$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa File: bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa (raw, json) Hash identifier: 8kfn8RFEzcKHsNbTPXym1/xqTHcPIWXnJB02Qd+A2V0= Subject key identifier: 9D:5D:31:BC:4F:1E:B9:A0:EB:96:FE:FF:F6:F2:09:62:E0:6A:09:E1 Certificate issuer: /CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Certificate serial: 010D0C9F4328584CF8523E3C3A2561F6E3E68520 Authority key identifier: 5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa Signing time: Tue 24 Feb 2026 14:00:41 +0000 ROA not before: Tue 24 Feb 2026 14:00:41 +0000 ROA not after: Mon 25 May 2026 13:00:41 +0000 asID: 16509 IP address blocks: 161.69.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f8:52:3e:3c:3a:25:61:f6:e3:e6:85:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a5c7d3b-8764-449f-9702-1c6dcb66b3b7 Validity Not Before: Feb 24 14:00:41 2026 GMT Not After : May 25 13:00:41 2026 GMT Subject: CN=4c16477c-c3dc-49bb-94db-c1dc3d9ccc23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:bc:36:99:26:df:9b:63:70:1e:f6:19:fe:ca: d9:ea:66:87:71:9d:cf:06:d9:8d:68:a5:76:d1:61: 65:b5:19:c4:02:8c:e3:9c:24:98:a6:bd:b6:db:37: fb:41:98:63:8d:10:4c:53:9b:ce:12:0a:07:1b:b7: 77:07:4c:95:5e:25:bd:2b:90:73:24:9f:6e:13:c2: 11:ff:06:9d:c3:26:8a:e9:4b:0e:03:32:32:1f:60: 3b:32:4f:a4:99:9a:b2:38:01:6d:36:35:d5:6f:e0: 07:ed:25:12:f2:85:df:c0:08:d5:53:18:fd:38:9c: 05:f8:b4:ea:5f:eb:7f:ea:3b:39:c8:28:b6:9c:a2: 9d:90:32:fc:ee:9f:0c:f9:81:e7:40:f4:8b:99:17: 3e:51:63:1c:2e:c1:76:0d:db:28:3c:6f:1d:21:26: 1f:7f:50:0c:a6:d7:30:f9:e4:2e:01:0a:35:82:00: 97:6c:8b:d5:cf:5b:ff:cb:7f:d1:51:c9:74:fb:f8: 62:ed:ad:c1:fd:9c:ea:16:50:eb:75:57:85:dd:45: 47:fc:3e:e2:3f:da:8e:91:2f:cd:32:ed:b7:ac:5b: 38:bc:b2:68:ff:4e:fd:b7:fa:94:49:f2:4f:67:2a: c2:e8:62:34:af:db:c5:48:35:46:0f:8a:80:8c:d4: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:5D:31:BC:4F:1E:B9:A0:EB:96:FE:FF:F6:F2:09:62:E0:6A:09:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/bc68f8c2-a4d4-37b1-aea3-7f42522ddc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.crl X509v3 Authority Key Identifier: keyid:5C:52:52:7F:B6:E1:3E:EB:94:75:56:AB:3E:FC:9D:8A:40:16:0B:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8a5c7d3b-8764-449f-9702-1c6dcb66b3b7.cer sbgp-ipAddrBlock: critical IPv4: 161.69.