$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa File: 72bb6754-f471-332a-a025-ab3fa6d56c90.roa (raw, json) Hash identifier: fJVcMD917zHDmChp5jLmOr8LcNHzMTqNceOohTOpe8I= Subject key identifier: 6B:61:4F:8B:E3:18:30:7F:BD:09:60:F3:F9:75:AA:DA:E5:B9:F1:11 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D3F64D52694EAE3CC67584300 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 203724 IP address blocks: 161.69.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:d5:26:94:ea:e3:cc:67:58:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=60badee3-578d-44f2-a8fa-3ae15eb49357 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:af:85:75:52:7c:ad:27:3a:98:ee:77:19:4c: ef:4f:3d:f9:8a:d5:32:27:b5:65:3d:50:75:88:d0: 52:77:ee:99:4e:b4:db:f4:5e:72:11:8d:56:6f:ad: 3c:13:28:b0:e3:9c:c3:67:bd:94:02:1f:2d:43:87: 9f:0c:bb:6d:78:67:8f:c0:0a:f8:19:3a:0d:bc:8c: 42:17:1b:a0:b2:c0:35:33:4d:bc:ea:ff:0b:b7:f3: e2:0b:59:dc:92:87:27:cf:ac:0c:fc:e7:45:e9:8e: 87:63:1c:27:c1:00:91:87:3a:c1:b8:48:eb:ca:ec: 43:1e:88:9d:34:f6:81:8e:88:cd:d3:d1:b3:8b:d8: 7e:23:82:1e:19:a3:59:fc:40:fd:0e:a3:d7:11:11: 7e:ce:13:42:4c:76:a7:e3:9e:54:9c:6d:2d:6d:ac: 40:c4:0c:63:26:a5:9f:12:25:ed:c6:d4:9a:a4:03: 65:34:c4:70:55:d7:80:57:95:8d:ba:30:2d:e6:27: 19:86:9d:99:0c:36:22:b5:22:7d:db:74:11:ac:c7: c4:64:29:79:69:2b:71:45:7f:13:85:35:42:db:76: 04:f7:77:77:dc:a5:f1:96:6d:15:a8:0c:4e:5e:c1: f5:80:bd:fd:3c:ab:ef:97:d3:5b:d3:94:f2:0d:f8: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:61:4F:8B:E3:18:30:7F:BD:09:60:F3:F9:75:AA:DA:E5:B9:F1:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/72bb6754-f471-332a-a025-ab3fa6d56c90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:24:2c:3b:61:6b:7a:64:41:c8:0a:00:92:ec:8e:b5:84:73: 5a:0a:b7:64:21:69:06:d9:85:ee:4c:db:9b:ba:04:67:0b:46: 20:14:d0:c1:c1:36:32:43:2c:b9:05:5f:5b:59:7a:db:10:ad: bc:db:c3:8e:63:70:06:0b:a6:2a:f8:80:29:78:50:e0:e6:df: b5:f4:30:00:f2:bb:d8:80:77:7a:f9:ec:e9:32:77:2a:74:d2: 28:51:69:c6:69:8f:35:f0:99:6a:48:d3:62:80:26:66:fc:ae: e9:35:41:63:19:b3:9c:65:27:90:64:da:4e:9c:b7:1d:51:b9: d0:d6:f1:ee:e6:68:df:49:81:84:da:8f:db:92:f3:7c:a8:ab: 9a:20:25:7f:91:62:76:ef:a6:2a:2c:43:8d:32:8e:8f:d2:ee: 1e:d8:2a:e7:f0:3e:d7:c6:2b:ed:31:5b:2e:45:01:5e:2e:5a: f8:dd:3d:f1:47:40:45:48:14:86:5c:37:a7:fd:be:c5:e1:ef: 77:5b:e9:da:6a:dd:4e:7b:c5:aa:7b:78:30:ad:ef:c4:e4:71: 8b:d2:ed:37:df:81:78:b5:1d:53:94:6d:83:2e:dc:30:98:ee: 8f:1b:f2:b9:ce:a1:4c:b5:72:36:aa:6f:35:0e:b7:41:36:09: 5b:52:99:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZNUmlOrjzGdYQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk NjBiYWRlZTMtNTc4ZC00NGYyLWE4ZmEtM2FlMTVlYjQ5MzU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhq+FdVJ8rSc6mO53GUzvTz35itUyJ7VlPVB1 iNBSd+6ZTrTb9F5yEY1Wb608Eyiw45zDZ72UAh8tQ4efDLtteGePwAr4GToNvIxC FxugssA1M0286v8Lt/PiC1nckocnz6wM/OdF6Y6HYxwnwQCRhzrBuEjryuxDHoid NPaBjojN09Gzi9h+I4IeGaNZ/ED9DqPXERF+zhNCTHan455UnG0tbaxAxAxjJqWf EiXtxtSapANlNMRwVdeAV5WNujAt5icZhp2ZDDYitSJ923QRrMfEZCl5aStxRX8T hTVC23YE93d33KXxlm0VqAxOXsH1gL39PKvvl9Nb05TyDfiLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGthT4vjGDB/vQlg8/l1qtrlufERMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvNzJiYjY3NTQtZjQ3MS0z MzJhLWEwMjUtYWIzZmE2ZDU2YzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH0kLDtha3pkQcgKAJLsjrWEc1oKt2QhaQbZhe5M25u6BGcLRiAU0MHB NjJDLLkFX1tZetsQrbzbw45jcAYLpir4gCl4UODm37X0MADyu9iAd3r57Okydyp0 0ihRacZpjzXwmWpI02KAJmb8ruk1QWMZs5xlJ5Bk2k6ctx1RudDW8e7maN9JgYTa j9uS83yoq5ogJX+RYnbvpiosQ40yjo/S7h7YKufwPtfGK+0xWy5FAV4uWvjdPfFH QEVIFIZcN6f9vsXh73db6dpq3U57xap7eDCt78TkcYvS7TffgXi1HVOUbYMu3DCY 7o8b8rnOoUy1cjaqbzUOt0E2CVtSmZ4= -----END CERTIFICATE-----Generated at Fri Mar 27 03:07:21 2026 by rpki-client