$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa File: 004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa (raw, json) Hash identifier: v35hJ2RQTzuEqMzXLiZjN9uFFMluV65fDJDgopYCrbQ= Subject key identifier: E8:3C:98:77:AE:8F:14:FB:1B:BB:19:49:60:69:A1:CB:66:52:35:2F Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584CAB116F0A4AE7E1E73D0DE5C0 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa Signing time: Tue 27 Jan 2026 21:53:00 +0000 ROA not before: Tue 27 Jan 2026 21:53:00 +0000 ROA not after: Mon 27 Apr 2026 20:53:00 +0000 asID: 396502 IP address blocks: 161.129.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ab:11:6f:0a:4a:e7:e1:e7:3d:0d:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Jan 27 21:53:00 2026 GMT Not After : Apr 27 20:53:00 2026 GMT Subject: CN=6bc4813f-56ef-4447-b5f1-d45285119964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c1:dd:67:93:51:8d:c3:25:8b:70:56:2f:46: 2e:6a:b5:b0:01:7b:09:63:4a:84:03:3a:29:fa:6d: df:8b:98:b3:6d:a4:93:ce:41:09:d6:8f:ab:23:e5: de:d7:af:c2:54:0b:2b:13:03:b7:d2:f0:5c:e9:40: 02:92:93:12:7b:69:0c:26:f0:53:e9:ac:86:96:1f: f5:32:48:d6:35:df:df:0e:5c:51:20:b3:56:59:da: 4b:c6:6f:63:42:b8:31:11:8b:de:b9:49:ff:54:ce: 2d:d1:34:75:32:11:96:9c:8f:61:d8:ae:8b:61:4c: a2:f7:8e:ec:74:c1:86:99:3b:19:3e:f5:4b:8f:12: 86:ef:a8:d3:3f:8b:11:b2:1f:4c:b9:ba:cc:99:96: be:98:83:2d:70:c9:a9:b8:b2:89:06:cb:c9:5e:c0: aa:a8:cc:a8:76:c9:b4:b8:5f:c0:2e:c8:0b:8d:b7: cb:d1:70:ad:d5:2b:9f:3e:fe:5b:9f:21:6b:6d:a2: 03:38:4c:6c:64:ed:d2:99:8d:fe:89:46:e3:e2:3d: 06:93:84:f5:35:e9:46:f4:3f:ca:20:5a:65:ad:82: 1f:c2:17:06:a8:95:24:3e:d6:27:ba:c8:6c:69:bd: 69:03:e0:77:35:64:de:ae:a7:44:74:0f:be:0b:2c: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:3C:98:77:AE:8F:14:FB:1B:BB:19:49:60:69:A1:CB:66:52:35:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/004c393f-6a7b-3ca7-b119-3ff7ea8313a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 161.129.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ef:7b:d0:ce:bf:08:5c:b6:f2:6b:fe:1a:15:2e:a6:cd:95: a5:24:b9:94:47:ea:8b:a3:3f:05:cc:14:1c:0b:f5:b1:f7:f3: 10:c3:18:8f:0f:44:6d:6c:1c:eb:9a:b4:d7:35:11:bc:12:2e: 9c:12:ab:7a:e9:b3:e3:91:1b:9b:9b:4f:b5:ab:70:e3:4a:b2: ed:02:da:ac:0a:1f:4b:be:88:66:d6:d4:26:26:28:01:f7:88: 8e:36:88:be:de:05:4f:fd:38:8f:37:e8:0a:ed:44:28:13:74: 89:09:24:8f:c4:7b:6e:45:2e:e8:7e:d1:38:71:3e:b0:00:25: 48:32:d5:68:5f:ee:f8:fb:5a:0b:a0:1b:54:6d:ce:20:bc:30: 4d:78:b7:b2:a8:67:17:f7:c5:70:40:1e:49:a4:28:f3:62:6a: 15:06:24:cd:11:b6:81:ec:b9:a0:b4:67:62:8f:b8:a5:d5:cc: df:8d:4c:cd:f6:ba:0e:29:87:ff:ff:59:c9:52:28:c5:76:45: b1:6c:c7:e1:91:8c:5d:b1:fc:81:0f:21:2e:e6:cc:d8:27:02: e8:14:29:d1:7d:0c:a7:73:f8:fb:3c:e8:ba:fd:f2:ca:e9:37: 16:99:7a:82:4f:09:69:ae:a5:b2:d8:c8:8e:69:09:f9:99:79: c2:41:14:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyrEW8KSufh5z0N5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDEyNzIxNTMwMFoXDTI2MDQyNzIwNTMwMFowLzEtMCsGA1UEAxMk NmJjNDgxM2YtNTZlZi00NDQ3LWI1ZjEtZDQ1Mjg1MTE5OTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcHdZ5NRjcMli3BWL0YuarWwAXsJY0qEAzop +m3fi5izbaSTzkEJ1o+rI+Xe16/CVAsrEwO30vBc6UACkpMSe2kMJvBT6ayGlh/1 MkjWNd/fDlxRILNWWdpLxm9jQrgxEYveuUn/VM4t0TR1MhGWnI9h2K6LYUyi947s dMGGmTsZPvVLjxKG76jTP4sRsh9MubrMmZa+mIMtcMmpuLKJBsvJXsCqqMyodsm0 uF/ALsgLjbfL0XCt1SufPv5bnyFrbaIDOExsZO3SmY3+iUbj4j0Gk4T1NelG9D/K IFplrYIfwhcGqJUkPtYnushsab1pA+B3NWTerqdEdA++CywLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOg8mHeujxT7G7sZSWBpoctmUjUvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvMDA0YzM5M2YtNmE3Yi0z Y2E3LWIxMTktM2ZmN2VhODMxM2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoYFMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzve9DOvwhctvJr/hoVLqbNlaUkuZRH6oujPwXMFBwL9bH38xDDGI8P RG1sHOuatNc1EbwSLpwSq3rps+ORG5ubT7WrcONKsu0C2qwKH0u+iGbW1CYmKAH3 iI42iL7eBU/9OI836ArtRCgTdIkJJI/Ee25FLuh+0ThxPrAAJUgy1Whf7vj7Wgug G1RtziC8ME14t7KoZxf3xXBAHkmkKPNiahUGJM0RtoHsuaC0Z2KPuKXVzN+NTM32 ug4ph///WclSKMV2RbFsx+GRjF2x/IEPIS7mzNgnAugUKdF9DKdz+Ps86Lr98srp NxaZeoJPCWmupbLYyI5pCfmZecJBFME= -----END CERTIFICATE-----Generated at Mon Mar 2 13:43:39 2026 by rpki-client