$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa File: b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa (raw, json) Hash identifier: P+nqUbwhLwEuKgnFqApN9wgBmfpnqhf5Isc7ACyi+Z0= Subject key identifier: 3B:AD:C5:70:D5:68:6A:B4:80:EF:31:A3:00:DA:D6:FE:E9:2C:D8:7D Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584CACF1C597EF50F0557E897B40 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 161.153.212.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Feb 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:c5:97:ef:50:f0:55:7e:89:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=65d0d52e-a9d6-4254-8b59-33ea695f51f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c2:3f:85:74:a9:f4:53:f9:9f:c4:e8:e8:57: 2f:8b:ec:84:53:e4:92:38:ee:31:ce:e6:9c:17:20: 8d:7e:e3:ab:28:e7:79:b6:75:81:79:47:f9:52:0d: f3:63:d1:d5:09:05:91:1b:97:30:c3:ae:ef:fc:0d: c9:5c:39:cf:b3:d9:9c:50:38:d3:93:b5:44:5a:3a: b0:37:3c:ca:4d:94:8d:2c:b7:b8:8e:da:75:2d:4f: c1:94:8c:92:6c:22:37:45:d6:30:5a:04:27:1c:4f: ad:c6:2e:23:8c:b7:67:a1:d7:94:d1:46:5f:9b:0c: 46:ec:bb:7f:33:1a:09:3b:9c:e2:87:f6:a8:fd:c6: 64:ee:5c:b5:d6:29:3d:b3:ba:94:0d:ca:a0:6a:0f: ee:e4:3e:cc:d0:8a:a2:16:7d:08:36:92:4f:0c:f5: 09:ad:2c:63:ed:ff:30:63:b7:7d:64:ad:3f:7d:13: b8:21:ec:0b:35:85:0e:56:66:7c:3a:f4:8e:4a:8e: c7:f8:fc:cf:58:76:a3:c9:30:6c:78:e2:a3:c5:a4: e8:45:01:d6:2f:82:f5:13:be:46:b8:4b:d8:f7:07: f0:17:5a:fa:b8:68:83:cd:09:b7:59:10:9c:68:ca: 32:08:19:5e:ac:a9:6c:2d:6e:30:34:b6:45:f0:4c: 2a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:C5:70:D5:68:6A:B4:80:EF:31:A3:00:DA:D6:FE:E9:2C:D8:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/b80d9746-fe21-3dac-874d-ef1dd6406fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 161.153.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:66:a8:c7:0c:a2:af:06:f5:b9:72:00:a5:bc:46:12:62:14: 8b:a8:df:df:9d:d9:af:4b:ce:e7:55:91:cc:55:f5:f8:a1:ed: 73:17:42:30:12:ba:56:5a:18:83:4b:3f:04:df:81:78:39:29: 10:fc:81:76:89:9a:df:6c:6e:fa:cd:f0:a0:c4:60:fe:9d:e3: 8c:3b:03:e5:99:73:fd:96:35:a1:63:7b:74:31:e4:81:bd:bb: ba:ae:94:0d:22:59:f0:08:c4:eb:c2:67:6d:b7:7b:2e:fd:7e: 6a:80:41:00:62:03:e4:ec:87:a8:03:bc:4c:72:4f:4e:42:5d: 74:00:35:f4:dd:f8:bb:4f:c8:91:71:76:53:8a:dc:b0:51:4a: ff:60:e0:1e:ae:fc:25:69:02:bc:7e:db:76:3b:6b:61:79:b4: df:20:97:ad:35:b3:34:a4:a1:9e:11:ce:6c:e8:18:d0:54:31: 70:0a:68:c3:6a:12:e8:a1:e5:20:48:b5:e5:14:d7:73:43:14: d6:d7:d1:99:7e:de:30:e5:fe:05:f9:37:fc:25:40:77:ce:87: 68:0b:a7:27:77:db:02:22:de:3f:43:f8:bd:02:e1:e3:0a:12: 69:fb:62:a3:0a:28:0c:bf:6f:d7:79:4e:c8:d2:6f:68:df:43: ab:b1:e3:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8cWX71DwVX6Je0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NjVkMGQ1MmUtYTlkNi00MjU0LThiNTktMzNlYTY5NWY1MWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8I/hXSp9FP5n8To6Fcvi+yEU+SSOO4xzuac FyCNfuOrKOd5tnWBeUf5Ug3zY9HVCQWRG5cww67v/A3JXDnPs9mcUDjTk7VEWjqw NzzKTZSNLLe4jtp1LU/BlIySbCI3RdYwWgQnHE+txi4jjLdnodeU0UZfmwxG7Lt/ MxoJO5zih/ao/cZk7ly11ik9s7qUDcqgag/u5D7M0IqiFn0INpJPDPUJrSxj7f8w Y7d9ZK0/fRO4IewLNYUOVmZ8OvSOSo7H+PzPWHajyTBseOKjxaToRQHWL4L1E75G uEvY9wfwF1r6uGiDzQm3WRCcaMoyCBlerKlsLW4wNLZF8Ewq+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDutxXDVaGq0gO8xowDa1v7pLNh9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvYjgwZDk3NDYtZmUyMS0z ZGFjLTg3NGQtZWYxZGQ2NDA2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoZnUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItmqMcMoq8G9blyAKW8RhJiFIuo39+d2a9LzudVkcxV9fih7XMXQjAS ulZaGINLPwTfgXg5KRD8gXaJmt9sbvrN8KDEYP6d44w7A+WZc/2WNaFje3Qx5IG9 u7qulA0iWfAIxOvCZ223ey79fmqAQQBiA+Tsh6gDvExyT05CXXQANfTd+LtPyJFx dlOK3LBRSv9g4B6u/CVpArx+23Y7a2F5tN8gl601szSkoZ4RzmzoGNBUMXAKaMNq Euih5SBIteUU13NDFNbX0Zl+3jDl/gX5N/wlQHfOh2gLpyd32wIi3j9D+L0C4eMK Emn7YqMKKAy/b9d5TsjSb2jfQ6ux414= -----END CERTIFICATE-----Generated at Thu Feb 26 03:27:47 2026 by rpki-client