$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa File: 3ee49716-5be7-3c02-b135-f2c82d1c463e.roa (raw, json) Hash identifier: v/qABqI3okgpVTd4f2P8YH3TwGO0hbpr6c01647AEJA= Subject key identifier: 60:DD:7B:80:59:BE:3A:06:EC:7B:57:C7:D7:4B:05:CD:D0:9A:97:6A Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E11B42BAA886807F3F5CCAF80 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:2b:aa:88:68:07:f3:f5:cc:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=f2d6233a-479c-4225-a3fd-29a8b4f7aeac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:40:a6:5b:ef:11:18:fa:f7:53:4c:71:44:3a: 52:0d:60:ae:0d:1a:22:68:c0:bd:6e:33:67:5e:05: da:04:a6:60:6f:26:08:5d:d3:18:03:5a:1c:8b:64: 0f:c0:23:87:42:33:07:20:d3:2f:7f:c6:b0:f4:3d: 0a:8c:23:07:28:b8:22:90:01:50:39:bc:54:88:cb: dd:48:cf:2c:f8:82:55:ed:d5:75:3f:de:f2:b7:a0: a1:05:a2:f4:71:e4:a1:ac:db:ce:8a:ee:df:ca:a6: 68:3a:e9:ed:34:ce:c3:b9:37:60:3f:36:d3:0d:63: ab:29:84:06:d8:e7:e0:c1:ed:c6:1f:60:0d:76:72: a2:65:d3:c9:5c:5a:35:39:2e:f0:b0:3d:83:08:83: b9:2b:55:4e:af:c7:17:a9:54:17:c4:ed:b2:25:da: 07:67:2d:50:88:08:54:d7:28:b6:79:e9:b6:78:ac: 33:b6:8d:be:2c:03:4b:9f:2c:d9:bf:5d:64:d5:4d: 0e:41:d4:46:b8:ea:5e:27:04:89:8f:cf:d8:d9:f7: 46:cb:e3:62:0c:08:f5:bc:0c:f3:0b:c4:a7:db:d6: 20:ed:56:71:40:49:9a:69:6c:d0:11:63:63:42:cb: 9c:7e:3a:6d:4e:e6:d3:a9:b2:2a:25:30:57:9e:4a: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:DD:7B:80:59:BE:3A:06:EC:7B:57:C7:D7:4B:05:CD:D0:9A:97:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f9:39:14:7b:9b:5c:43:5c:82:cf:84:8d:92:f7:e8:7c:8a: e5:6f:b0:b0:82:0a:ff:05:5d:0d:1e:50:14:a4:bc:8c:93:79: 66:8f:8d:79:de:0d:a7:f0:c9:ad:f4:1e:5d:f4:d4:64:d8:99: e4:68:ee:dc:26:e7:97:52:d1:fd:ec:bf:75:81:86:bc:96:1e: 70:e2:82:a5:06:72:0d:58:35:ed:af:61:62:ee:0d:af:5d:44: 4d:28:0c:25:12:7b:3c:2c:16:61:bf:05:22:3f:2c:fd:d6:f1: 16:34:a9:d9:26:11:d9:55:0d:ca:a6:7e:da:7f:6b:98:3b:68: 9f:bb:4f:ce:be:99:41:f9:99:2b:32:b3:96:59:3b:55:f2:c2: 5b:04:4a:d8:d1:b7:46:1f:c8:d1:3f:85:36:28:fa:ae:6f:02: a0:85:14:7b:d7:99:f4:cb:ad:d7:b7:30:a2:1c:0a:f8:24:c0: 5b:3e:d6:5d:07:1b:2f:0e:6e:54:12:a7:b6:b3:40:65:f7:b7: 44:cb:5f:94:29:18:0f:6a:d3:66:85:7f:3d:e8:99:6a:2e:24: 74:b3:b0:63:cb:b2:5d:58:30:4c:78:93:24:27:d2:ba:17:79: 72:c3:af:4b:18:59:ba:80:5b:bd:37:44:cf:77:c5:bb:32:14: b1:97:87:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtCuqiGgH8/XMr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk ZjJkNjIzM2EtNDc5Yy00MjI1LWEzZmQtMjlhOGI0ZjdhZWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjECmW+8RGPr3U0xxRDpSDWCuDRoiaMC9bjNn XgXaBKZgbyYIXdMYA1oci2QPwCOHQjMHINMvf8aw9D0KjCMHKLgikAFQObxUiMvd SM8s+IJV7dV1P97yt6ChBaL0ceShrNvOiu7fyqZoOuntNM7DuTdgPzbTDWOrKYQG 2Ofgwe3GH2ANdnKiZdPJXFo1OS7wsD2DCIO5K1VOr8cXqVQXxO2yJdoHZy1QiAhU 1yi2eem2eKwzto2+LANLnyzZv11k1U0OQdRGuOpeJwSJj8/Y2fdGy+NiDAj1vAzz C8Sn29Yg7VZxQEmaaWzQEWNjQsucfjptTubTqbIqJTBXnkrZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDde4BZvjoG7HtXx9dLBc3QmpdqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvM2VlNDk3MTYtNWJlNy0z YzAyLWIxMzUtZjJjODJkMWM0NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz5ORR7m1xDXILPhI2S9+h8iuVvsLCCCv8FXQ0eUBSkvIyTeWaPjXne Dafwya30Hl301GTYmeRo7twm55dS0f3sv3WBhryWHnDigqUGcg1YNe2vYWLuDa9d RE0oDCUSezwsFmG/BSI/LP3W8RY0qdkmEdlVDcqmftp/a5g7aJ+7T86+mUH5mSsy s5ZZO1XywlsEStjRt0YfyNE/hTYo+q5vAqCFFHvXmfTLrde3MKIcCvgkwFs+1l0H Gy8OblQSp7azQGX3t0TLX5QpGA9q02aFfz3omWouJHSzsGPLsl1YMEx4kyQn0roX eXLDr0sYWbqAW703RM93xbsyFLGXh9g= -----END CERTIFICATE-----Generated at Sat Jun 13 23:22:00 2026 by rpki-client