17:bd:27:1c:c8:9b:70:00: be:5f:85:91:b6:c4:f6:01:bf:a9:e4:7b:12:37:99: 3e:6c:44:55:5b:b4:6e:aa:9c:7d:12:82:3a:e7:87: 7b:c8:49:1b:8c:3b:91:29:06:b4:79:f4:c0:e1:33: 0d:eb:33:59:d2:da:80:85:41:d9:be:e8:08:7a:00: d2:6d:83:ca:f8:4f:60:dd:01:db:85:44:ba:4c:8f: 42:15:40:92:8d:77:6d:09:2b:e4:f2:18:37:31:8c: e8:17:cf:41:6c:cb:9d:fe:54:d2:7d:e2:3b:01:c7: 73:53:8e:d4:df:2b:24:3b:57:a7:c6:a5:5a:95:25: 8e:bd:0a:3f:c4:fa:6d:9c:5e:b1:8d:11:96:e0:70: 5e:a2:91:bf:8e:01:dc:33:89:be:eb:13:b6:a8:67: 15:ae:2e:30:60:88:a1:7a:a2:58:b2:8e:43:ba:99: 34:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:22:54:63:F5:96:C3:B1:B0:CA:FB:CB:C0:C6:F0:98:5C:18:F4:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/955f2498-c344-3345-9ae4-1f671e357812.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 150.195.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:94:f5:9c:29:77:32:ac:3c:68:7f:d9:7a:d9:86:73:ba:b8: c0:da:23:9e:74:f2:c1:dc:c1:e2:9b:1e:fc:ad:ce:85:81:24: 5e:bf:55:89:c0:45:b8:17:d8:46:a3:8b:34:d9:c6:cf:1e:2a: 0e:6f:10:2c:4c:c7:3c:71:51:df:0f:67:17:78:6d:ad:81:b8: b6:a5:9c:85:6f:81:ef:d7:4a:1d:78:f0:20:48:79:63:9e:08: a4:7a:c3:e7:ce:12:be:e6:62:22:ff:b9:b8:27:59:04:c5:e8: 0a:4d:08:df:0c:0d:01:ab:ff:64:a7:24:f3:86:13:5b:90:df: 27:fe:86:3e:2c:43:4f:df:c4:9b:ff:6a:76:36:19:9c:df:c7: 42:77:0a:61:e5:d7:47:e8:a3:ae:28:42:0b:db:b4:63:cc:41: b9:0f:8a:5a:db:14:34:fd:e2:97:36:22:0e:8a:ef:17:b8:dd: 7b:5d:57:57:60:51:64:37:96:9d:71:82:37:bf:98:8c:44:d8: 4f:ec:fd:cf:e7:3a:7d:59:4b:8e:8a:4d:c7:fa:7a:82:34:e2: 85:11:72:93:88:d6:96:48:c4:b8:54:1f:dc:aa:75:dc:d7:f1: a4:95:75:9d:1a:d9:63:9b:73:32:cc:80:18:e9:8a:9a:94:c5: f3:20:3a:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jeglgj1vStMZckj8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk N2Q5NjRjZTctYWE3MS00NWJiLThjYjYtNDY1Y2JlYjdmNGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f13b7z3/Q8AiFMSBN/SNyvakoRLBwvGSf1O BKMK3XIKO7J/pJ40IaiAycIm6vqoR1AxiYCv8Uh76AtSRWfP1ofinJJq2mL/ldO8 9nxnexhDF70nHMibcAC+X4WRtsT2Ab+p5HsSN5k+bERVW7Ruqpx9EoI654d7yEkb jDuRKQa0efTA4TMN6zNZ0tqAhUHZvugIegDSbYPK+E9g3QHbhUS6TI9CFUCSjXdt CSvk8hg3MYzoF89BbMud/lTSfeI7AcdzU47U3yskO1enxqValSWOvQo/xPptnF6x jRGW4HBeopG/jgHcM4m+6xO2qGcVri4wYIiheqJYso5Dupk01QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUiVGP1lsOxsMr7y8DG8JhcGPRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTU1ZjI0OTgtYzM0NC0z MzQ1LTlhZTQtMWY2NzFlMzU3ODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlsMXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+U9ZwpdzKsPGh/2XrZhnO6uMDaI5508sHcweKbHvytzoWBJF6/VYnA RbgX2EajizTZxs8eKg5vECxMxzxxUd8PZxd4ba2BuLalnIVvge/XSh148CBIeWOe CKR6w+fOEr7mYiL/ubgnWQTF6ApNCN8MDQGr/2SnJPOGE1uQ3yf+hj4sQ0/fxJv/ anY2GZzfx0J3CmHl10foo64oQgvbtGPMQbkPilrbFDT94pc2Ig6K7xe43XtdV1dg UWQ3lp1xgje/mIxE2E/s/c/nOn1ZS46KTcf6eoI04oURcpOI1pZIxLhUH9yqddzX 8aSVdZ0a2WObczLMgBjpipqUxfMgOrk= -----END CERTIFICATE-----Generated at Thu Mar 12 05:07:26 2026 by rpki-client