$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/18f728d1-017c-3f69-987d-fe90da9152e1.roa File: 18f728d1-017c-3f69-987d-fe90da9152e1.roa (raw, json) Hash identifier: mFbNzahq0Fd28mOfINvpnKE4DhsNAumsakn32ihX0K0= Subject key identifier: FE:A5:32:A7:1E:F7:73:DC:1E:1F:EA:1C:96:C5:D7:9C:5B:1A:9B:51 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584CB6B709AB214EC1C8D3FAB078 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/18f728d1-017c-3f69-987d-fe90da9152e1.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.56.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:09:ab:21:4e:c1:c8:d3:fa:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=932737aa-bbcc-4652-91d4-62607b6c36b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b9:7f:b4:a1:f9:22:77:88:e8:1f:2d:00:3d: 97:50:c1:79:bc:cd:ac:4c:2f:ef:1a:3c:47:7b:c2: ee:dc:f1:90:bb:33:0f:92:f9:df:16:07:56:70:ae: 1b:8d:8e:86:c6:03:59:26:79:f5:a3:4a:25:87:7b: f8:5e:4f:77:6a:88:c0:f9:71:91:39:fd:98:6d:3a: 31:76:91:57:9c:86:8b:e3:ac:b6:7a:87:2c:a6:6f: d0:23:5d:2a:47:ee:36:e9:a2:82:03:47:a6:5d:ab: 9d:0a:24:7a:a1:a2:ff:b1:41:f1:0e:af:ce:1c:a8: a2:b3:b0:7f:aa:af:05:2c:d5:a5:17:e8:71:79:2e: 7f:88:35:4d:b7:9c:27:2b:09:23:91:31:6f:92:10: a3:7e:8d:6c:77:15:bf:8e:a6:bc:12:af:a9:64:5f: 8b:1a:e8:6a:87:94:7d:e1:4b:fe:b5:88:27:ae:49: 43:27:78:5c:58:5f:fa:e9:2c:dd:1a:14:4e:c8:ae: 29:8f:ae:7d:83:5a:27:ee:f1:ea:fe:da:69:dc:2a: b2:21:06:56:bd:f8:17:11:52:f3:f3:63:6d:a9:f6: 6d:51:2a:aa:3b:b3:ec:76:5b:2d:5c:d5:04:31:e7: d7:18:8f:98:b1:0d:48:5f:f7:af:3a:6a:ef:fe:97: 53:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A5:32:A7:1E:F7:73:DC:1E:1F:EA:1C:96:C5:D7:9C:5B:1A:9B:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/18f728d1-017c-3f69-987d-fe90da9152e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.56.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:5d:50:1f:c1:a4:91:2f:18:a1:bb:ce:17:61:24:0d:70:22: 60:02:59:d9:db:42:5c:2f:a1:d0:2a:96:ba:fc:29:b0:3c:db: a9:cc:a6:0c:8a:65:b7:79:19:c3:b4:9e:f7:26:bf:2a:29:bf: 72:90:a6:b5:96:24:5b:be:1d:1d:96:ed:12:e6:ba:9b:4f:32: e1:d9:11:8f:a4:f8:ca:8d:93:95:9a:df:eb:7f:dd:44:ec:d7: 3a:a2:64:83:31:ae:9e:fc:30:a3:1c:70:77:b7:ec:4f:1a:1a: 9e:02:c0:65:a1:cb:c3:3d:13:3e:22:e5:c6:9f:bd:22:cd:29: f6:fd:16:cc:28:90:75:91:59:af:c3:e3:81:9c:83:aa:3d:a1: 0a:32:df:15:4a:bb:23:1a:94:43:e6:04:eb:60:f3:0b:26:f2: 78:bc:cd:8f:12:9b:38:73:e6:5e:9d:20:2c:5c:8a:b2:55:e1: 3e:c8:64:38:14:73:ad:4f:9d:af:cb:90:86:2d:75:1f:d9:e7: dc:77:42:1f:df:a4:e2:dd:d5:64:19:46:e8:83:54:e1:32:83: 39:f0:e1:be:25:cb:30:46:8f:c4:ca:31:06:b6:92:2f:e3:8c: 92:f8:28:f9:99:6c:8f:1f:76:8a:3f:27:74:ec:c1:7d:a6:f0: 8f:df:7a:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy2twmrIU7ByNP6sHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk OTMyNzM3YWEtYmJjYy00NjUyLTkxZDQtNjI2MDdiNmMzNmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLl/tKH5IneI6B8tAD2XUMF5vM2sTC/vGjxH e8Lu3PGQuzMPkvnfFgdWcK4bjY6GxgNZJnn1o0olh3v4Xk93aojA+XGROf2YbTox dpFXnIaL46y2eocspm/QI10qR+426aKCA0emXaudCiR6oaL/sUHxDq/OHKiis7B/ qq8FLNWlF+hxeS5/iDVNt5wnKwkjkTFvkhCjfo1sdxW/jqa8Eq+pZF+LGuhqh5R9 4Uv+tYgnrklDJ3hcWF/66SzdGhROyK4pj659g1on7vHq/tpp3CqyIQZWvfgXEVLz 82NtqfZtUSqqO7PsdlstXNUEMefXGI+YsQ1IX/evOmrv/pdToQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6lMqce93PcHh/qHJbF15xbGptRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMThmNzI4ZDEtMDE3Yy0z ZjY5LTk4N2QtZmU5MGRhOTE1MmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFdUB/BpJEvGKG7zhdhJA1wImACWdnbQlwvodAqlrr8KbA826nMpgyK Zbd5GcO0nvcmvyopv3KQprWWJFu+HR2W7RLmuptPMuHZEY+k+MqNk5Wa3+t/3UTs 1zqiZIMxrp78MKMccHe37E8aGp4CwGWhy8M9Ez4i5cafvSLNKfb9FswokHWRWa/D 44Gcg6o9oQoy3xVKuyMalEPmBOtg8wsm8ni8zY8Smzhz5l6dICxcirJV4T7IZDgU c61Pna/LkIYtdR/Z59x3Qh/fpOLd1WQZRuiDVOEygznw4b4lyzBGj8TKMQa2ki/j jJL4KPmZbI8fdoo/J3TswX2m8I/fepY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:09:39 2026 by rpki-client