$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa File: 3ee49716-5be7-3c02-b135-f2c82d1c463e.roa (raw, json) Hash identifier: 4I/gzEPjLgDXlSqVipSfDUx2XAAY6TvXv7AES95+GaM= Subject key identifier: 12:07:85:33:7B:95:85:2B:2D:82:90:A8:C9:E8:41:67:68:05:7C:7D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B7194A406D2874F4637609260 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa Signing time: Tue 07 Oct 2025 14:53:32 +0000 ROA not before: Tue 07 Oct 2025 14:53:32 +0000 ROA not after: Mon 05 Jan 2026 15:53:32 +0000 asID: 16509 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:94:a4:06:d2:87:4f:46:37:60:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 14:53:32 2025 GMT Not After : Jan 5 15:53:32 2026 GMT Subject: CN=4857e139-24fc-480d-9994-3c8cf6c947cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f4:89:30:28:58:54:d8:62:80:02:e2:b1:94: bf:52:c5:fe:99:ef:b7:35:4a:0a:92:89:a1:30:74: c6:70:26:1b:d2:2d:ed:34:36:62:c9:96:5a:77:55: e9:3b:ff:c5:72:20:36:3b:1f:81:71:c7:20:be:e7: ce:c3:7a:a4:88:31:66:12:43:d6:d3:a2:7c:04:05: 9e:9a:b4:4e:26:59:cd:ab:6b:98:4d:2c:f7:3b:eb: 05:d1:63:c3:7c:8d:63:43:90:1c:f2:ae:da:f3:50: d8:4b:55:ca:01:97:ab:7c:2b:80:05:a5:22:9b:58: 10:b2:4f:35:4c:7e:e8:6f:22:dd:62:3f:49:01:76: dc:e2:a0:f4:58:94:4a:79:7d:fb:6d:2c:16:a9:6e: 8a:e5:70:3c:d8:ab:7f:79:01:d2:fd:a5:b4:24:4a: 19:fb:0c:2d:56:24:d7:14:28:dc:71:06:a2:c1:6b: 06:63:1e:71:3a:40:6e:d3:f3:94:4a:14:a5:74:af: ed:e6:e8:a0:0c:f8:7e:9b:7d:79:76:59:58:41:95: d0:e7:25:0e:d1:8c:07:32:97:4f:f9:48:4c:5b:71: aa:23:0a:b1:a2:f9:43:bd:0b:b8:ad:bb:a4:4c:6b: ec:7f:21:3e:d9:e2:fe:7c:f4:fb:17:c1:90:43:97: 3c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:07:85:33:7B:95:85:2B:2D:82:90:A8:C9:E8:41:67:68:05:7C:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:13:4b:27:5d:a0:a3:23:46:4b:34:4a:be:e9:97:33:c8:40: 93:d1:54:37:19:d4:43:36:db:ee:6e:1c:19:f2:75:7e:e8:8a: 4c:5d:1d:be:f3:5a:2a:46:f0:aa:9a:3a:ac:a8:66:20:f2:ae: 6a:73:81:29:d5:e0:63:bd:ae:0b:d4:6f:18:9f:f6:44:1f:89: 2a:a4:b3:36:f3:8d:e1:27:77:b2:5f:6e:09:00:33:ef:24:4d: e3:0f:58:23:cb:00:b1:c6:85:0b:f3:4f:99:44:4c:59:50:37: 50:c6:3d:2f:0b:d9:8d:c4:59:df:a6:39:f4:e9:82:30:79:65: 76:b1:31:32:67:af:46:40:89:3c:44:49:1b:c8:26:15:ec:ea: 8c:8d:2e:55:50:95:ff:56:e6:28:16:46:71:01:0d:db:f6:a3: 8a:cf:fc:8e:3d:3a:28:e6:1b:3b:54:88:71:17:f8:b3:42:75: e2:7c:f9:05:44:d5:31:53:78:cf:cb:f0:d4:0f:19:c4:d9:53: b4:18:2f:d3:c3:e7:76:ab:e8:40:44:d5:0b:f8:fd:90:9a:f9: 7a:99:f1:42:fc:a6:e0:5d:f8:b0:3b:ce:13:2c:91:45:f2:9e: e9:be:4e:c5:2c:82:43:f0:7e:3a:09:4a:bf:52:5b:69:d0:7d: 60:8d:38:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxlKQG0odPRjdgkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE0NTMzMloXDTI2MDEwNTE1NTMzMlowLzEtMCsGA1UEAxMk NDg1N2UxMzktMjRmYy00ODBkLTk5OTQtM2M4Y2Y2Yzk0N2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/SJMChYVNhigALisZS/UsX+me+3NUoKkomh MHTGcCYb0i3tNDZiyZZad1XpO//FciA2Ox+BcccgvufOw3qkiDFmEkPW06J8BAWe mrROJlnNq2uYTSz3O+sF0WPDfI1jQ5Ac8q7a81DYS1XKAZerfCuABaUim1gQsk81 TH7obyLdYj9JAXbc4qD0WJRKeX37bSwWqW6K5XA82Kt/eQHS/aW0JEoZ+wwtViTX FCjccQaiwWsGYx5xOkBu0/OUShSldK/t5uigDPh+m315dllYQZXQ5yUO0YwHMpdP +UhMW3GqIwqxovlDvQu4rbukTGvsfyE+2eL+fPT7F8GQQ5c8zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBIHhTN7lYUrLYKQqMnoQWdoBXx9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvM2VlNDk3MTYtNWJlNy0z YzAyLWIxMzUtZjJjODJkMWM0NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUTSyddoKMjRks0Sr7plzPIQJPRVDcZ1EM22+5uHBnydX7oikxdHb7z WipG8KqaOqyoZiDyrmpzgSnV4GO9rgvUbxif9kQfiSqkszbzjeEnd7JfbgkAM+8k TeMPWCPLALHGhQvzT5lETFlQN1DGPS8L2Y3EWd+mOfTpgjB5ZXaxMTJnr0ZAiTxE SRvIJhXs6oyNLlVQlf9W5igWRnEBDdv2o4rP/I49OijmGztUiHEX+LNCdeJ8+QVE 1TFTeM/L8NQPGcTZU7QYL9PD53ar6EBE1Qv4/ZCa+XqZ8UL8puBd+LA7zhMskUXy num+TsUsgkPwfjoJSr9SW2nQfWCNODs= -----END CERTIFICATE-----Generated at Wed Nov 5 07:40:36 2025 by rpki-client