$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa File: 2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa (raw, json) Hash identifier: OfHIoAb4ezVlANFijx2NSNqOaJJIkv1TcIld1te2b3o= Subject key identifier: A8:5B:B2:6B:DD:B4:99:B0:AE:01:3C:67:45:58:79:04:F4:16:BE:0C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584CF8524397C6977DB6B0316E80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 203724 IP address blocks: 161.69.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:43:97:c6:97:7d:b6:b0:31:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=32d34030-3175-4d66-a6a2-1f4f50a9e221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c7:e3:f0:23:57:c3:5e:3c:1d:14:77:cc:b0: d8:9b:93:31:e6:c1:92:46:2f:8d:6a:d6:49:c4:fe: a6:65:62:b5:2a:57:3b:40:4b:1f:24:84:b6:d8:f5: 9d:fd:de:a0:43:a5:a0:c4:a3:b9:a8:6e:b7:99:04: af:db:87:e2:4d:1f:6f:3e:bb:10:38:df:e2:5c:ac: a3:b8:4a:92:45:62:40:d3:bd:6c:47:4c:82:a5:ec: 63:e7:36:e9:af:37:17:7b:8e:a7:f8:b4:30:8b:d4: e3:33:6f:3b:6e:13:6b:ed:5b:36:19:48:28:de:45: dc:ed:c1:ad:84:18:ce:04:c2:41:c0:42:93:3c:36: ea:cc:ae:01:b3:3c:6b:3f:6b:2d:7b:6e:b6:67:7f: 98:83:f7:dc:85:1c:8e:be:fe:65:e4:f1:0f:6a:16: 37:2e:5d:32:ba:f7:29:52:0a:7b:a7:d1:69:32:2c: 37:53:c5:1c:f4:04:08:e3:e7:90:43:ff:03:d3:96: d8:23:c7:e7:80:68:cc:cd:7c:df:4a:8c:90:cd:10: b8:ce:1c:8f:ef:2a:56:9d:69:82:6d:f6:5b:a8:e2: ab:c3:40:1e:c9:b0:d8:8b:23:b7:0a:d5:ac:52:91: 7e:56:d0:ff:d8:46:8d:5c:8b:c4:a7:90:46:bc:87: 39:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:5B:B2:6B:DD:B4:99:B0:AE:01:3C:67:45:58:79:04:F4:16:BE:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/2e8d983c-a06e-33b5-ad48-a5c0d99644a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:43:52:99:b6:71:37:cd:95:56:62:29:33:7e:16:e4:65:2e: d5:b2:c0:3b:df:cc:49:83:a0:73:59:c6:69:60:40:6a:4a:e7: df:bc:10:a1:93:b6:38:c1:41:f4:0b:00:bb:f5:8c:4a:f6:3b: 09:51:53:90:59:bd:91:15:e5:a4:f8:24:c5:cb:a0:16:3a:15: 28:29:ee:57:d4:a1:f0:37:b9:67:74:f7:5e:ed:3d:12:28:3f: b7:a7:af:0c:c3:db:a6:a3:23:f4:eb:98:2b:9a:db:be:3f:86: e5:7a:6b:1e:04:f1:3e:3d:17:dc:cb:b1:ee:a8:9b:02:77:8f: 08:22:9c:49:3d:6d:df:27:fa:66:c7:4d:7d:8e:42:ac:1e:9b: 08:87:47:6c:cd:71:a8:46:74:b6:23:9b:68:17:78:2e:9d:15: aa:90:14:80:b8:8e:75:19:d0:ad:9e:3a:b4:1c:84:a2:e9:ff: 18:5f:81:f3:78:5a:2b:da:f6:8a:0d:a7:9d:b2:dc:ad:fb:d0: be:13:e2:1c:f8:08:ca:ce:bc:b9:cd:26:43:36:be:8c:c6:ae: f0:15:e3:95:70:01:d6:2c:13:a0:04:ee:b0:5b:40:92:1f:90: d4:a7:21:32:04:84:0d:23:be:87:5e:0b:fd:89:81:28:c8:18: e7:d8:de:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkOXxpd9trAxboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk MzJkMzQwMzAtMzE3NS00ZDY2LWE2YTItMWY0ZjUwYTllMjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMfj8CNXw148HRR3zLDYm5Mx5sGSRi+NatZJ xP6mZWK1Klc7QEsfJIS22PWd/d6gQ6WgxKO5qG63mQSv24fiTR9vPrsQON/iXKyj uEqSRWJA071sR0yCpexj5zbprzcXe46n+LQwi9TjM287bhNr7Vs2GUgo3kXc7cGt hBjOBMJBwEKTPDbqzK4BszxrP2ste262Z3+Yg/fchRyOvv5l5PEPahY3Ll0yuvcp Ugp7p9FpMiw3U8Uc9AQI4+eQQ/8D05bYI8fngGjMzXzfSoyQzRC4zhyP7ypWnWmC bfZbqOKrw0AeybDYiyO3CtWsUpF+VtD/2EaNXIvEp5BGvIc5FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhbsmvdtJmwrgE8Z0VYeQT0Fr4MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMmU4ZDk4M2MtYTA2ZS0z M2I1LWFkNDgtYTVjMGQ5OTY0NGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUVGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNDUpm2cTfNlVZiKTN+FuRlLtWywDvfzEmDoHNZxmlgQGpK59+8EKGT tjjBQfQLALv1jEr2OwlRU5BZvZEV5aT4JMXLoBY6FSgp7lfUofA3uWd0917tPRIo P7enrwzD26ajI/TrmCua274/huV6ax4E8T49F9zLse6omwJ3jwginEk9bd8n+mbH TX2OQqwemwiHR2zNcahGdLYjm2gXeC6dFaqQFIC4jnUZ0K2eOrQchKLp/xhfgfN4 Wiva9ooNp52y3K370L4T4hz4CMrOvLnNJkM2vozGrvAV45VwAdYsE6AE7rBbQJIf kNSnITIEhA0jvodeC/2JgSjIGOfY3h8= -----END CERTIFICATE-----Generated at Thu Feb 26 07:57:17 2026 by rpki-client