$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/29b5dd43-5181-370e-8bfd-b47378aaf255.roa File: 29b5dd43-5181-370e-8bfd-b47378aaf255.roa (raw, json) Hash identifier: fR8jRtThGBE+fgVpyEKPjTPpOGm12hVpcTkg2vTGJyk= Subject key identifier: 29:F9:90:9A:7B:FF:F1:23:1D:A7:19:1D:96:12:7D:FB:57:85:9A:50 Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F07EC6AD551953DB8A503C000 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/29b5dd43-5181-370e-8bfd-b47378aaf255.roa Signing time: Tue 01 Sep 2026 13:42:28 +0000 ROA not before: Tue 01 Sep 2026 13:42:28 +0000 ROA not after: Mon 30 Nov 2026 14:42:28 +0000 asID: 3573 IP address blocks: 170.248.56.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:ec:6a:d5:51:95:3d:b8:a5:03:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 1 13:42:28 2026 GMT Not After : Nov 30 14:42:28 2026 GMT Subject: CN=2bbc04e4-7f39-4e3c-98b6-d1f7ab7e8788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:25:73:44:4f:ae:97:12:27:ca:87:f2:ac:c6: 05:f5:ee:fd:4c:d3:e5:78:e6:d8:3a:67:d2:29:29: 7a:b0:a1:7a:3e:e0:99:64:50:1c:61:51:18:8f:a8: db:da:2b:91:79:14:a1:bf:48:f6:37:58:73:58:cc: dd:50:dd:d0:57:67:85:be:71:a9:b9:37:a4:dc:7f: a9:22:12:3f:96:d9:ef:17:4a:dc:39:01:1c:69:27: c7:e9:fa:1b:4c:1c:75:79:67:34:4d:b9:8b:d0:d0: 79:85:9c:24:50:84:18:29:51:fa:15:82:15:ce:10: 96:90:b0:87:7a:e3:3d:22:27:8f:3a:df:f0:b6:23: cd:14:15:8e:8f:ea:bc:54:a8:54:ef:25:20:1a:a7: 47:76:f8:48:85:bb:fb:f5:81:ad:65:13:16:29:04: 05:88:8a:e2:1d:81:d4:c2:e5:72:c1:99:fe:e4:73: 20:28:db:7b:e0:83:85:f6:34:5d:e8:3e:f4:83:56: 05:f2:ce:4d:d7:76:01:22:f2:4f:5d:fa:8d:84:c2: 64:f4:7b:96:69:ef:36:ea:97:0b:3e:b1:ce:ff:01: 29:72:e3:54:16:c6:28:2b:b5:71:b3:ff:7e:10:03: c2:68:51:0c:87:87:7d:ab:e0:29:d6:e6:4c:b5:2c: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F9:90:9A:7B:FF:F1:23:1D:A7:19:1D:96:12:7D:FB:57:85:9A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/29b5dd43-5181-370e-8bfd-b47378aaf255.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.248.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:da:dd:7b:3b:d4:4f:94:af:2d:f0:db:47:08:0a:a9:e4:8e: 4d:cc:42:e1:a4:37:28:27:ba:2e:be:ff:7f:9d:50:4a:ef:c3: 7a:08:87:9e:90:b7:d4:1a:4f:49:48:1d:b7:22:c8:47:4c:68: ea:64:c2:ac:5d:fc:30:4e:b7:1e:64:25:e5:bb:59:b1:be:32: f5:d6:a0:24:4f:dd:2a:81:7e:70:f1:c0:87:6c:74:a2:6a:65: 79:6a:06:f7:05:b0:eb:5c:12:f1:51:3c:41:de:d6:b7:0f:b1: fc:38:f5:85:95:df:be:ff:4c:d5:ec:c4:8c:35:0a:cb:eb:33: 5e:2f:3d:ac:a7:c2:82:b7:8e:c8:58:c0:95:bc:dd:3e:d5:7b: da:b5:09:99:d3:ed:5a:37:5f:4d:bc:4e:99:89:8e:4c:4f:81: ff:c9:a2:c7:11:50:b6:55:85:52:aa:f5:82:bf:5d:55:9d:4e: d5:21:8b:bf:f4:23:81:ab:19:fc:1d:dd:43:09:ae:bd:df:f7: 67:07:36:51:84:fa:ab:e3:d8:4c:65:57:bc:0a:d3:a0:bc:60: cb:3b:fe:55:0d:58:9e:21:28:7f:6f:37:11:82:23:7e:2d:47: c4:0a:2c:7e:73:12:fd:be:97:3c:b9:ca:ae:8d:5a:9c:86:1c: aa:43:a5:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H7GrVUZU9uKUDwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDkwMTEzNDIyOFoXDTI2MTEzMDE0NDIyOFowLzEtMCsGA1UEAxMk MmJiYzA0ZTQtN2YzOS00ZTNjLTk4YjYtZDFmN2FiN2U4Nzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCVzRE+ulxInyofyrMYF9e79TNPleObYOmfS KSl6sKF6PuCZZFAcYVEYj6jb2iuReRShv0j2N1hzWMzdUN3QV2eFvnGpuTek3H+p IhI/ltnvF0rcOQEcaSfH6fobTBx1eWc0TbmL0NB5hZwkUIQYKVH6FYIVzhCWkLCH euM9IiePOt/wtiPNFBWOj+q8VKhU7yUgGqdHdvhIhbv79YGtZRMWKQQFiIriHYHU wuVywZn+5HMgKNt74IOF9jRd6D70g1YF8s5N13YBIvJPXfqNhMJk9HuWae826pcL PrHO/wEpcuNUFsYoK7Vxs/9+EAPCaFEMh4d9q+Ap1uZMtSwd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCn5kJp7//EjHacZHZYSfftXhZpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMjliNWRkNDMtNTE4MS0z NzBlLThiZmQtYjQ3Mzc4YWFmMjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDqvg4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDa3Xs71E+Ury3w20cICqnkjk3MQuGkNygnui6+/3+dUErvw3oIh56Q t9QaT0lIHbciyEdMaOpkwqxd/DBOtx5kJeW7WbG+MvXWoCRP3SqBfnDxwIdsdKJq ZXlqBvcFsOtcEvFRPEHe1rcPsfw49YWV377/TNXsxIw1CsvrM14vPaynwoK3jshY wJW83T7Ve9q1CZnT7Vo3X028TpmJjkxPgf/JoscRULZVhVKq9YK/XVWdTtUhi7/0 I4GrGfwd3UMJrr3f92cHNlGE+qvj2ExlV7wK06C8YMs7/lUNWJ4hKH9vNxGCI34t R8QKLH5zEv2+lzy5yq6NWpyGHKpDpYo= -----END CERTIFICATE-----Generated at Wed Sep 16 18:03:22 2026 by rpki-client