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:2f:66:a6:1f:13:9b:eb:95:56:52:3c:7a:9c:1e:50:fd:e7: 37:69:66:4c:26:02:b0:23:4c:6b:c9:b7:05:e5:31:48:c0:e5: 53:9a:73:8a:a9:34:c4:cb:b9:66:5e:81:47:b3:22:fc:b4:fe: 40:5f:8a:be:d9:1b:57:b8:c6:9e:71:7e:f3:e6:dc:27:bf:5e: 79:c0:e2:f8:01:b6:0e:33:57:21:9a:76:72:1b:41:04:7a:6c: 11:54:f1:18:b9:d2:b9:a0:1d:8f:4a:4e:ab:40:15:04:67:f7: 4a:7b:a3:b6:dc:ed:ee:0e:07:09:38:9c:53:27:66:8a:72:6d: 89:28:96:ad:40:0c:d0:32:67:e8:c3:16:c2:8f:cb:73:50:35: df:a1:38:bf:a4:7b:11:ea:25:ec:cb:44:1b:d0:8b:da:b1:66: 80:ca:f9:b2:1a:99:74:c6:e0:f0:bc:da:58:b2:32:51:e1:c5: 6a:0d:1e:d6:23:5a:95:10:f1:dc:d3:d5:3f:01:fc:e0:46:45: 01:da:33:2a:cd:84:78:21:a5:0c:9c:9e:64:29:30:7e:ed:09: 4a:be:94:6c:72:84:3c:f8:3a:a1:a6:cf:30:6c:08:70:56:fb: f0:89:ab:c1:a7:8b:22:18:64:cd:c8:fa:cd:4e:a8:62:d6:11: a9:9d:ed:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz4Uj48OiVh9uPmhSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE1YzdkM2ItODc2NC00NDlmLTk3MDItMWM2ZGNiNjZi M2I3MB4XDTI2MDIyNDE0MDA0MVoXDTI2MDUyNTEzMDA0MVowLzEtMCsGA1UEAxMk NGMxNjQ3N2MtYzNkYy00OWJiLTk0ZGItYzFkYzNkOWNjYzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7w2mSbfm2NwHvYZ/srZ6maHcZ3PBtmNaKV2 0WFltRnEAozjnCSYpr222zf7QZhjjRBMU5vOEgoHG7d3B0yVXiW9K5BzJJ9uE8IR /wadwyaK6UsOAzIyH2A7Mk+kmZqyOAFtNjXVb+AH7SUS8oXfwAjVUxj9OJwF+LTq X+t/6js5yCi2nKKdkDL87p8M+YHnQPSLmRc+UWMcLsF2DdsoPG8dISYff1AMptcw +eQuAQo1ggCXbIvVz1v/y3/RUcl0+/hi7a3B/ZzqFlDrdVeF3UVH/D7iP9qOkS/N Mu23rFs4vLJo/079t/qUSfJPZyrC6GI0r9vFSDVGD4qAjNQvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1dMbxPHrmg65b+//byCWLgagnhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVj N2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZkY2I2NmIzYjcvYmM2OGY4YzItYTRkNC0z N2IxLWFlYTMtN2Y0MjUyMmRkYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGE1YzdkM2ItODc2NC00NDlmLTk3 MDItMWM2ZGNiNjZiM2I3LzhhNWM3ZDNiLTg3NjQtNDQ5Zi05NzAyLTFjNmRjYjY2 YjNiNy5jcmwwHwYDVR0jBBgwFoAUXFJSf7bhPuuUdVarPvydikAWC2MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84YTVjN2QzYi04NzY0LTQ0OWYtOTcwMi0xYzZk Y2I2NmIzYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoUUKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAvZqYfE5vrlVZSPHqcHlD95zdpZkwmArAjTGvJtwXlMUjA5VOac4qp NMTLuWZegUezIvy0/kBfir7ZG1e4xp5xfvPm3Ce/XnnA4vgBtg4zVyGadnIbQQR6 bBFU8Ri50rmgHY9KTqtAFQRn90p7o7bc7e4OBwk4nFMnZopybYkolq1ADNAyZ+jD FsKPy3NQNd+hOL+kexHqJezLRBvQi9qxZoDK+bIamXTG4PC82liyMlHhxWoNHtYj WpUQ8dzT1T8B/OBGRQHaMyrNhHghpQycnmQpMH7tCUq+lGxyhDz4OqGmzzBsCHBW +/CJq8GniyIYZM3I+s1OqGLWEamd7eE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:52:59 2026 by rpki-client