$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa File: bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa (raw, json) Hash identifier: fUmCEGvMu0YI/OuNOmpNg/e7XfHugpnR4XyHusUCkFs= Subject key identifier: 8F:1A:50:F9:A8:37:BD:96:6F:EB:44:C0:7E:2E:DF:E2:51:B2:1A:96 Certificate issuer: /CN=aac421ae-305b-4a29-aacc-176ba3fca213 Certificate serial: 010D0C9F4328584C8476D86CC903C8FF8DBF3400 Authority key identifier: 5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa Signing time: Wed 14 Jan 2026 02:00:31 +0000 ROA not before: Wed 14 Jan 2026 02:00:31 +0000 ROA not after: Tue 14 Apr 2026 01:00:31 +0000 asID: 16509 IP address blocks: 168.100.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:84:76:d8:6c:c9:03:c8:ff:8d:bf:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aac421ae-305b-4a29-aacc-176ba3fca213 Validity Not Before: Jan 14 02:00:31 2026 GMT Not After : Apr 14 01:00:31 2026 GMT Subject: CN=ae4e71be-428f-4a09-8711-5b101c531ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a0:18:b2:55:cc:f5:61:fc:b0:5e:b2:1e:8e: 5c:5c:a6:d6:ce:f0:05:6d:5d:29:3c:fb:c5:08:6e: e4:63:97:0a:f8:07:14:e8:cd:7d:92:5f:36:59:40: 5d:5d:18:5f:c3:37:b2:30:76:b5:3d:c0:49:1c:65: 57:2e:79:0b:75:c9:c9:eb:80:bd:f4:77:6f:b2:e6: 37:40:ed:62:68:28:e4:a8:05:53:ee:f5:e1:61:e8: a6:e4:a3:0b:39:73:2b:b7:fb:0a:40:f0:a3:97:c9: 4b:3a:09:ed:02:ae:62:bd:2c:e0:3f:f1:86:34:d9: e9:d1:2a:16:c8:f2:21:04:3b:b5:f5:43:3b:4e:fd: 9d:f6:78:25:d2:43:67:a4:2e:4a:3e:82:48:a7:ba: 7b:09:9c:30:9b:ff:c9:95:f0:03:50:72:50:71:ac: eb:b8:09:3d:92:74:4f:13:84:4b:f1:e6:14:10:e3: d5:c0:90:ac:ad:08:f1:13:4e:cb:99:44:1c:53:82: 3e:f0:1c:9e:f5:f4:dc:74:c5:2b:08:4f:d9:4a:cd: 2c:a3:33:81:57:55:58:83:4d:c7:28:d1:25:a6:dd: 6a:cc:66:30:aa:60:30:8b:27:d5:96:47:2e:80:ad: 6c:a2:d7:6a:7b:37:b0:e5:11:f6:37:21:6b:9e:41: d1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:1A:50:F9:A8:37:BD:96:6F:EB:44:C0:7E:2E:DF:E2:51:B2:1A:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/bec8a2c6-c874-3b7c-80fa-023312a2c3f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213/aac421ae-305b-4a29-aacc-176ba3fca213.crl X509v3 Authority Key Identifier: keyid:5C:F8:52:57:6A:57:D7:76:93:A0:7F:F6:79:30:F4:25:5A:72:1E:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aac421ae-305b-4a29-aacc-176ba3fca213.cer sbgp-ipAddrBlock: critical IPv4: 168.100.