$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa File: cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa (raw, json) Hash identifier: cY3p36D23r03AAhLadfmiOXX1JuaFFBG94zOFos+UaM= Subject key identifier: 0C:4B:7F:DB:E8:F9:C1:20:69:CA:3A:FC:43:6D:D1:3D:58:64:9E:B7 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D3DFFAF97C4D7F5A561215180 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 203724 IP address blocks: 161.69.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3d:ff:af:97:c4:d7:f5:a5:61:21:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=d3e35259-6244-4210-bcdd-288b63d19f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:55:ec:69:4b:ba:82:b7:8c:14:64:07:f6:c4: 03:af:19:7f:4b:c9:e1:76:8b:79:aa:83:e9:09:22: 9b:28:ef:e4:ad:d0:80:d4:79:07:d9:4d:c2:7e:16: 34:b7:61:e8:1b:ef:e7:6d:8a:88:93:a3:5f:04:93: 45:c3:cd:15:f3:f0:7e:84:9f:d5:d8:f1:f2:44:1b: 2f:40:07:23:7a:0a:7b:29:72:4c:df:09:a9:c9:fc: 5c:7f:91:f5:8f:24:7b:d3:e4:26:37:0d:12:62:ac: 38:4c:2f:0d:61:a5:fd:af:34:c5:1f:79:0e:6f:7c: 4f:31:fc:70:f2:68:8f:c5:f1:33:fd:d0:57:a4:39: c3:7b:a8:fc:fe:36:82:27:26:51:86:e4:ef:0c:55: 93:b6:ce:85:f4:f5:fc:21:49:a5:59:b6:a3:c9:04: 5d:79:83:56:a1:14:2e:5e:df:5d:f0:46:b9:47:55: 8e:81:c4:d4:c1:58:c2:77:dd:e2:22:3c:fc:bf:34: 2f:03:b3:55:2c:80:8f:83:69:7c:bc:ff:91:da:b3: 83:94:a0:7c:6c:66:2f:06:47:a5:9f:f3:da:94:34: ff:9e:5c:74:00:60:83:85:6e:34:d6:db:95:ae:4e: fc:ab:6d:1e:a6:92:61:e9:fd:6c:4e:19:cf:97:ed: d0:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:4B:7F:DB:E8:F9:C1:20:69:CA:3A:FC:43:6D:D1:3D:58:64:9E:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cb4ea264-833c-3d82-b006-2be7ddb42fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ce:dc:c6:ae:1f:93:05:d3:7d:53:3b:87:11:f0:07:9a:02: 07:43:d3:02:8f:4a:7e:f7:4b:a3:c5:51:cb:c1:f9:be:96:b1: 52:59:56:c6:2b:0e:cb:fc:08:9e:6a:38:91:c7:f8:35:7a:fd: 7e:7a:c2:ae:0c:37:ac:0e:35:df:40:32:19:69:bf:7f:b4:da: b4:7c:de:52:df:25:c4:97:bf:90:95:00:49:00:f1:49:cd:67: 9a:17:aa:d9:6f:96:c2:f9:d3:28:68:8c:92:1f:6f:93:f3:26: a2:ef:bf:75:18:4a:23:11:9f:39:3a:2c:0e:e1:9a:f3:05:7b: 51:db:ef:f1:8e:be:67:c3:31:2e:08:cc:d3:0f:47:3e:8e:02: b4:61:6f:ae:49:f9:d8:b3:07:d9:f3:70:d2:88:6a:f1:8f:c9: 28:a0:f7:02:25:1a:76:03:ba:1b:bb:0d:32:9e:a5:a6:17:f1: a1:b5:f3:d4:a6:46:23:d9:13:cb:4f:de:06:78:79:63:73:72: 23:0f:0a:e6:6e:9e:f0:d3:2c:20:72:67:99:2f:a4:48:6b:64: 16:e9:df:44:57:02:ee:f3:a5:d1:44:e4:21:4c:cd:9e:5b:ff: aa:7c:20:2f:6f:0f:ac:47:45:10:87:b2:60:f9:83:53:58:dc: 15:ef:44:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE09/6+XxNf1pWEhUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZDNlMzUyNTktNjI0NC00MjEwLWJjZGQtMjg4YjYzZDE5ZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFXsaUu6greMFGQH9sQDrxl/S8nhdot5qoPp CSKbKO/krdCA1HkH2U3CfhY0t2HoG+/nbYqIk6NfBJNFw80V8/B+hJ/V2PHyRBsv QAcjegp7KXJM3wmpyfxcf5H1jyR70+QmNw0SYqw4TC8NYaX9rzTFH3kOb3xPMfxw 8miPxfEz/dBXpDnDe6j8/jaCJyZRhuTvDFWTts6F9PX8IUmlWbajyQRdeYNWoRQu Xt9d8Ea5R1WOgcTUwVjCd93iIjz8vzQvA7NVLICPg2l8vP+R2rODlKB8bGYvBkel n/PalDT/nlx0AGCDhW401tuVrk78q20eppJh6f1sThnPl+3QJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxLf9vo+cEgaco6/ENt0T1YZJ63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2I0ZWEyNjQtODMzYy0z ZDgyLWIwMDYtMmJlN2RkYjQyZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrO3MauH5MF031TO4cR8AeaAgdD0wKPSn73S6PFUcvB+b6WsVJZVsYr Dsv8CJ5qOJHH+DV6/X56wq4MN6wONd9AMhlpv3+02rR83lLfJcSXv5CVAEkA8UnN Z5oXqtlvlsL50yhojJIfb5PzJqLvv3UYSiMRnzk6LA7hmvMFe1Hb7/GOvmfDMS4I zNMPRz6OArRhb65J+dizB9nzcNKIavGPySig9wIlGnYDuhu7DTKepaYX8aG189Sm RiPZE8tP3gZ4eWNzciMPCuZunvDTLCByZ5kvpEhrZBbp30RXAu7zpdFE5CFMzZ5b /6p8IC9vD6xHRRCHsmD5g1NY3BXvRLY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:21:08 2026 by rpki-client