$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa File: 2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa (raw, json) Hash identifier: GoC/oZXJQdf09pc8dgrv0QxuQmWy9ks4oCOuFAMIhPs= Subject key identifier: 7F:CD:B6:D1:62:C9:61:4F:E2:CF:95:22:5F:49:39:77:2D:AB:B4:EB Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D19B4DF0A17350A1AE2EFC880 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 203724 IP address blocks: 161.69.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:df:0a:17:35:0a:1a:e2:ef:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=0f2aea10-566e-4c16-8218-2abc6b6deef1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:35:29:b6:5e:0a:d1:83:b1:da:48:49:10:74: d8:c5:91:96:0c:4c:34:81:2e:8f:37:ec:6c:59:d9: 4e:54:1a:5c:9e:77:83:84:28:36:1a:98:62:6b:a8: 02:5b:e3:d2:ed:2d:85:92:61:0d:ad:13:cb:ac:10: a8:e3:c7:f4:e8:96:ab:d3:39:10:8b:66:02:ae:11: 50:cb:61:06:f2:1a:c7:17:df:ae:8e:62:6c:e9:9b: 19:c5:63:e2:2e:b0:a1:55:8a:78:49:63:1a:11:1c: 22:eb:c0:5a:6c:57:74:31:7f:b7:06:a0:ab:d1:c8: 39:b9:82:46:61:a2:89:b1:69:6b:2b:f9:e7:af:8f: c2:c0:b8:60:21:0e:57:11:cd:e2:ee:b9:de:57:1f: cd:07:1e:8c:b5:d3:23:26:c9:4e:0b:4e:33:a8:4c: 66:68:fe:ad:01:2e:aa:fa:0d:49:aa:39:41:77:b9: a2:e7:e6:e9:82:7b:ea:20:1b:8a:25:1b:72:db:d4: 79:19:37:00:4d:fd:78:05:71:ab:31:87:a2:30:a5: 3e:6b:f4:ca:eb:c0:6d:fb:66:db:43:19:f4:6c:78: 31:ca:71:19:4b:2b:0e:69:6c:6f:23:47:89:86:03: 2b:af:00:09:95:f2:b2:f9:68:c7:67:63:01:c9:aa: 80:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:CD:B6:D1:62:C9:61:4F:E2:CF:95:22:5F:49:39:77:2D:AB:B4:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2fe8fb5e-36ae-383a-a8f3-6774e2d4a5ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:02:4f:da:86:72:54:da:99:34:5c:26:6a:aa:80:73:0c:af: 0a:d6:ea:de:10:58:35:38:79:4e:49:3a:99:e3:be:84:96:dd: 7c:e7:d1:79:43:81:df:e2:f5:a6:a2:25:88:5f:f6:ad:10:a4: fe:44:9a:01:81:cf:5a:00:74:57:fd:c7:0f:02:aa:08:ca:b5: 12:b9:88:f5:6b:db:29:3f:4a:c2:59:f5:49:44:de:d7:bf:e2: 6d:7c:5a:2b:27:62:bb:05:d0:08:5f:ca:b4:cb:a4:ca:81:fd: f1:97:2c:ce:36:6a:06:74:b7:81:da:47:8c:84:54:8c:17:74: b9:d1:3a:79:03:14:2f:32:4e:bc:25:df:17:4a:f7:f0:25:b5: 63:a5:fd:e3:4f:5c:45:24:0d:02:ee:ac:59:78:a8:3c:81:28: 48:26:b6:bf:d9:01:5b:5a:d2:7a:65:d5:75:ff:9e:35:26:eb: 90:6d:8d:68:35:e7:45:eb:9f:43:74:cd:e0:38:3b:76:06:ea: 8a:c8:f8:bd:bb:3a:ac:7c:67:a4:ef:ab:d3:f5:35:40:5b:d1: 29:b0:92:79:fd:c3:f0:46:04:ff:e8:14:d5:dd:72:f1:74:a1: 23:3d:fa:e9:f8:54:9d:dc:b0:ef:44:e2:ea:be:84:7a:77:45: 1c:3e:bf:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtN8KFzUKGuLvyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk MGYyYWVhMTAtNTY2ZS00YzE2LTgyMTgtMmFiYzZiNmRlZWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgTUptl4K0YOx2khJEHTYxZGWDEw0gS6PN+xs WdlOVBpcnneDhCg2Gphia6gCW+PS7S2FkmENrRPLrBCo48f06Jar0zkQi2YCrhFQ y2EG8hrHF9+ujmJs6ZsZxWPiLrChVYp4SWMaERwi68BabFd0MX+3BqCr0cg5uYJG YaKJsWlrK/nnr4/CwLhgIQ5XEc3i7rneVx/NBx6MtdMjJslOC04zqExmaP6tAS6q +g1JqjlBd7mi5+bpgnvqIBuKJRty29R5GTcATf14BXGrMYeiMKU+a/TK68Bt+2bb Qxn0bHgxynEZSysOaWxvI0eJhgMrrwAJlfKy+WjHZ2MByaqAJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/NttFiyWFP4s+VIl9JOXctq7TrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMmZlOGZiNWUtMzZhZS0z ODNhLWE4ZjMtNjc3NGUyZDRhNWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUCT9qGclTamTRcJmqqgHMMrwrW6t4QWDU4eU5JOpnjvoSW3Xzn0XlD gd/i9aaiJYhf9q0QpP5EmgGBz1oAdFf9xw8CqgjKtRK5iPVr2yk/SsJZ9UlE3te/ 4m18WisnYrsF0AhfyrTLpMqB/fGXLM42agZ0t4HaR4yEVIwXdLnROnkDFC8yTrwl 3xdK9/AltWOl/eNPXEUkDQLurFl4qDyBKEgmtr/ZAVta0npl1XX/njUm65BtjWg1 50Xrn0N0zeA4O3YG6orI+L27Oqx8Z6Tvq9P1NUBb0Smwknn9w/BGBP/oFNXdcvF0 oSM9+un4VJ3csO9E4uq+hHp3RRw+v1w= -----END CERTIFICATE-----Generated at Thu Mar 26 08:42:31 2026 by rpki-client