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:88:6d:fb:f6:a3:5a:7f:82:5a:4f:49:59:09:f7:15:f8:a6: 41:93:25:35:8a:97:55:8a:66:ff:97:21:8d:ea:08:4d:3e:b1: 4d:44:c1:13:5e:8d:80:84:ec:60:a8:bf:83:a6:be:9e:49:e4: b8:0c:c6:72:f8:ca:be:ea:9e:83:31:4d:0a:d8:43:ee:b7:e4: 85:68:49:71:da:55:eb:19:10:26:2b:82:8d:ac:53:a1:b7:0b: 92:bc:bb:e0:4a:c7:ae:bb:e6:8c:fb:24:5f:38:a6:69:0f:9b: 38:41:1c:54:58:4f:31:b0:95:31:f4:43:90:4c:54:06:87:db: ad:8f:e6:a0:f9:9c:d3:80:86:8a:42:3b:2c:13:fc:5a:2e:0b: 90:66:dd:fa:65:0c:49:13:dd:0b:26:1c:b5:e5:13:ee:e5:8c: 0b:e3:f3:2a:64:e5:d2:9d:bc:8c:28:b6:41:f4:55:25:a9:9a: f5:0f:7e:71:ab:bc:39:f4:53:2f:fc:dd:d7:29:d4:50:74:d5: 9f:21:52:27:9b:94:c7:f8:cd:a9:49:4b:95:65:2e:3b:74:45: 66:45:75:50:c2:68:9c:eb:6f:ed:5f:16:e8:7b:9b:e9:c5:8c: 39:e7:25:ea:03:2e:97:55:ec:58:c2:75:74:47:1f:fb:d5:cf: 45:19:5c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyEdthsyQPI/42/NAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjNDIxYWUtMzA1Yi00YTI5LWFhY2MtMTc2YmEzZmNh MjEzMB4XDTI2MDExNDAyMDAzMVoXDTI2MDQxNDAxMDAzMVowLzEtMCsGA1UEAxMk YWU0ZTcxYmUtNDI4Zi00YTA5LTg3MTEtNWIxMDFjNTMxZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaAYslXM9WH8sF6yHo5cXKbWzvAFbV0pPPvF CG7kY5cK+AcU6M19kl82WUBdXRhfwzeyMHa1PcBJHGVXLnkLdcnJ64C99HdvsuY3 QO1iaCjkqAVT7vXhYeim5KMLOXMrt/sKQPCjl8lLOgntAq5ivSzgP/GGNNnp0SoW yPIhBDu19UM7Tv2d9ngl0kNnpC5KPoJIp7p7CZwwm//JlfADUHJQcazruAk9knRP E4RL8eYUEOPVwJCsrQjxE07LmUQcU4I+8Bye9fTcdMUrCE/ZSs0sozOBV1VYg03H KNElpt1qzGYwqmAwiyfVlkcugK1sotdqezew5RH2NyFrnkHRqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8aUPmoN72Wb+tEwH4u3+JRshqWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0 MjFhZS0zMDViLTRhMjktYWFjYy0xNzZiYTNmY2EyMTMvYmVjOGEyYzYtYzg3NC0z YjdjLTgwZmEtMDIzMzEyYTJjM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFjNDIxYWUtMzA1Yi00YTI5LWFh Y2MtMTc2YmEzZmNhMjEzL2FhYzQyMWFlLTMwNWItNGEyOS1hYWNjLTE3NmJhM2Zj YTIxMy5jcmwwHwYDVR0jBBgwFoAUXPhSV2pX13aToH/2eTD0JVpyHogwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWM0MjFhZS0zMDViLTRhMjktYWFjYy0xNzZi YTNmY2EyMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiIbfv2o1p/glpPSVkJ9xX4pkGTJTWKl1WKZv+XIY3qCE0+sU1EwRNe jYCE7GCov4Omvp5J5LgMxnL4yr7qnoMxTQrYQ+635IVoSXHaVesZECYrgo2sU6G3 C5K8u+BKx6675oz7JF84pmkPmzhBHFRYTzGwlTH0Q5BMVAaH262P5qD5nNOAhopC OywT/FouC5Bm3fplDEkT3QsmHLXlE+7ljAvj8ypk5dKdvIwotkH0VSWpmvUPfnGr vDn0Uy/83dcp1FB01Z8hUieblMf4zalJS5VlLjt0RWZFdVDCaJzrb+1fFuh7m+nF jDnnJeoDLpdV7FjCdXRHH/vVz0UZXJI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:00 2026 by rpki-client