$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa File: cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa (raw, json) Hash identifier: 5EJrlUUC11OdtOI+BL+v2vBxK9KjxB/LunL2/BgczCg= Subject key identifier: B3:3D:1A:9C:96:4F:7B:BF:06:DF:DD:E1:D3:66:B9:ED:EB:2F:88:76 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D07ACFD9FCF1AE289C515A0C0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 203724 IP address blocks: 161.69.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:fd:9f:cf:1a:e2:89:c5:15:a0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=3a58d938-46b3-4767-922c-b938321cdbc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:24:96:cc:68:bf:0b:27:11:02:ed:28:15:b4: 0b:64:02:46:a8:2b:7c:1b:e1:13:5b:62:de:fc:de: b9:18:5b:2f:82:1a:89:b1:95:e0:8d:3a:d1:5a:c7: 2f:cc:f8:b1:ff:0b:bc:fe:f9:50:95:48:9d:0a:5c: 33:d5:71:dc:dc:bf:53:6a:87:9c:af:e0:96:df:50: 71:b9:f6:4a:70:90:7d:93:42:08:63:1a:af:aa:db: 7a:8b:3f:68:58:bc:fa:40:c4:85:72:7b:f9:a4:1c: 38:d9:20:bb:19:d1:82:d8:4d:90:dd:51:c8:8f:9c: 77:d0:be:5b:e6:14:de:62:ad:b1:99:69:69:8f:7e: 6b:9e:ff:5d:76:c2:a0:ed:e8:87:61:13:25:0c:b4: 19:e7:2a:05:a7:4e:37:28:17:16:f8:16:be:f6:98: 28:4f:af:01:9b:19:4b:15:db:6c:0d:31:0a:68:da: 94:98:3e:7c:1f:05:a8:4c:97:93:2b:1b:ee:24:bc: 8e:e7:49:2d:3b:68:2f:b0:51:74:f6:e3:46:37:cc: ed:b4:72:cf:7c:35:ea:69:23:52:21:b8:be:a6:a3: 96:85:59:a0:2b:9b:2e:a8:b2:a9:98:a3:14:d0:89: 3a:ae:06:9d:3e:23:8b:78:d3:2d:af:15:8a:f7:be: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:3D:1A:9C:96:4F:7B:BF:06:DF:DD:E1:D3:66:B9:ED:EB:2F:88:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfc70af3-2e94-39b4-9713-29a0bebcd75c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:db:37:95:fa:d4:fe:b3:3b:7d:a3:41:f3:c9:7f:0c:94:c3: 9c:56:c9:25:2c:cf:1d:36:9b:c1:57:f9:2e:50:98:26:58:5f: 7b:64:74:53:f5:27:00:fe:d8:b1:d9:9b:d0:e7:92:17:24:e7: bb:aa:c7:3b:eb:dc:b5:2e:ca:ba:e7:86:83:bf:f6:5f:f5:b0: 5d:21:ad:85:0a:2f:9f:40:ab:63:5a:28:af:64:28:b5:46:25: 97:1c:fa:ae:30:35:0b:7d:78:4c:e8:5a:34:c7:db:ed:3e:0f: 3e:1b:8c:77:68:42:0f:36:46:60:86:23:7a:25:50:e5:2a:69: 2d:04:54:cb:e6:d7:26:84:5a:5d:b9:8e:bd:20:d3:ef:de:d2: c2:f2:c8:3c:9e:5e:56:13:cb:9f:10:63:90:a7:67:fb:ec:46: d7:bb:0e:31:b6:ed:ea:70:fe:73:2d:6b:cd:c2:af:48:fb:04: a1:3e:fc:c0:86:92:db:79:34:ff:98:35:60:62:da:d4:b3:16: 67:cb:d5:40:f9:9a:48:a3:9b:07:d5:ec:6c:f2:7c:8b:58:32: f5:7e:44:a9:5b:81:c4:35:a7:27:25:2b:24:ed:aa:5c:b2:7e: 56:ac:79:f8:e3:b0:68:6c:06:09:4c:66:03:28:65:ac:cf:10: ab:d1:a2:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0HrP2fzxriicUVoMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk M2E1OGQ5MzgtNDZiMy00NzY3LTkyMmMtYjkzODMyMWNkYmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSSWzGi/CycRAu0oFbQLZAJGqCt8G+ETW2Le /N65GFsvghqJsZXgjTrRWscvzPix/wu8/vlQlUidClwz1XHc3L9Taoecr+CW31Bx ufZKcJB9k0IIYxqvqtt6iz9oWLz6QMSFcnv5pBw42SC7GdGC2E2Q3VHIj5x30L5b 5hTeYq2xmWlpj35rnv9ddsKg7eiHYRMlDLQZ5yoFp043KBcW+Ba+9pgoT68BmxlL FdtsDTEKaNqUmD58HwWoTJeTKxvuJLyO50ktO2gvsFF09uNGN8zttHLPfDXqaSNS Ibi+pqOWhVmgK5suqLKpmKMU0Ik6rgadPiOLeNMtrxWK974e0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLM9GpyWT3u/Bt/d4dNmue3rL4h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZjNzBhZjMtMmU5NC0z OWI0LTk3MTMtMjlhMGJlYmNkNzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjbN5X61P6zO32jQfPJfwyUw5xWySUszx02m8FX+S5QmCZYX3tkdFP1 JwD+2LHZm9Dnkhck57uqxzvr3LUuyrrnhoO/9l/1sF0hrYUKL59Aq2NaKK9kKLVG JZcc+q4wNQt9eEzoWjTH2+0+Dz4bjHdoQg82RmCGI3olUOUqaS0EVMvm1yaEWl25 jr0g0+/e0sLyyDyeXlYTy58QY5CnZ/vsRte7DjG27epw/nMta83Cr0j7BKE+/MCG ktt5NP+YNWBi2tSzFmfL1UD5mkijmwfV7GzyfItYMvV+RKlbgcQ1pyclKyTtqlyy flasefjjsGhsBglMZgMoZazPEKvRov4= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:51 2026 by rpki-client