$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa File: 0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa (raw, json) Hash identifier: hm8OZO5qlhiTzNX/XUMcM1KrrjRulEeS/RDvVJ6CEak= Subject key identifier: FD:A4:41:E7:74:82:C0:50:95:E1:02:25:5C:77:D5:6D:66:8C:C0:D4 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584D7F9A8DF2D240BD726E990D80 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 161.69.32.0/22 maxlen: 24 161.69.48.0/23 maxlen: 24 161.69.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:8d:f2:d2:40:bd:72:6e:99:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=df6e4abc-0ec5-4dc8-8498-e0ea642545b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:10:c6:59:cb:1f:22:5f:49:39:57:70:49:78: 5f:fc:45:aa:0d:99:37:d4:d1:49:ef:2b:97:d6:86: 39:65:af:4a:07:58:93:ff:17:2c:ae:9c:6b:d9:fa: 21:4c:22:34:29:82:b6:4a:0f:17:21:02:88:ed:be: 6c:2c:cf:56:bc:91:0b:62:5b:bf:4a:9f:9d:85:63: b7:3f:94:22:56:40:65:81:f7:e7:df:3b:be:b0:a4: 43:08:5d:f4:59:b2:4d:ba:9b:57:0a:83:0b:24:67: 97:b9:a1:70:3a:d6:fd:d4:16:df:4e:ef:d8:32:ea: 1f:40:a9:49:12:86:c8:ae:49:ff:93:5f:84:fb:de: 73:9c:25:c9:8d:9c:fd:20:24:12:6b:d0:d2:a9:5d: 59:24:86:51:29:94:01:11:7e:80:85:bf:14:32:49: 10:9f:7b:44:b0:5e:87:a7:22:83:2a:30:78:9a:c7: 6c:5d:3f:a9:4c:37:a2:0a:0a:4b:47:95:cd:3a:da: a8:3b:7c:d2:2b:fa:d8:16:de:c1:ed:cf:ff:43:60: e4:aa:1c:19:e3:4f:af:61:f5:f4:58:94:22:d1:c7: 52:4e:44:b1:ca:e6:63:89:0c:ac:84:7d:e3:e9:17: 67:1b:84:9a:02:88:17:5a:15:54:6c:60:95:56:54: 86:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:A4:41:E7:74:82:C0:50:95:E1:02:25:5C:77:D5:6D:66:8C:C0:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/0d4b1a22-9716-3d27-a248-5f62d08a6b0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.32.0/22 161.69.48.0/23 161.69.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:a8:3b:20:68:5c:63:6b:ab:4c:0b:96:06:9e:69:04:a4:33: 9d:1e:31:8d:19:0b:9e:e9:57:e9:e5:8a:d8:87:2d:1a:01:23: d0:a0:d6:59:3f:1c:df:5f:54:27:1a:27:21:3e:58:b2:5e:d6: d3:51:0f:9b:6c:66:fc:0f:a5:cc:17:a8:6c:7d:63:21:1b:35: b2:08:a7:43:67:8f:90:9a:e9:6c:c8:de:a0:8e:39:8c:fc:a3: f8:47:22:81:c4:d7:f5:57:21:2f:c5:68:7f:d1:ff:e8:df:23: 23:ad:17:07:b1:66:38:ce:ea:48:17:09:06:86:ff:7c:77:3d: 66:1a:d2:4b:f6:d3:e5:16:45:55:e2:21:de:b2:7f:77:ed:7f: 1b:71:74:74:d6:75:e3:42:55:80:55:4a:c7:6c:2d:fd:00:42: 26:85:08:f9:66:d9:0f:50:07:89:44:de:95:45:2b:c9:6a:71: 89:cb:52:a4:79:91:66:15:7f:ca:1d:13:b7:83:52:58:29:f3: 87:15:fc:86:9d:c1:90:e2:44:72:3c:9a:c6:86:0e:d1:c2:3a: c9:be:ae:d2:9b:32:fb:33:0f:7d:a2:7e:e9:b4:df:87:f9:3a: 87:ba:37:c1:f1:70:e4:e6:c7:3d:db:e6:88:c9:bd:6e:9c:ec: 2d:0c:cc:c6 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE1/mo3y0kC9cm6ZDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk ZGY2ZTRhYmMtMGVjNS00ZGM4LTg0OTgtZTBlYTY0MjU0NWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRDGWcsfIl9JOVdwSXhf/EWqDZk31NFJ7yuX 1oY5Za9KB1iT/xcsrpxr2fohTCI0KYK2Sg8XIQKI7b5sLM9WvJELYlu/Sp+dhWO3 P5QiVkBlgffn3zu+sKRDCF30WbJNuptXCoMLJGeXuaFwOtb91BbfTu/YMuofQKlJ EobIrkn/k1+E+95znCXJjZz9ICQSa9DSqV1ZJIZRKZQBEX6Ahb8UMkkQn3tEsF6H pyKDKjB4msdsXT+pTDeiCgpLR5XNOtqoO3zSK/rYFt7B7c//Q2DkqhwZ40+vYfX0 WJQi0cdSTkSxyuZjiQyshH3j6RdnG4SaAogXWhVUbGCVVlSGWQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFP2kQed0gsBQleECJVx31W1mjMDUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvMGQ0YjFhMjItOTcxNi0z ZDI3LWEyNDgtNWY2MmQwOGE2YjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCoUUgAwQB oUUwAwQAoUVVMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAHKoOyBoXGNrq0wLlgaeaQSkM50eMY0ZC57pV+nl itiHLRoBI9Cg1lk/HN9fVCcaJyE+WLJe1tNRD5tsZvwPpcwXqGx9YyEbNbIIp0Nn j5Ca6WzI3qCOOYz8o/hHIoHE1/VXIS/FaH/R/+jfIyOtFwexZjjO6kgXCQaG/3x3 PWYa0kv20+UWRVXiId6yf3ftfxtxdHTWdeNCVYBVSsdsLf0AQiaFCPlm2Q9QB4lE 3pVFK8lqcYnLUqR5kWYVf8odE7eDUlgp84cV/IadwZDiRHI8msaGDtHCOsm+rtKb MvszD32ifum034f5Ooe6N8HxcOTmxz3b5ojJvW6c7C0MzMY= -----END CERTIFICATE-----Generated at Fri Apr 17 13:25:17 2026 by rpki-client