$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa File: f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa (raw, json) Hash identifier: K3jazJoxMC8s8u7Cswnfa6kY6ElYNS+8GAo+0khgrX0= Subject key identifier: 91:33:51:33:0E:15:63:B8:2A:E8:A1:10:50:18:D3:4E:8D:D9:FC:F2 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D19B4DF1B7415BACDD7BE4400 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 14618 IP address blocks: 161.69.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:df:1b:74:15:ba:cd:d7:be:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=ee0fc6b2-f651-40b9-9e4a-e649950f805d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a8:4a:92:24:cc:a8:1b:e9:0b:04:90:33:5a: 55:0e:1b:c6:eb:57:1f:2d:7a:56:aa:5c:ed:ef:24: 41:b5:1a:8d:0c:9b:a3:9f:1a:12:08:a7:62:db:84: d8:8e:d7:55:eb:03:c6:51:2a:78:4f:50:61:8d:9a: 47:92:3c:d0:0d:38:c3:88:9d:e6:a2:3f:5e:d5:c4: 00:a5:89:d9:90:4b:96:b0:2a:8e:bf:ba:5e:b8:24: ae:15:36:e4:36:b2:04:1c:d7:77:90:e0:fa:f9:9e: 95:e9:b0:5f:d2:bf:49:00:82:53:3e:86:46:41:a7: c1:d1:e1:e7:d3:8e:ce:28:37:d0:fb:07:53:f1:a5: 72:d9:7c:5d:de:c7:15:ef:e2:20:f2:73:6c:23:f2: a2:3e:80:52:77:0b:27:75:82:76:b1:6f:01:f3:72: 80:3d:05:8b:5d:36:8e:39:b1:d8:19:f8:c0:34:cf: e0:af:1d:f4:2c:41:22:fd:db:0b:5b:14:d6:fc:35: 6b:ac:9a:2b:f5:e1:81:03:96:2f:f8:c8:1f:76:6c: c2:69:67:27:76:24:8d:c9:cf:e4:70:db:7f:6f:15: e6:52:bb:ed:b8:99:f3:fa:e4:55:20:1b:66:ee:2d: 76:2c:db:0f:30:d6:29:8c:c1:db:00:dd:e2:6a:3f: 7d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:33:51:33:0E:15:63:B8:2A:E8:A1:10:50:18:D3:4E:8D:D9:FC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/f8ec5bc2-da45-3ea1-8c1a-385441678d64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d9:ea:73:65:0c:4d:52:fc:00:69:a1:a4:37:fb:b2:ae:ab: 27:cd:12:b4:94:ca:5a:36:dc:44:d7:7c:67:60:cd:a8:82:0c: 1a:c6:0f:a4:45:b4:4c:1e:e3:7d:6d:03:d5:6b:49:a4:6b:ab: c1:70:f3:b8:5c:fa:83:0e:f2:07:73:c2:d9:d8:9d:dd:27:9d: e7:a3:ab:d6:f0:eb:aa:05:49:ce:0b:7f:c4:26:11:9d:6b:20: 19:38:c2:36:d3:41:ef:01:47:96:54:f3:b3:ab:a0:2c:bc:05: d6:09:c7:ae:4f:4e:a7:3c:9d:d7:a4:8d:96:a0:3c:b7:f6:4d: fa:bd:09:f3:f1:fc:53:35:35:8e:68:91:40:2c:ba:57:2a:00: d0:47:a0:42:78:e1:6c:57:2a:f9:7c:22:9f:ce:8e:a3:32:c3: f3:2e:aa:1c:77:97:e4:f6:21:c5:ae:11:3d:fe:0c:25:1f:f7: 75:bd:fd:58:c4:08:86:70:0f:e9:88:56:ee:4d:fb:6e:23:5d: 8f:63:0b:8a:86:3d:d0:62:c4:a3:9d:e2:88:2f:11:bc:7c:66: ad:30:19:ba:12:9d:a0:04:1a:20:e2:9c:d8:67:69:5d:e5:f2: da:ce:20:eb:a4:30:8c:94:29:43:8f:ae:9f:7e:bf:52:d8:bd: 0f:c0:30:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtN8bdBW6zde+RAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk ZWUwZmM2YjItZjY1MS00MGI5LTllNGEtZTY0OTk1MGY4MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgahKkiTMqBvpCwSQM1pVDhvG61cfLXpWqlzt 7yRBtRqNDJujnxoSCKdi24TYjtdV6wPGUSp4T1BhjZpHkjzQDTjDiJ3moj9e1cQA pYnZkEuWsCqOv7peuCSuFTbkNrIEHNd3kOD6+Z6V6bBf0r9JAIJTPoZGQafB0eHn 047OKDfQ+wdT8aVy2Xxd3scV7+Ig8nNsI/KiPoBSdwsndYJ2sW8B83KAPQWLXTaO ObHYGfjANM/grx30LEEi/dsLWxTW/DVrrJor9eGBA5Yv+MgfdmzCaWcndiSNyc/k cNt/bxXmUrvtuJnz+uRVIBtm7i12LNsPMNYpjMHbAN3iaj99+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEzUTMOFWO4KuihEFAY006N2fzyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZjhlYzViYzItZGE0NS0z ZWExLThjMWEtMzg1NDQxNjc4ZDY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnZ6nNlDE1S/ABpoaQ3+7KuqyfNErSUylo23ETXfGdgzaiCDBrGD6RF tEwe431tA9VrSaRrq8Fw87hc+oMO8gdzwtnYnd0nneejq9bw66oFSc4Lf8QmEZ1r IBk4wjbTQe8BR5ZU87OroCy8BdYJx65PTqc8ndekjZagPLf2Tfq9CfPx/FM1NY5o kUAsulcqANBHoEJ44WxXKvl8Ip/OjqMyw/Muqhx3l+T2IcWuET3+DCUf93W9/VjE CIZwD+mIVu5N+24jXY9jC4qGPdBixKOd4ogvEbx8Zq0wGboSnaAEGiDinNhnaV3l 8trOIOukMIyUKUOPrp9+v1LYvQ/AMGY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:52:52 2026 by rpki-client