$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa File: 14921937-255e-3145-b92e-f880d5397803.roa (raw, json) Hash identifier: Q8/Skw3rmxQjljSp6Yxe4vI+faR/lwHwAkVJWvbkXZQ= Subject key identifier: 98:E5:10:21:43:E4:7C:00:52:00:60:19:B1:27:8B:41:DD:68:D0:90 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F58CD4C975064E927B0182700 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 21433 IP address blocks: 170.248.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:4c:97:50:64:e9:27:b0:18:27:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=5a4e3f52-cf0d-4cb0-94ba-0604f2c9cd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:3d:71:15:43:46:88:69:8f:24:6e:30:ac: 2b:78:14:2d:00:a9:d0:ea:73:0a:a3:ff:32:36:a9: c7:13:20:27:0f:50:1e:74:52:75:2b:c1:d9:eb:ca: ee:c8:8f:8e:cb:0c:d7:a3:75:2a:55:0b:98:a9:05: 41:b6:fe:a3:7b:a8:80:ae:85:44:40:54:00:85:30: 30:6f:9f:e8:80:29:e9:d5:21:3c:26:b6:a9:b8:af: ce:1d:99:3c:ad:b3:e5:de:56:81:13:e5:49:d3:41: 34:be:95:09:8e:69:6d:98:67:e1:8d:23:20:55:57: f1:0f:23:c5:8a:d7:c1:f9:fe:73:dd:71:39:31:70: 01:8c:7d:2f:aa:05:0c:01:50:16:a0:76:02:5c:5e: eb:d5:b6:4b:d3:25:f3:4b:99:ca:1e:0c:a9:ac:60: 0e:5e:68:b3:0f:a8:ee:5d:2b:fe:60:53:ed:bb:d1: c5:b9:48:02:18:90:80:fc:f1:26:23:e0:f3:ed:ce: b1:ac:2b:36:c9:56:81:ee:35:6c:8a:8e:da:ad:56: bf:6a:4e:96:07:d2:a1:9b:cf:50:10:3e:c8:62:d4: 28:e2:69:9a:2c:64:8b:3f:e1:6b:3b:1a:17:51:04: d1:6d:8c:d8:ef:39:3e:c2:52:70:1c:18:03:eb:3e: c4:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E5:10:21:43:E4:7C:00:52:00:60:19:B1:27:8B:41:DD:68:D0:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/14921937-255e-3145-b92e-f880d5397803.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:f6:f3:96:05:6e:67:8c:1f:49:7c:19:14:77:16:e3:6b:8c: 67:96:5c:61:46:62:42:bd:05:d2:6f:fa:50:c6:87:f4:58:b1: 3a:3c:ce:fd:11:ba:f2:e4:ec:c7:27:c8:6b:41:0f:ab:a1:02: 75:fd:72:d9:81:7a:a3:30:cc:da:7b:92:e9:f9:97:83:c9:16: ff:69:7f:57:98:44:bc:ee:52:c4:aa:9c:f9:dc:c3:2d:54:48: 51:18:51:bd:89:d1:2f:03:eb:96:63:ad:69:61:e3:9a:49:23: 73:80:7a:69:8b:22:62:3b:9d:62:19:3e:e5:ba:fe:4c:1a:25: a2:99:2b:da:18:d7:d0:3c:b9:44:a2:f3:f1:47:6f:28:dd:d5: 56:96:4b:e9:8f:94:3b:51:82:d9:87:4f:93:ef:47:24:db:04: 40:54:f7:63:c6:b8:a3:ce:f1:59:b0:b5:ef:7b:57:9d:16:53: ce:fe:f9:9e:89:8d:a2:37:ae:f4:15:d4:0d:fa:c2:54:d1:ed: 33:cb:5d:66:75:e8:da:d2:28:dc:04:6b:35:3c:3f:e0:eb:29: 92:f3:f3:8a:01:3c:d2:bc:76:5f:5f:7a:fd:b3:a2:82:fe:58: 4d:8b:f6:bd:c8:8e:0f:33:b4:0c:89:10:b5:5a:e7:cc:84:e1: 39:22:6d:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzUyXUGTpJ7AYJwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NWE0ZTNmNTItY2YwZC00Y2IwLTk0YmEtMDYwNGYyYzljZDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2c9cRVDRohpjyRuMKwreBQtAKnQ6nMKo/8y NqnHEyAnD1AedFJ1K8HZ68ruyI+OywzXo3UqVQuYqQVBtv6je6iAroVEQFQAhTAw b5/ogCnp1SE8JrapuK/OHZk8rbPl3laBE+VJ00E0vpUJjmltmGfhjSMgVVfxDyPF itfB+f5z3XE5MXABjH0vqgUMAVAWoHYCXF7r1bZL0yXzS5nKHgyprGAOXmizD6ju XSv+YFPtu9HFuUgCGJCA/PEmI+Dz7c6xrCs2yVaB7jVsio7arVa/ak6WB9Khm89Q ED7IYtQo4mmaLGSLP+FrOxoXUQTRbYzY7zk+wlJwHBgD6z7EDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjlECFD5HwAUgBgGbEni0HdaNCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMTQ5MjE5MzctMjU1ZS0z MTQ1LWI5MmUtZjg4MGQ1Mzk3ODAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIX285YFbmeMH0l8GRR3FuNrjGeWXGFGYkK9BdJv+lDGh/RYsTo8zv0R uvLk7McnyGtBD6uhAnX9ctmBeqMwzNp7kun5l4PJFv9pf1eYRLzuUsSqnPncwy1U SFEYUb2J0S8D65ZjrWlh45pJI3OAemmLImI7nWIZPuW6/kwaJaKZK9oY19A8uUSi 8/FHbyjd1VaWS+mPlDtRgtmHT5PvRyTbBEBU92PGuKPO8Vmwte97V50WU87++Z6J jaI3rvQV1A36wlTR7TPLXWZ16NrSKNwEazU8P+DrKZLz84oBPNK8dl9fev2zooL+ WE2L9r3Ijg8ztAyJELVa58yE4Tkibak= -----END CERTIFICATE-----Generated at Thu Oct 8 09:06:57 2026 by rpki-client