$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa File: a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa (raw, json) Hash identifier: 7yiC9sMNQi+nTIXifNRXDDbbOz+cqSRWECPaJyBABJM= Subject key identifier: 8E:B9:68:9E:07:3A:9B:02:4A:CC:B9:DF:51:D7:87:22:2E:E8:32:07 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584D83CB09453A114B1100142E0C Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa Signing time: Wed 15 Apr 2026 13:00:30 +0000 ROA not before: Wed 15 Apr 2026 13:00:30 +0000 ROA not after: Tue 14 Jul 2026 13:00:30 +0000 asID: 14298 IP address blocks: 161.80.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:83:cb:09:45:3a:11:4b:11:00:14:2e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Apr 15 13:00:30 2026 GMT Not After : Jul 14 13:00:30 2026 GMT Subject: CN=7b86b3de-951b-4a26-93e1-1b617da83073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:66:19:11:62:a0:75:38:94:fe:f9:e4:40:61: 48:57:08:5a:a7:76:18:cb:31:27:f0:29:da:85:a9: f5:ba:3c:79:76:ae:b9:ce:25:41:82:8f:0b:26:f5: 28:c6:22:3a:df:3f:61:03:28:b4:e9:2f:84:4e:28: b2:89:d7:83:69:c4:a9:75:9b:d0:5c:26:c6:f0:29: 9d:36:0a:bf:95:24:ef:eb:1d:ba:fe:78:00:13:45: 34:93:79:6d:ea:ab:fc:e7:73:d8:5a:fd:ce:a3:31: c0:da:c5:23:82:1b:21:80:a3:27:bf:f2:ec:af:01: 30:24:44:7c:c9:59:29:53:14:db:a2:60:d5:bc:e3: c3:39:ef:74:fd:46:ee:ff:75:30:72:6f:c7:f8:07: a5:ff:77:43:49:c9:b4:e5:75:ad:ab:99:61:c6:50: e5:ac:1d:f6:32:02:46:91:2e:cd:81:6d:54:35:6b: 77:73:44:56:f2:aa:19:ef:62:ee:7d:11:42:b2:33: ca:ec:00:85:e0:84:8f:85:ef:a5:c1:8e:26:aa:7f: 19:c9:dd:2f:df:42:57:f1:f4:e3:8c:e0:c1:b6:9a: 61:1d:4b:a3:ce:72:50:dd:05:ca:9c:f7:74:aa:d2: cb:0f:72:32:ed:d3:cb:c5:2a:e6:d8:51:13:c4:aa: 0f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:68:9E:07:3A:9B:02:4A:CC:B9:DF:51:D7:87:22:2E:E8:32:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/a07c2d88-4a40-3a36-a8a5-18d831c9d360.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 161.80.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:59:dc:08:23:3b:99:d9:87:e8:74:c2:d7:5a:78:35:b7:78: 3a:dc:3f:ec:5c:ac:86:2d:2e:82:7a:00:22:81:93:fe:84:b7: a4:e6:82:ac:26:a9:e8:0c:c5:8b:e7:ba:7b:9b:f5:ae:95:c9: ee:88:c1:07:ed:bd:02:59:a8:6d:70:80:f0:a3:0c:4e:05:09: 0d:dc:6f:a7:5f:36:6a:1e:26:99:d7:9b:d3:34:2a:c8:9a:85: c2:5d:ac:be:c6:3f:d3:51:26:e4:b2:60:74:6d:26:6a:be:99: 7c:d7:76:0a:13:96:38:7f:8a:3b:e1:63:0f:c6:3d:35:af:4e: 64:e2:10:64:66:81:76:1b:b8:b2:99:72:c9:3f:d0:86:11:99: 39:1a:aa:5e:c9:54:ff:7b:ad:be:06:51:dd:e4:1d:38:33:49: 89:03:ef:f6:b9:61:1c:dc:37:d2:0f:67:5a:b6:cf:27:59:bf: 5b:4f:18:ab:b0:04:c4:72:a3:ea:bb:fc:f0:a9:be:54:b1:dc: 39:c7:df:02:f0:d0:e2:e4:3d:60:f4:5e:f7:7d:e8:cf:a9:e7: 1a:b3:cd:f8:d5:88:95:cd:dc:2a:cd:af:9f:7c:bb:cf:bd:e8: c8:79:30:bb:7e:86:a8:0b:56:60:e4:ae:7a:05:d2:37:07:bf: ad:af:a3:3a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE2DywlFOhFLEQAULgwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk N2I4NmIzZGUtOTUxYi00YTI2LTkzZTEtMWI2MTdkYTgzMDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomYZEWKgdTiU/vnkQGFIVwhap3YYyzEn8Cna han1ujx5dq65ziVBgo8LJvUoxiI63z9hAyi06S+ETiiyideDacSpdZvQXCbG8Cmd Ngq/lSTv6x26/ngAE0U0k3lt6qv853PYWv3OozHA2sUjghshgKMnv/LsrwEwJER8 yVkpUxTbomDVvOPDOe90/Ubu/3Uwcm/H+Ael/3dDScm05XWtq5lhxlDlrB32MgJG kS7NgW1UNWt3c0RW8qoZ72LufRFCsjPK7ACF4ISPhe+lwY4mqn8Zyd0v30JX8fTj jODBtpphHUujznJQ3QXKnPd0qtLLD3Iy7dPLxSrm2FETxKoPGQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFI65aJ4HOpsCSsy531HXhyIu6DIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvYTA3YzJkODgtNGE0MC0z YTM2LWE4YTUtMThkODMxYzlkMzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoVAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAllncCCM7mdmH6HTC11p4Nbd4Otw/7Fyshi0ugnoAIoGT/oS3pOaCrCap 6AzFi+e6e5v1rpXJ7ojBB+29AlmobXCA8KMMTgUJDdxvp182ah4mmdeb0zQqyJqF wl2svsY/01Em5LJgdG0mar6ZfNd2ChOWOH+KO+FjD8Y9Na9OZOIQZGaBdhu4sply yT/QhhGZORqqXslU/3utvgZR3eQdODNJiQPv9rlhHNw30g9nWrbPJ1m/W08Yq7AE xHKj6rv88Km+VLHcOcffAvDQ4uQ9YPRe933oz6nnGrPN+NWIlc3cKs2vn3y7z73o yHkwu36GqAtWYOSuegXSNwe/ra+jOg== -----END CERTIFICATE-----Generated at Fri Apr 17 08:01:27 2026 by rpki-client