$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa File: bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa (raw, json) Hash identifier: SAxJc+kyWA3yoB+H8FinZ/lepaMUsmQwu5o+vU4Uj5k= Subject key identifier: 01:24:E4:B6:A9:B4:EB:4A:63:1D:A8:F4:92:51:D0:05:72:8C:36:58 Certificate issuer: /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Certificate serial: 010D0C9F4328584D524353B665F07BEDF3931CB0 Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa Signing time: Sat 28 Mar 2026 19:13:19 +0000 ROA not before: Sat 28 Mar 2026 19:13:19 +0000 ROA not after: Fri 26 Jun 2026 19:13:19 +0000 asID: 215081 IP address blocks: 161.129.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:43:53:b6:65:f0:7b:ed:f3:93:1c:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d Validity Not Before: Mar 28 19:13:19 2026 GMT Not After : Jun 26 19:13:19 2026 GMT Subject: CN=c0533c52-4633-4d94-a632-bfc42d5f5f52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:8d:e6:17:45:7a:95:e0:b2:50:95:aa:3c:ea: 1f:37:e6:f4:50:0a:f2:e8:28:8a:23:22:5a:50:a6: d1:5a:47:1d:9e:49:4b:bd:2a:16:56:a4:13:56:14: 0f:b4:3f:99:9c:99:24:3b:3c:a1:2a:34:86:6c:33: dd:44:a7:f2:92:3a:c7:e5:18:7d:1d:c4:07:14:dc: d1:c4:35:03:22:e7:2f:5d:7c:16:2c:5f:3d:5d:59: 0c:81:d8:7b:7a:1e:7e:87:72:e3:a7:6e:99:78:88: 1b:09:f8:a1:c3:6b:b2:fb:54:df:ce:f5:78:eb:d8: 4d:d9:85:63:da:dd:fe:da:2e:d0:05:0e:a2:8e:80: e6:f4:45:62:a4:2a:4e:a7:e0:d1:bf:e5:31:4b:d4: 8d:1f:27:4d:88:0a:8f:ab:69:5a:31:b4:56:59:e6: 46:f6:4a:22:a5:4e:1c:b4:6c:98:56:9c:53:96:97: f3:8f:9e:a0:3e:26:ef:6b:00:85:53:0d:06:a7:33: d8:d3:c1:56:61:e1:4a:3c:56:ba:ef:5c:78:42:ba: 8e:da:f7:03:63:51:08:0a:44:b0:42:26:30:aa:ac: 28:a1:a5:53:56:59:6b:cb:35:8e:ea:50:a8:f6:6e: 26:fd:f0:40:d7:03:5f:73:f3:bd:cf:8b:4f:94:bc: e8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:24:E4:B6:A9:B4:EB:4A:63:1D:A8:F4:92:51:D0:05:72:8C:36:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/bf26670f-2970-335f-b4f4-6a4dd4e0a40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl X509v3 Authority Key Identifier: keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer sbgp-ipAddrBlock: critical IPv4: 161.129.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:84:aa:ee:c1:a2:a1:07:0c:f9:57:30:7b:6d:ad:de:df:4c: a5:31:b3:76:29:3f:2c:11:ac:46:a9:48:20:66:75:77:53:a8: 3e:e2:33:8b:5a:5d:cc:9a:1b:32:75:15:b8:09:a0:11:97:cc: 34:14:b2:26:3e:a9:7b:34:7c:57:2e:55:c4:02:09:2c:df:24: 4f:ed:92:28:84:c3:38:4c:fc:96:62:38:a6:b9:d4:65:41:bf: a9:cb:c2:c8:c1:b3:f2:20:10:3d:67:24:7a:a1:84:d8:cb:91: 62:14:c0:fb:62:13:a6:5b:f6:7d:bc:6e:ba:e6:ec:81:fd:92: cf:cb:54:36:ed:76:af:cf:05:c4:c4:c5:60:2a:85:ab:aa:8c: 43:76:03:83:3d:c5:3e:ef:f4:90:84:be:79:fe:9a:04:20:ec: d6:08:11:49:ed:92:72:67:9c:ce:01:cf:18:71:6c:ad:7e:68: 2a:8a:e2:d2:69:14:b0:4f:cc:7b:e8:ad:fe:e6:d5:a8:00:65: 08:b9:50:22:72:59:f3:44:43:96:15:a9:81:ed:78:e0:b6:c1: c0:5e:77:41:81:70:35:67:22:5f:47:ee:53:f6:c6:3b:f3:66: 94:1b:8b:af:e9:49:6d:0b:c2:d3:5a:14:2d:f0:48:78:5d:17: 1b:d7:ab:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ1O2ZfB77fOTHLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx NzVkMB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk YzA1MzNjNTItNDYzMy00ZDk0LWE2MzItYmZjNDJkNWY1ZjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiY3mF0V6leCyUJWqPOofN+b0UAry6CiKIyJa UKbRWkcdnklLvSoWVqQTVhQPtD+ZnJkkOzyhKjSGbDPdRKfykjrH5Rh9HcQHFNzR xDUDIucvXXwWLF89XVkMgdh7eh5+h3Ljp26ZeIgbCfihw2uy+1TfzvV469hN2YVj 2t3+2i7QBQ6ijoDm9EVipCpOp+DRv+UxS9SNHydNiAqPq2laMbRWWeZG9koipU4c tGyYVpxTlpfzj56gPibvawCFUw0GpzPY08FWYeFKPFa671x4QrqO2vcDY1EICkSw QiYwqqwooaVTVllryzWO6lCo9m4m/fBA1wNfc/O9z4tPlLzoiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAEk5LaptOtKYx2o9JJR0AVyjDZYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYmYyNjY3MGYtMjk3MC0z MzVmLWI0ZjQtNmE0ZGQ0ZTBhNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh YjgxMDE3NWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHyEqu7BoqEHDPlXMHttrd7fTKUxs3YpPywRrEapSCBmdXdTqD7iM4ta XcyaGzJ1FbgJoBGXzDQUsiY+qXs0fFcuVcQCCSzfJE/tkiiEwzhM/JZiOKa51GVB v6nLwsjBs/IgED1nJHqhhNjLkWIUwPtiE6Zb9n28brrm7IH9ks/LVDbtdq/PBcTE xWAqhauqjEN2A4M9xT7v9JCEvnn+mgQg7NYIEUntknJnnM4BzxhxbK1+aCqK4tJp FLBPzHvorf7m1agAZQi5UCJyWfNEQ5YVqYHteOC2wcBed0GBcDVnIl9H7lP2xjvz ZpQbi6/pSW0LwtNaFC3wSHhdFxvXq5Q= -----END CERTIFICATE-----Generated at Fri Apr 17 14:24:35 2026 by rpki-client