$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa File: 8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa (raw, json) Hash identifier: WJ02hsuwH5FD0/5+kf+5JRh8W81R+A1/fV3Ir9mJFc8= Subject key identifier: 9E:5D:1E:95:7A:A8:9A:64:B6:D8:77:83:15:22:E1:04:43:18:75:0F Certificate issuer: /CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Certificate serial: 010D0C9F4328584CF42220893757F621A03F9300 Authority key identifier: 5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa Signing time: Mon 23 Feb 2026 02:00:31 +0000 ROA not before: Mon 23 Feb 2026 02:00:31 +0000 ROA not after: Sun 24 May 2026 01:00:31 +0000 asID: 15830 IP address blocks: 161.250.252.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:f4:22:20:89:37:57:f6:21:a0:3f:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3f86821-4e46-4672-b57e-2fd50dfe628b Validity Not Before: Feb 23 02:00:31 2026 GMT Not After : May 24 01:00:31 2026 GMT Subject: CN=091bc612-d2ff-4879-a049-95481534574a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:55:e5:6c:df:8e:6c:3b:b7:38:1b:8b:43:5a: 17:e4:28:01:20:d2:91:b1:5f:c0:8c:0e:3b:81:73: 54:f9:2d:38:75:88:b0:1a:2f:af:6a:c1:06:b5:dc: 43:94:a2:f8:9e:1d:86:0b:af:2a:83:d0:fc:72:66: c9:06:f5:d7:b9:81:82:5e:8b:3e:a5:7f:61:81:41: 4b:78:15:be:97:62:9b:be:1d:79:cb:69:f2:5a:90: 65:1d:b0:00:b8:e8:23:ff:d4:a3:7d:f0:6e:77:d2: 0c:a9:00:fc:93:b3:73:15:ce:db:20:7a:8a:ec:c8: 9d:ad:66:97:cc:01:bd:73:92:ca:96:74:1f:1a:83: d5:db:71:07:e2:8e:f8:70:79:a9:3d:a5:86:ac:65: 52:9b:76:41:39:77:01:d3:66:85:11:08:86:9d:af: 8c:5a:af:cf:c6:8d:19:c4:c0:de:db:59:80:77:3d: 68:32:0c:a6:bf:fd:21:1c:9d:e8:51:be:d3:21:e7: 0c:24:b1:b1:2e:3a:ef:88:ee:94:be:32:1d:e5:1b: c8:ab:4e:6e:d3:28:62:41:b6:8f:ec:6b:32:3d:da: 7b:2d:72:a4:a5:4f:8f:4d:54:9b:10:6a:60:9e:c6: b6:05:f5:d3:33:3f:42:e4:4f:1a:1d:b7:05:55:87: 0d:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:5D:1E:95:7A:A8:9A:64:B6:D8:77:83:15:22:E1:04:43:18:75:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/8bba4f69-39a3-3a0d-919b-ecc4dc98f5d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b/e3f86821-4e46-4672-b57e-2fd50dfe628b.crl X509v3 Authority Key Identifier: keyid:5D:D5:13:A2:74:93:C5:74:89:5B:12:8A:DA:3A:D5:25:23:E1:97:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e3f86821-4e46-4672-b57e-2fd50dfe628b.cer sbgp-ipAddrBlock: critical IPv4: 161.250.252.