$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa File: aae72d5b-9be8-3703-913c-329e57bf9b39.roa (raw, json) Hash identifier: 6LjvYmiAqhXaWeCvhGG3hN2lzBhWFeU/DAdgxrBcRqk= Subject key identifier: 8A:5C:A8:D6:C2:6F:60:57:62:66:28:37:A0:E3:2F:30:FE:82:02:2B Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584CF85244076D0C5DE4824716C0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 203724 IP address blocks: 161.69.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:44:07:6d:0c:5d:e4:82:47:16:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=0c84b017-8cb0-4dd6-b6af-fb35cb1fc3d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:66:28:4f:05:db:6d:2d:f7:c8:eb:a7:a1: 7f:ac:90:ff:5f:96:ca:c0:8f:13:c1:1c:98:67:e8: 85:2e:9e:d3:04:ad:0a:50:02:ba:66:ed:ed:85:5d: 3d:9b:31:63:1d:4d:7e:25:c2:2b:29:51:db:1a:18: ce:3f:42:16:0b:5a:43:d6:16:96:54:8d:fe:0f:da: a9:82:51:3b:80:e1:e1:11:da:c4:16:1b:29:e8:cd: b1:83:25:f2:9a:c5:84:cd:19:d3:71:78:c9:65:79: b5:bc:0d:64:05:19:9b:b0:2a:59:f3:94:aa:3e:8d: 66:41:5f:30:6c:5a:99:2a:ba:83:4a:ee:65:11:67: 56:00:96:05:53:db:7e:5f:93:bb:03:1b:dd:dc:1a: 65:57:6c:76:c7:30:c7:d6:a1:c8:44:5a:dc:d1:87: af:21:a7:4d:a0:59:f6:78:e2:20:47:f2:18:55:bc: c0:d7:7c:1d:40:aa:95:e5:1e:19:81:8a:c4:b2:f1: 1d:52:42:5f:0d:10:1c:ba:d3:d0:8a:c4:a3:df:24: 75:d4:83:4f:4a:33:73:68:bf:9f:45:33:84:8e:8e: e6:41:aa:51:b1:49:ff:91:fa:91:9d:e0:6a:3e:b6: 7d:c0:7b:a9:52:c5:34:21:63:6b:d5:c5:f4:d9:ed: 65:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:5C:A8:D6:C2:6F:60:57:62:66:28:37:A0:E3:2F:30:FE:82:02:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/aae72d5b-9be8-3703-913c-329e57bf9b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:46:01:88:9a:66:38:a8:bf:ad:2f:70:f8:88:4f:be:e8:ea: 93:c5:a6:0f:31:94:44:43:b2:6f:ff:9f:61:4f:4e:a1:d2:75: 06:ad:56:18:fc:d6:c1:47:01:6a:b0:69:08:38:69:df:a4:2f: 44:c1:3c:17:e3:77:9d:5d:1a:bc:d9:a5:2e:00:8f:46:8c:78: 93:0a:bf:b2:b8:90:ae:27:9d:22:2d:6c:26:c8:2b:cd:c2:bf: cd:46:52:bd:91:d7:f8:bc:b7:cb:01:c2:73:d5:2b:50:90:c6: c8:ea:fe:bf:cd:c4:a2:b8:70:ca:dc:79:86:a1:86:6d:3b:5d: cf:76:ac:31:71:be:f1:b4:86:6a:a6:c7:1f:b5:26:72:d0:7a: cb:e2:a3:40:0b:d9:20:46:f6:b6:10:f8:22:2c:4b:63:05:d8: 68:65:e9:af:ad:73:02:0d:34:ea:e9:a0:07:82:2a:62:41:9f: 06:4d:c1:d9:8b:3d:4a:7a:b8:f4:0f:a0:00:e1:3c:a6:51:a5: c6:78:d3:c1:43:a9:49:f6:15:8e:75:04:7b:19:8a:a3:a1:7d: 87:1f:ff:82:20:5b:50:e8:68:4a:8f:7e:5f:b7:62:62:09:68: f6:ca:85:d2:77:24:fe:dd:30:ed:88:b8:8b:2c:b2:b3:17:ff: 9e:1d:f9:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkQHbQxd5IJHFsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk MGM4NGIwMTctOGNiMC00ZGQ2LWI2YWYtZmIzNWNiMWZjM2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2FmKE8F220t98jrp6F/rJD/X5bKwI8TwRyY Z+iFLp7TBK0KUAK6Zu3thV09mzFjHU1+JcIrKVHbGhjOP0IWC1pD1haWVI3+D9qp glE7gOHhEdrEFhsp6M2xgyXymsWEzRnTcXjJZXm1vA1kBRmbsCpZ85SqPo1mQV8w bFqZKrqDSu5lEWdWAJYFU9t+X5O7Axvd3BplV2x2xzDH1qHIRFrc0YevIadNoFn2 eOIgR/IYVbzA13wdQKqV5R4ZgYrEsvEdUkJfDRAcutPQisSj3yR11INPSjNzaL+f RTOEjo7mQapRsUn/kfqRneBqPrZ9wHupUsU0IWNr1cX02e1lnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpcqNbCb2BXYmYoN6DjLzD+ggIrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYWFlNzJkNWItOWJlOC0z NzAzLTkxM2MtMzI5ZTU3YmY5YjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdGAYiaZjiov60vcPiIT77o6pPFpg8xlERDsm//n2FPTqHSdQatVhj8 1sFHAWqwaQg4ad+kL0TBPBfjd51dGrzZpS4Aj0aMeJMKv7K4kK4nnSItbCbIK83C v81GUr2R1/i8t8sBwnPVK1CQxsjq/r/NxKK4cMrceYahhm07Xc92rDFxvvG0hmqm xx+1JnLQesvio0AL2SBG9rYQ+CIsS2MF2Ghl6a+tcwINNOrpoAeCKmJBnwZNwdmL PUp6uPQPoADhPKZRpcZ408FDqUn2FY51BHsZiqOhfYcf/4IgW1DoaEqPfl+3YmIJ aPbKhdJ3JP7dMO2IuIsssrMX/54d+RE= -----END CERTIFICATE-----Generated at Thu Feb 26 08:56:28 2026 by rpki-client