$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa File: 1d5a3ec4-950e-303d-a621-ef1988db9a14.roa (raw, json) Hash identifier: 94XRxINAZFGYhG7H0O7Z9uGdYIpvB8EYCXgYtxxjQuI= Subject key identifier: 1D:9F:BC:EC:93:BD:18:64:B7:14:6C:ED:97:9D:65:7B:25:78:8F:B6 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584EB41704BBA1BBE2F4E30BBF80 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 17275 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:17:04:bb:a1:bb:e2:f4:e3:0b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=1f47a50e-6871-4b25-a689-9956c5ab8892 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e6:61:46:5d:a2:96:d2:b2:0a:fc:61:8c:57: 12:dd:4b:73:c7:70:7d:ea:f4:2f:e2:9e:5f:ec:1b: f8:1c:c0:7a:0c:cc:b8:96:52:df:02:3f:91:4f:f4: dd:9d:7e:a2:86:91:b7:f9:cf:bf:11:44:48:5e:3b: 11:0e:68:d5:a6:69:3a:7b:cb:4f:3e:ad:70:39:86: 30:cb:89:fd:09:46:9d:e6:75:78:3c:a7:b5:94:21: f8:27:92:78:b7:f4:5b:5e:cd:d9:ce:9b:5f:f9:c1: 60:da:a5:ce:c1:33:23:19:78:39:57:85:ee:aa:42: 3c:40:b4:5e:ff:2c:8e:19:8d:6c:50:44:a4:a0:75: 47:3e:7e:a5:cd:92:df:44:5d:90:f3:a3:c8:88:76: 39:58:59:fa:59:58:2d:f3:e2:38:ab:5d:1e:80:71: d6:1f:c4:8b:50:61:e1:ac:57:8f:5a:e1:f7:26:3e: 71:6b:09:a3:85:15:8e:4d:94:b9:36:16:51:fa:36: d7:bf:df:19:21:39:a7:91:82:c2:89:9f:26:f3:90: 1e:a5:7d:8a:c7:b7:66:41:df:85:4d:c0:1b:01:2c: e7:83:c0:cc:cc:75:e8:7b:f5:2d:b8:5c:95:a4:e0: ee:a1:9c:d6:80:d4:35:32:59:02:d2:4f:55:bc:25: 28:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9F:BC:EC:93:BD:18:64:B7:14:6C:ED:97:9D:65:7B:25:78:8F:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:5b:ec:d6:ff:1e:0a:4a:7c:1b:c9:9c:80:39:40:19:c9:d4: a8:2f:dd:12:4c:f6:b6:64:cd:6c:fd:ee:57:08:03:54:d2:96: 2d:30:d5:45:09:15:61:50:87:61:50:5f:98:0f:1c:19:e9:bd: d0:0f:23:79:81:4e:4d:93:d5:ab:be:0f:eb:40:1b:4f:c6:45: 09:d4:c6:97:e6:96:90:20:6a:68:16:d5:ab:20:80:82:da:f7: e4:41:61:e5:5d:eb:4f:fb:ae:c8:20:28:11:2d:97:46:1a:7e: 52:f1:e4:ca:fa:0c:47:dd:3d:ba:fb:14:41:58:01:eb:58:7d: 1c:69:39:bf:16:e1:3b:c7:f7:bf:e1:ae:b3:2c:9e:60:5e:ed: 15:76:41:ae:0c:a4:e4:53:f2:b2:55:b8:04:4b:a0:e7:ab:04: fb:ac:58:4f:b8:ef:28:3e:5a:cd:1d:1a:67:82:b1:7a:d5:a8: 31:b2:a2:69:80:26:dc:0f:16:7b:52:a4:cc:0e:e1:d0:ae:aa: 4f:46:e1:1f:6b:ea:b5:12:32:2d:20:83:54:d8:78:1f:00:3b: 05:a0:e6:d3:9b:50:47:8d:d6:75:e7:fc:fb:1e:f6:52:84:25: 48:24:a4:bc:de:b1:30:75:09:a5:8b:0f:ec:df:80:87:ce:04: 26:d8:05:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FwS7obvi9OMLv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk MWY0N2E1MGUtNjg3MS00YjI1LWE2ODktOTk1NmM1YWI4ODkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+ZhRl2iltKyCvxhjFcS3Utzx3B96vQv4p5f 7Bv4HMB6DMy4llLfAj+RT/TdnX6ihpG3+c+/EURIXjsRDmjVpmk6e8tPPq1wOYYw y4n9CUad5nV4PKe1lCH4J5J4t/RbXs3Zzptf+cFg2qXOwTMjGXg5V4XuqkI8QLRe /yyOGY1sUESkoHVHPn6lzZLfRF2Q86PIiHY5WFn6WVgt8+I4q10egHHWH8SLUGHh rFePWuH3Jj5xawmjhRWOTZS5NhZR+jbXv98ZITmnkYLCiZ8m85AepX2Kx7dmQd+F TcAbASzng8DMzHXoe/UtuFyVpODuoZzWgNQ1MlkC0k9VvCUoQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB2fvOyTvRhktxRs7ZedZXsleI+2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMWQ1YTNlYzQtOTUwZS0z MDNkLWE2MjEtZWYxOTg4ZGI5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBb7Nb/HgpKfBvJnIA5QBnJ1Kgv3RJM9rZkzWz97lcIA1TSli0w1UUJ FWFQh2FQX5gPHBnpvdAPI3mBTk2T1au+D+tAG0/GRQnUxpfmlpAgamgW1asggILa 9+RBYeVd60/7rsggKBEtl0YaflLx5Mr6DEfdPbr7FEFYAetYfRxpOb8W4TvH97/h rrMsnmBe7RV2Qa4MpORT8rJVuARLoOerBPusWE+47yg+Ws0dGmeCsXrVqDGyommA JtwPFntSpMwO4dCuqk9G4R9r6rUSMi0gg1TYeB8AOwWg5tObUEeN1nXn/Pse9lKE JUgkpLzesTB1CaWLD+zfgIfOBCbYBao= -----END CERTIFICATE-----Generated at Mon Sep 28 21:20:27 2026 by rpki-client