$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/321c5622-9088-375a-b8e6-ba086ea80027.roa File: 321c5622-9088-375a-b8e6-ba086ea80027.roa (raw, json) Hash identifier: w8VSLmhHG+aDdOLDzyGoh1BxMT/d+tJwvmZgiwH5MvU= Subject key identifier: 0F:9E:11:3C:4D:6C:68:1D:27:DA:AB:7C:99:34:D4:85:87:1B:92:DB Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Certificate serial: 010D0C9F4328584F0A5E2D47E8AA0E5EED3F6740 Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/321c5622-9088-375a-b8e6-ba086ea80027.roa Signing time: Wed 02 Sep 2026 10:43:17 +0000 ROA not before: Wed 02 Sep 2026 10:43:17 +0000 ROA not after: Tue 01 Dec 2026 11:43:17 +0000 asID: 3573 IP address blocks: 170.252.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:5e:2d:47:e8:aa:0e:5e:ed:3f:67:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23 Validity Not Before: Sep 2 10:43:17 2026 GMT Not After : Dec 1 11:43:17 2026 GMT Subject: CN=52ec8469-33c5-4746-abf0-de8b0d1f04fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5a:26:37:50:43:ba:c5:17:8f:46:f8:29:ea: d3:4c:e0:7c:0e:26:24:27:e4:7d:ae:0b:ed:e0:d9: be:f3:64:b5:15:de:da:a5:c8:ca:1b:ed:71:a5:95: 6c:7b:ce:19:47:1f:ff:bf:30:08:ec:52:5e:97:dd: 2b:9e:e0:e7:2f:18:a6:51:b8:4d:70:4b:7f:81:28: b0:d9:68:db:6c:a7:aa:f6:a2:d6:b7:f5:99:0b:47: fe:9a:58:5b:df:2d:21:25:3a:22:9b:f9:cb:c9:7b: 72:d8:30:79:96:30:2e:aa:ab:95:33:2d:ad:8c:d2: 30:64:99:94:a4:8c:2f:3a:45:4f:4d:8d:f6:c7:b5: ad:30:7e:21:ac:5c:5d:10:ae:c2:15:c4:85:05:cb: 50:9b:21:0d:33:89:31:bb:94:51:c3:a3:b6:8a:48: 01:6c:18:d8:17:d0:00:88:a6:f6:2d:4d:96:c8:b2: 27:a8:1f:83:d0:b8:f4:78:37:9d:8b:62:56:14:91: 59:18:c5:bc:cc:a4:77:c7:75:3c:cb:ff:4d:bd:de: 66:78:b1:50:60:ec:eb:34:ee:a5:63:5a:59:84:72: 3e:b2:59:f1:3c:89:12:1e:17:2a:17:1d:65:ca:a7: 48:1a:f7:0c:08:20:ed:ce:6b:83:ab:e8:ac:92:db: 0c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:9E:11:3C:4D:6C:68:1D:27:DA:AB:7C:99:34:D4:85:87:1B:92:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/321c5622-9088-375a-b8e6-ba086ea80027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl X509v3 Authority Key Identifier: keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer sbgp-ipAddrBlock: critical IPv4: 170.252.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:f6:98:f6:7b:9c:d7:df:97:95:6f:c5:13:cf:91:18:09:0a: 3b:aa:5f:d3:bf:34:0b:29:b2:1b:24:23:37:11:3c:ba:78:9d: da:f1:fa:f5:c3:48:d5:1e:05:ec:19:40:21:78:19:8f:a6:f5: 29:34:d6:63:12:a9:21:ea:3b:a9:12:5f:bf:19:36:98:97:00: ce:28:29:4d:8f:9e:a3:b6:af:65:5a:a3:f6:ef:a3:85:c6:d6: 0e:68:8c:40:cd:1a:47:05:fa:a7:fe:d4:9f:9f:82:f7:90:9c: b3:57:ec:6e:7e:54:78:ee:8a:23:83:d9:fa:7d:0b:8f:77:49: 79:fa:6d:cb:e8:87:e8:6f:fe:77:72:54:48:f4:a1:ce:35:24: 50:e2:7f:e4:30:04:56:b0:8b:9e:8e:97:6b:30:5b:31:5a:a5: 70:08:57:00:3d:8a:09:d6:e7:7d:70:fd:85:55:44:a5:0d:24: 99:4f:09:f6:2a:c9:16:8f:57:2e:8c:a2:26:43:58:72:fa:19: ad:3e:ac:a9:fc:5a:a1:83:56:80:cc:72:7f:ad:b8:9b:86:bc: 8b:cc:52:4d:9a:2c:93:9e:ad:6e:40:1e:0c:f6:18:93:66:4f: 48:dc:88:89:c4:c7:c2:18:53:3b:fa:71:06:4f:47:a4:b5:6a: 31:0e:df:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KXi1H6KoOXu0/Z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli ZTIzMB4XDTI2MDkwMjEwNDMxN1oXDTI2MTIwMTExNDMxN1owLzEtMCsGA1UEAxMk NTJlYzg0NjktMzNjNS00NzQ2LWFiZjAtZGU4YjBkMWYwNGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FomN1BDusUXj0b4KerTTOB8DiYkJ+R9rgvt 4Nm+82S1Fd7apcjKG+1xpZVse84ZRx//vzAI7FJel90rnuDnLximUbhNcEt/gSiw 2WjbbKeq9qLWt/WZC0f+mlhb3y0hJToim/nLyXty2DB5ljAuqquVMy2tjNIwZJmU pIwvOkVPTY32x7WtMH4hrFxdEK7CFcSFBctQmyENM4kxu5RRw6O2ikgBbBjYF9AA iKb2LU2WyLInqB+D0Lj0eDedi2JWFJFZGMW8zKR3x3U8y/9Nvd5meLFQYOzrNO6l Y1pZhHI+slnxPIkSHhcqFx1lyqdIGvcMCCDtzmuDq+isktsM9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+eETxNbGgdJ9qrfJk01IWHG5LbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2 NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvMzIxYzU2MjItOTA4OC0z NzVhLWI4ZTYtYmEwODZlYTgwMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5 YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvz4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAED2mPZ7nNffl5VvxRPPkRgJCjuqX9O/NAspshskIzcRPLp4ndrx+vXD SNUeBewZQCF4GY+m9Sk01mMSqSHqO6kSX78ZNpiXAM4oKU2PnqO2r2Vao/bvo4XG 1g5ojEDNGkcF+qf+1J+fgveQnLNX7G5+VHjuiiOD2fp9C493SXn6bcvoh+hv/ndy VEj0oc41JFDif+QwBFawi56Ol2swWzFapXAIVwA9ignW531w/YVVRKUNJJlPCfYq yRaPVy6MoiZDWHL6Ga0+rKn8WqGDVoDMcn+tuJuGvIvMUk2aLJOerW5AHgz2GJNm T0jciInEx8IYUzv6cQZPR6S1ajEO3y8= -----END CERTIFICATE-----Generated at Wed Sep 16 18:04:10 2026 by rpki-client