$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa File: e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa (raw, json) Hash identifier: FpJLaDX2q9sb8ENOXyJR+cMjKfD1IEaOiyAzJK0435Y= Subject key identifier: 5F:86:F3:DD:AF:F4:B5:AC:9E:2C:18:9E:7C:38:FE:3B:47:E3:A6:5C Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D71A50EED9F85E86920D086C0 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa Signing time: Thu 09 Apr 2026 01:00:23 +0000 ROA not before: Thu 09 Apr 2026 01:00:23 +0000 ROA not after: Wed 08 Jul 2026 01:00:23 +0000 asID: 16509 IP address blocks: 161.69.192.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:71:a5:0e:ed:9f:85:e8:69:20:d0:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 9 01:00:23 2026 GMT Not After : Jul 8 01:00:23 2026 GMT Subject: CN=d218a901-43fc-4364-8d8b-df38f2972914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:78:55:48:d4:6d:62:d9:da:c0:82:1d:ae:e3: a4:8b:d4:4c:9d:ca:0b:71:87:03:35:b2:34:f0:d7: 9b:4a:2d:f2:9d:61:b0:7a:45:33:4d:d6:2a:1d:a6: 7d:43:84:1b:f5:0f:fa:b1:1d:e6:6a:44:d3:08:72: d4:52:57:dd:a5:76:2c:73:bf:20:64:9a:fb:40:79: ac:b2:e7:91:bd:6e:57:34:2f:87:5e:b2:7a:63:1f: fc:17:4a:4b:9c:00:ef:48:3f:48:b4:43:d7:02:ef: 4f:1c:74:f9:b7:58:3b:71:33:34:6b:58:ec:0b:51: bb:a8:56:93:2b:89:3e:65:0c:d5:3e:96:70:86:92: 22:17:a0:d2:b7:d2:08:47:9a:b2:dc:d6:f9:57:ea: a5:85:e5:89:a9:fa:52:1d:e6:ed:99:fe:b7:df:b6: c0:14:6e:f0:29:be:fb:70:9e:65:7e:97:18:f2:13: 2a:fe:8e:18:00:7e:9f:4a:ce:06:f2:9a:0a:7d:be: 6e:e7:d9:52:43:f8:17:a0:f5:cf:46:c7:bc:6d:a0: bd:6a:39:c3:52:cb:79:a8:99:bc:7a:9a:d0:f9:5f: 5c:24:ee:1e:df:e9:38:6e:ac:ac:22:17:6e:f7:fc: d4:05:b7:94:65:22:27:39:79:27:14:ec:e1:a6:85: 03:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:86:F3:DD:AF:F4:B5:AC:9E:2C:18:9E:7C:38:FE:3B:47:E3:A6:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/e8c8d98d-053c-3fd5-8533-4a91b507f14e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:51:fa:14:83:b3:cd:92:4e:10:e0:86:70:ce:90:86:44:54: 8b:64:40:4a:28:58:11:d2:31:26:7c:dd:79:eb:2f:ed:07:33: a4:85:66:d8:b7:8a:38:22:1f:52:db:fb:3a:8e:0c:fd:f4:c9: 3f:15:e6:e2:11:43:ac:ef:19:29:6d:19:b4:59:2c:d5:d8:6e: d6:c6:4c:ec:ef:77:40:26:67:17:62:0a:97:b1:27:8c:8e:8f: b6:e2:21:1d:41:fd:4b:ec:49:52:95:58:10:9a:39:2a:37:5d: 2b:0c:04:56:38:88:29:6d:9c:41:b5:e5:ff:e3:8e:8a:b6:47: 19:ee:f2:73:9d:c6:d0:db:15:c7:b2:89:6e:a6:a3:49:bf:a3: 1b:97:39:3c:ca:02:ae:80:dc:86:27:73:5f:bd:bb:94:d3:29: 42:b2:58:d5:35:1d:ed:d2:cc:2e:2a:de:35:2d:b8:2d:d9:4c: 9e:d0:26:75:e4:e4:cf:c7:61:8e:94:11:83:de:64:e3:77:08: b4:7c:f5:1d:16:b5:76:4a:ff:55:72:3f:a2:cf:f1:45:32:cc: 92:17:4c:1b:17:ec:dd:68:4f:6d:a7:62:d8:08:53:a2:46:1c: f6:a2:f5:fb:55:5b:62:c0:92:36:c9:60:90:3f:d5:e8:34:c0: ea:24:1a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1xpQ7tn4XoaSDQhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDQwOTAxMDAyM1oXDTI2MDcwODAxMDAyM1owLzEtMCsGA1UEAxMk ZDIxOGE5MDEtNDNmYy00MzY0LThkOGItZGYzOGYyOTcyOTE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnhVSNRtYtnawIIdruOki9RMncoLcYcDNbI0 8NebSi3ynWGwekUzTdYqHaZ9Q4Qb9Q/6sR3makTTCHLUUlfdpXYsc78gZJr7QHms sueRvW5XNC+HXrJ6Yx/8F0pLnADvSD9ItEPXAu9PHHT5t1g7cTM0a1jsC1G7qFaT K4k+ZQzVPpZwhpIiF6DSt9IIR5qy3Nb5V+qlheWJqfpSHebtmf6337bAFG7wKb77 cJ5lfpcY8hMq/o4YAH6fSs4G8poKfb5u59lSQ/gXoPXPRse8baC9ajnDUst5qJm8 eprQ+V9cJO4e3+k4bqysIhdu9/zUBbeUZSInOXknFOzhpoUD2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF+G892v9LWsniwYnnw4/jtH46ZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvZThjOGQ5OGQtMDUzYy0z ZmQ1LTg1MzMtNGE5MWI1MDdmMTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoUXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRR+hSDs82SThDghnDOkIZEVItkQEooWBHSMSZ83XnrL+0HM6SFZti3 ijgiH1Lb+zqODP30yT8V5uIRQ6zvGSltGbRZLNXYbtbGTOzvd0AmZxdiCpexJ4yO j7biIR1B/UvsSVKVWBCaOSo3XSsMBFY4iCltnEG15f/jjoq2Rxnu8nOdxtDbFcey iW6mo0m/oxuXOTzKAq6A3IYnc1+9u5TTKUKyWNU1He3SzC4q3jUtuC3ZTJ7QJnXk 5M/HYY6UEYPeZON3CLR89R0WtXZK/1VyP6LP8UUyzJIXTBsX7N1oT22nYtgIU6JG HPai9ftVW2LAkjbJYJA/1eg0wOokGlk= -----END CERTIFICATE-----Generated at Mon Apr 13 17:14:37 2026 by rpki-client