$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa File: cfb444d2-531b-3f89-9a90-97326374d80c.roa (raw, json) Hash identifier: 5JGeaMOgmldsxfKA4P8PQt/TJnzayzzhg0lTW1fTWcA= Subject key identifier: 6A:CC:91:DC:FE:18:37:6D:DC:6C:CA:45:61:76:82:89:B0:08:D3:5F Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584CF8524466DEA562E4833C0D80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 161.69.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:44:66:de:a5:62:e4:83:3c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=a5bdb8a2-a370-410d-a23d-5acfe760fdd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:39:f0:9e:c0:83:14:c8:35:3b:63:9f:62:f7: 6d:cd:ba:9f:79:28:75:0c:67:76:f0:28:05:ef:11: e6:c3:aa:ef:f0:50:16:24:88:fa:4b:72:e5:8d:95: a1:2b:0e:f0:87:39:69:56:ba:4a:2a:bc:df:8d:91: b1:cf:c6:c9:37:09:15:44:45:11:c9:52:ea:b4:8c: f6:9d:62:12:69:2e:8f:e3:f2:06:31:ac:7b:5b:3c: 04:24:a6:81:f9:93:e5:0d:75:fe:a3:48:70:79:31: 83:3a:10:8b:0b:81:0c:7a:d1:8d:cd:72:88:16:e9: 28:67:ea:e0:f9:da:e7:af:8e:d3:03:e8:ac:7f:a1: e9:4a:44:53:fb:12:fd:60:45:f1:65:c5:3d:3f:4d: 68:a5:e9:15:d4:18:f4:1b:2a:f3:66:48:88:a2:7c: 1b:70:c7:cd:31:ed:14:84:cf:2f:e7:ba:46:0f:3a: 94:c1:ab:71:9d:c8:7e:55:e0:05:7c:4d:06:3f:4c: 75:25:03:55:ca:60:68:43:08:0d:97:c8:05:18:81: 58:c3:94:9b:59:ae:07:67:ae:5f:c7:35:df:36:95: 32:06:d7:95:fc:52:41:c6:14:36:c6:fa:3e:0c:2b: bb:b5:94:53:95:8f:75:ca:b6:92:89:51:57:e7:e6: 34:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:CC:91:DC:FE:18:37:6D:DC:6C:CA:45:61:76:82:89:B0:08:D3:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/cfb444d2-531b-3f89-9a90-97326374d80c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c0:cd:aa:dc:0b:ba:db:72:0b:0b:33:5c:1d:8c:3a:f7:62: d6:1e:2f:b6:c1:46:21:52:0f:1b:a6:bd:a1:14:7a:54:13:11: d8:8f:6e:88:97:f7:d1:5e:4f:50:01:36:7e:c7:95:fd:b4:3b: 0d:8c:c0:b9:52:5a:fb:ed:92:24:b0:bc:c1:21:fb:c6:20:5a: 10:b2:e5:c3:9f:f3:8a:f7:c0:0d:a0:88:fa:dd:eb:b5:6f:fc: 61:61:2e:61:1d:af:44:99:6f:45:5c:f3:77:bb:52:20:ee:06: 51:96:7c:65:7c:d3:47:af:63:b3:04:0d:8b:ce:62:d6:9e:c4: d3:93:ec:e3:3d:58:f8:87:94:fa:d3:b4:18:3d:cb:a4:93:d2: 1c:64:9b:09:c7:3d:52:04:0f:e3:26:4e:41:50:d1:f9:f6:ee: 31:f5:1f:8c:aa:b3:ce:d5:66:44:2d:35:cc:66:03:43:a4:3d: ad:83:c2:e7:46:f2:71:f8:26:2c:95:df:30:1b:1b:a5:82:15: 20:32:ee:ff:34:b1:cd:9f:47:ca:9b:48:14:08:83:2a:0a:ed: 91:cd:08:55:e8:5e:04:33:77:c8:4d:c5:08:dc:33:1a:b8:53: d1:a0:ca:ec:81:95:01:e0:48:8e:de:f3:32:29:85:6e:2c:d1: d4:ef:cd:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4UkRm3qVi5IM8DYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk YTViZGI4YTItYTM3MC00MTBkLWEyM2QtNWFjZmU3NjBmZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAijnwnsCDFMg1O2OfYvdtzbqfeSh1DGd28CgF 7xHmw6rv8FAWJIj6S3LljZWhKw7whzlpVrpKKrzfjZGxz8bJNwkVREURyVLqtIz2 nWISaS6P4/IGMax7WzwEJKaB+ZPlDXX+o0hweTGDOhCLC4EMetGNzXKIFukoZ+rg +drnr47TA+isf6HpSkRT+xL9YEXxZcU9P01opekV1Bj0GyrzZkiIonwbcMfNMe0U hM8v57pGDzqUwatxnch+VeAFfE0GP0x1JQNVymBoQwgNl8gFGIFYw5SbWa4HZ65f xzXfNpUyBteV/FJBxhQ2xvo+DCu7tZRTlY91yraSiVFX5+Y0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGrMkdz+GDdt3GzKRWF2gomwCNNfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvY2ZiNDQ0ZDItNTMxYi0z Zjg5LTlhOTAtOTczMjYzNzRkODBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/AzarcC7rbcgsLM1wdjDr3YtYeL7bBRiFSDxumvaEUelQTEdiPboiX 99FeT1ABNn7Hlf20Ow2MwLlSWvvtkiSwvMEh+8YgWhCy5cOf84r3wA2giPrd67Vv /GFhLmEdr0SZb0Vc83e7UiDuBlGWfGV800evY7MEDYvOYtaexNOT7OM9WPiHlPrT tBg9y6ST0hxkmwnHPVIED+MmTkFQ0fn27jH1H4yqs87VZkQtNcxmA0OkPa2DwudG 8nH4JiyV3zAbG6WCFSAy7v80sc2fR8qbSBQIgyoK7ZHNCFXoXgQzd8hNxQjcMxq4 U9GgyuyBlQHgSI7e8zIphW4s0dTvzRE= -----END CERTIFICATE-----Generated at Thu Feb 26 06:32:58 2026 by rpki-client