$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa File: 8854b722-19fe-3709-b8c9-baa21c86eb4a.roa (raw, json) Hash identifier: n/PCQa9Fsit3IGCQnrwQG0lqPdThrAb8c8m5V9/Mp6o= Subject key identifier: A0:97:D6:34:44:93:FF:66:C2:37:B9:27:C6:E6:A2:3A:67:DB:92:D4 Certificate issuer: /CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Certificate serial: 010D0C9F4328584D2BDA0D9BDF374B6221BB2800 Authority key identifier: E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 161.199.250.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:0d:9b:df:37:4b:62:21:bb:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8abcb36-7d75-4654-a098-d032ddf03d8a Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=af8b0b19-43da-4e70-b432-38d1a0569aa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:cc:76:b2:68:1b:ee:05:d5:92:98:ca:85:2b: ba:16:ba:d7:52:77:37:14:f7:6c:b3:53:18:56:71: 7d:00:e1:34:cc:78:0e:92:d1:a0:d4:87:ad:bb:6f: 5a:ab:6a:96:ef:5e:82:64:23:fe:54:d6:2f:29:40: 5a:01:ec:0f:8b:57:0b:02:e9:bf:1c:34:7f:f2:84: d5:57:98:8e:4b:6a:18:4f:f2:4c:3a:4d:ab:8b:a4: 48:d4:3b:02:1e:8a:4d:9b:bf:07:ab:fe:35:af:e4: e4:73:6d:07:d2:0e:ef:9f:8b:77:91:90:71:12:c9: af:db:f2:93:4e:44:7b:44:7b:a4:bf:74:5b:de:e6: 2f:72:53:5c:c6:78:dd:58:a9:e1:41:11:f8:66:4d: 1a:50:ae:5a:e9:02:7d:8f:bc:a5:48:85:0b:36:22: 52:7f:aa:af:95:50:d8:f0:24:79:8e:cc:12:13:d3: 7f:d3:60:51:68:62:a4:16:2a:63:6e:27:a1:f1:de: a2:43:2e:35:c1:2c:a2:74:2d:3c:5d:74:67:6a:e2: 0b:2a:40:a5:83:f7:4e:34:df:8d:ae:e3:ed:59:d9: d0:26:c6:75:5e:21:58:de:66:9f:b1:3d:5d:ff:a4: ec:43:8c:80:50:54:ec:e6:77:69:56:9f:35:ab:f4: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:97:D6:34:44:93:FF:66:C2:37:B9:27:C6:E6:A2:3A:67:DB:92:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/8854b722-19fe-3709-b8c9-baa21c86eb4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a/e8abcb36-7d75-4654-a098-d032ddf03d8a.crl X509v3 Authority Key Identifier: keyid:E5:22:9B:0E:EE:F4:E6:A8:68:D5:13:06:B2:99:9D:E3:8D:58:1C:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e8abcb36-7d75-4654-a098-d032ddf03d8a.cer sbgp-ipAddrBlock: critical IPv4: 161.199.250.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:6e:c9:91:d8:df:07:8a:9f:b3:73:49:8b:28:d5:94:35:53: 68:38:bf:37:74:df:cd:79:ac:33:1b:a0:b7:cf:1b:a6:a0:d8: 5f:b9:73:d9:49:4b:c5:e9:fb:7d:21:03:23:77:84:cd:f8:93: 29:4f:8c:f0:12:fa:71:22:c4:d0:70:a2:95:3a:4c:73:c9:28: 9d:07:59:60:28:1f:c0:be:41:96:1e:3c:1e:46:da:18:55:e3: 20:fe:21:a5:85:ce:28:0a:d1:be:e6:13:b7:85:62:79:7f:b9: 46:4d:0c:01:ea:97:fc:f4:6b:4d:84:f4:2a:e3:fd:26:ae:d4: 8c:e2:81:c1:d1:44:0e:70:13:28:c4:9c:13:09:7c:aa:e7:06: 32:ea:69:97:07:3c:e3:78:af:0e:26:88:35:52:a9:07:30:de: 8a:2f:76:44:ff:15:d7:ba:5c:a6:04:c8:38:af:18:fb:97:6f: 64:15:72:8c:b1:9f:b6:2a:6b:50:66:7f:a1:5b:65:ad:8e:56: 57:0f:11:cf:6f:57:fd:ed:46:6d:1a:bb:ed:e5:34:7f:4c:47: 17:2a:80:b2:a7:47:ce:a0:18:e2:95:7a:41:e2:60:2f:99:0c: 30:ad:a0:2e:e5:a8:39:d7:b4:11:0f:10:92:1f:d0:0e:0a:a7: 4b:63:34:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2g2b3zdLYiG7KAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZThhYmNiMzYtN2Q3NS00NjU0LWEwOTgtZDAzMmRkZjAz ZDhhMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWY4YjBiMTktNDNkYS00ZTcwLWI0MzItMzhkMWEwNTY5YWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMx2smgb7gXVkpjKhSu6FrrXUnc3FPdss1MY VnF9AOE0zHgOktGg1Ietu29aq2qW716CZCP+VNYvKUBaAewPi1cLAum/HDR/8oTV V5iOS2oYT/JMOk2ri6RI1DsCHopNm78Hq/41r+Tkc20H0g7vn4t3kZBxEsmv2/KT TkR7RHukv3Rb3uYvclNcxnjdWKnhQRH4Zk0aUK5a6QJ9j7ylSIULNiJSf6qvlVDY 8CR5jswSE9N/02BRaGKkFipjbieh8d6iQy41wSyidC08XXRnauILKkClg/dONN+N ruPtWdnQJsZ1XiFY3mafsT1d/6TsQ4yAUFTs5ndpVp81q/Sa/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCX1jREk/9mwje5J8bmojpn25LUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFi Y2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMyZGRmMDNkOGEvODg1NGI3MjItMTlmZS0z NzA5LWI4YzktYmFhMjFjODZlYjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZThhYmNiMzYtN2Q3NS00NjU0LWEw OTgtZDAzMmRkZjAzZDhhL2U4YWJjYjM2LTdkNzUtNDY1NC1hMDk4LWQwMzJkZGYw M2Q4YS5jcmwwHwYDVR0jBBgwFoAU5SKbDu705qho1RMGspmd441YHB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9lOGFiY2IzNi03ZDc1LTQ2NTQtYTA5OC1kMDMy ZGRmMDNkOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBocf6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAluyZHY3weKn7NzSYso1ZQ1U2g4vzd03815rDMboLfPG6ag2F+5c9lJ S8Xp+30hAyN3hM34kylPjPAS+nEixNBwopU6THPJKJ0HWWAoH8C+QZYePB5G2hhV 4yD+IaWFzigK0b7mE7eFYnl/uUZNDAHql/z0a02E9Crj/Sau1IzigcHRRA5wEyjE nBMJfKrnBjLqaZcHPON4rw4miDVSqQcw3oovdkT/Fde6XKYEyDivGPuXb2QVcoyx n7Yqa1Bmf6FbZa2OVlcPEc9vV/3tRm0au+3lNH9MRxcqgLKnR86gGOKVekHiYC+Z DDCtoC7lqDnXtBEPEJIf0A4Kp0tjNIY= -----END CERTIFICATE-----Generated at Thu Mar 26 03:46:32 2026 by rpki-client