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:8d:ca:b0:4e:27:e2:ea:26:86:70:2f:19:79:1b:3d:da:f3: 9d:47:38:91:d0:54:67:b3:10:54:37:86:ec:39:e2:8e:02:57: 35:f9:f1:25:cf:54:9c:5f:36:89:9d:28:eb:6a:7c:74:3c:e2: 41:78:f7:80:7b:99:df:2a:44:17:21:3b:70:02:65:b6:e9:63: fe:60:ed:56:a1:fd:b2:3f:25:6c:8b:32:14:0f:19:2d:32:74: 20:68:a9:f9:05:e7:b2:a6:b4:b9:29:ed:2e:b4:09:48:0a:3a: 9b:92:0b:28:97:f5:67:13:63:4d:1d:92:93:b0:9a:4c:61:d7: 76:01:bd:11:c3:7d:3f:4d:c8:fb:61:9e:8a:7c:b6:e4:00:f3: 78:63:c6:45:e5:a0:5d:79:3f:00:2f:5a:45:c3:16:6d:aa:82: d1:cf:17:df:48:5f:0e:fa:d9:8d:71:a2:af:96:9c:49:f5:23: a4:56:88:90:8a:74:fb:57:4f:81:cc:a5:20:ab:4f:c0:2c:89: 93:14:de:63:db:64:1d:42:5e:23:c0:8f:06:f3:dd:a8:4c:65: 0f:cc:da:9f:2e:cc:e6:e3:15:c8:ec:f7:f4:60:62:90:c8:ab: 6c:45:29:33:e3:b0:fc:a6:1d:5c:9f:dc:b6:c7:83:ee:c2:b7: 80:16:cc:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz0IiCJN1f2IaA/kwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNmODY4MjEtNGU0Ni00NjcyLWI1N2UtMmZkNTBkZmU2 MjhiMB4XDTI2MDIyMzAyMDAzMVoXDTI2MDUyNDAxMDAzMVowLzEtMCsGA1UEAxMk MDkxYmM2MTItZDJmZi00ODc5LWEwNDktOTU0ODE1MzQ1NzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVXlbN+ObDu3OBuLQ1oX5CgBINKRsV/AjA47 gXNU+S04dYiwGi+vasEGtdxDlKL4nh2GC68qg9D8cmbJBvXXuYGCXos+pX9hgUFL eBW+l2Kbvh15y2nyWpBlHbAAuOgj/9SjffBud9IMqQD8k7NzFc7bIHqK7MidrWaX zAG9c5LKlnQfGoPV23EH4o74cHmpPaWGrGVSm3ZBOXcB02aFEQiGna+MWq/Pxo0Z xMDe21mAdz1oMgymv/0hHJ3oUb7TIecMJLGxLjrviO6UvjId5RvIq05u0yhiQbaP 7GsyPdp7LXKkpU+PTVSbEGpgnsa2BfXTMz9C5E8aHbcFVYcN1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5dHpV6qJpktth3gxUi4QRDGHUPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4 NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1MGRmZTYyOGIvOGJiYTRmNjktMzlhMy0z YTBkLTkxOWItZWNjNGRjOThmNWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTNmODY4MjEtNGU0Ni00NjcyLWI1 N2UtMmZkNTBkZmU2MjhiL2UzZjg2ODIxLTRlNDYtNDY3Mi1iNTdlLTJmZDUwZGZl NjI4Yi5jcmwwHwYDVR0jBBgwFoAUXdUTonSTxXSJWxKK2jrVJSPhl2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lM2Y4NjgyMS00ZTQ2LTQ2NzItYjU3ZS0yZmQ1 MGRmZTYyOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCofr8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2NyrBOJ+LqJoZwLxl5Gz3a851HOJHQVGezEFQ3huw54o4CVzX58SXP VJxfNomdKOtqfHQ84kF494B7md8qRBchO3ACZbbpY/5g7Vah/bI/JWyLMhQPGS0y dCBoqfkF57KmtLkp7S60CUgKOpuSCyiX9WcTY00dkpOwmkxh13YBvRHDfT9NyPth nop8tuQA83hjxkXloF15PwAvWkXDFm2qgtHPF99IXw762Y1xoq+WnEn1I6RWiJCK dPtXT4HMpSCrT8AsiZMU3mPbZB1CXiPAjwbz3ahMZQ/M2p8uzObjFcjs9/RgYpDI q2xFKTPjsPymHVyf3LbHg+7Ct4AWzPs= -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:34 2026 by rpki-client