$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2eb54bef-4d82-310d-b765-e23ea9bca08c.roa File: 2eb54bef-4d82-310d-b765-e23ea9bca08c.roa (raw, json) Hash identifier: 7q3k52/2gl+amV0Fg3LdisIaHZUiStNlOnQ8ciD1neo= Subject key identifier: 31:77:7B:31:D5:8E:68:16:6C:34:DA:AE:37:8D:D9:03:7C:93:D8:CE Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F436E0380CE48742C419FC0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2eb54bef-4d82-310d-b765-e23ea9bca08c.roa Signing time: Mon 06 Oct 2025 18:58:17 +0000 ROA not before: Mon 06 Oct 2025 18:58:17 +0000 ROA not after: Sun 04 Jan 2026 19:58:17 +0000 asID: 17275 IP address blocks: 161.107.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:43:6e:03:80:ce:48:74:2c:41:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 18:58:17 2025 GMT Not After : Jan 4 19:58:17 2026 GMT Subject: CN=ef93c005-da49-42f3-bd81-e3b70a943c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:d9:82:80:9e:ac:74:b9:91:24:12:62:30: bc:c7:74:6c:af:91:38:a8:25:8f:7d:08:26:27:fa: 34:61:70:b0:55:aa:30:ae:3a:87:8b:af:5c:04:c7: 9c:37:12:bd:9d:82:96:45:62:d0:ee:44:e4:eb:f5: 89:51:a6:29:bd:13:c5:81:17:c3:65:1e:8a:bf:e9: 7b:dd:e7:17:31:2c:9d:60:9a:80:75:c8:0f:3e:22: 5b:25:da:a0:da:32:c9:0f:6a:73:61:52:d8:cc:02: 59:32:84:70:db:32:ba:36:40:72:24:95:4a:66:91: 7a:5c:37:5d:08:8a:ab:fb:fc:ba:83:0c:b8:e3:11: f1:65:c7:6e:54:1f:5f:05:bc:3e:e1:fc:26:b4:89: 9a:0b:78:e6:0e:38:16:05:a6:64:b7:40:4a:2e:79: 8b:6b:83:d2:e5:d1:a6:27:81:c3:f9:37:fa:57:63: 45:24:b1:97:84:e4:bb:5d:e7:95:38:83:a6:2f:fe: 69:80:a1:fb:c9:b1:31:1f:d7:dd:01:f8:37:a6:75: df:82:bd:ca:08:84:65:da:e1:8b:39:2f:25:8d:a2: 9b:ab:1e:b1:5e:dd:8a:4f:f0:09:a2:1b:e8:7d:6e: 82:13:97:5d:a2:e0:7c:5d:ef:1a:bb:5c:1f:25:36: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:7B:31:D5:8E:68:16:6C:34:DA:AE:37:8D:D9:03:7C:93:D8:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2eb54bef-4d82-310d-b765-e23ea9bca08c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:86:cb:d2:55:20:0d:e7:0c:28:1e:b1:fb:de:f6:9e:56:c0: 98:69:a9:a7:e6:7e:f6:9f:5c:de:5b:61:a4:0a:b1:d0:9f:71: 71:02:53:60:4e:2a:96:2e:14:63:42:41:54:21:a8:64:6a:eb: a0:e8:13:1b:b6:1a:dd:1d:cd:6e:79:61:51:11:66:82:10:d2: 88:a3:f2:f5:f6:24:d2:ce:08:33:e9:b4:89:79:7a:f9:07:a8: 70:46:9c:a2:e0:49:93:1b:c1:c4:47:f5:9d:81:f9:81:7e:de: 01:79:7a:90:18:77:1c:e7:04:6d:23:be:a3:1f:2a:b5:cd:74: 37:c5:a1:0b:93:5e:8f:d5:35:e1:45:ed:7f:1f:21:e1:e2:b9: 81:8c:fb:9c:89:fa:08:9f:3f:77:65:da:62:2d:9a:05:03:73: e6:07:b0:18:0f:f2:09:24:f1:3b:33:be:76:5c:fb:6e:1e:0b: f9:67:26:69:47:a8:e9:d9:64:9b:81:39:47:28:38:c3:5f:b6: d9:75:ef:74:10:5b:a4:6a:0f:97:fc:60:b3:57:40:8c:42:f7: 2c:bd:10:1e:2b:75:c4:9b:a5:45:7f:6c:bf:65:68:df:5e:36: a1:fd:be:b5:ed:5b:fc:eb:a9:19:de:ab:d7:a7:71:3c:f5:c0: 82:26:c9:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvQ24DgM5IdCxBn8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE4NTgxN1oXDTI2MDEwNDE5NTgxN1owLzEtMCsGA1UEAxMk ZWY5M2MwMDUtZGE0OS00MmYzLWJkODEtZTNiNzBhOTQzYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg83ZgoCerHS5kSQSYjC8x3Rsr5E4qCWPfQgm J/o0YXCwVaowrjqHi69cBMecNxK9nYKWRWLQ7kTk6/WJUaYpvRPFgRfDZR6Kv+l7 3ecXMSydYJqAdcgPPiJbJdqg2jLJD2pzYVLYzAJZMoRw2zK6NkByJJVKZpF6XDdd CIqr+/y6gwy44xHxZcduVB9fBbw+4fwmtImaC3jmDjgWBaZkt0BKLnmLa4PS5dGm J4HD+Tf6V2NFJLGXhOS7XeeVOIOmL/5pgKH7ybExH9fdAfg3pnXfgr3KCIRl2uGL OS8ljaKbqx6xXt2KT/AJohvofW6CE5ddouB8Xe8au1wfJTaPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF3ezHVjmgWbDTarjeN2QN8k9jOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMmViNTRiZWYtNGQ4Mi0z MTBkLWI3NjUtZTIzZWE5YmNhMDhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoWsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALWGy9JVIA3nDCgesfve9p5WwJhpqafmfvafXN5bYaQKsdCfcXECU2BO KpYuFGNCQVQhqGRq66DoExu2Gt0dzW55YVERZoIQ0oij8vX2JNLOCDPptIl5evkH qHBGnKLgSZMbwcRH9Z2B+YF+3gF5epAYdxznBG0jvqMfKrXNdDfFoQuTXo/VNeFF 7X8fIeHiuYGM+5yJ+gifP3dl2mItmgUDc+YHsBgP8gkk8TszvnZc+24eC/lnJmlH qOnZZJuBOUcoOMNfttl173QQW6RqD5f8YLNXQIxC9yy9EB4rdcSbpUV/bL9laN9e NqH9vrXtW/zrqRneq9encTz1wIImyaQ= -----END CERTIFICATE-----Generated at Wed Nov 5 15:59:56 2025 by rpki-client