$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa File: 4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa (raw, json) Hash identifier: Fz4bT8WBQtcHH0d2kk2lMrVOMjy8oHeyzPGfEHTMeUM= Subject key identifier: 79:49:F8:D4:FB:05:A3:FD:A5:5C:0A:D7:30:27:94:DB:F8:C1:55:0D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584EB416F6A36C41059C43403280 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 17275 IP address blocks: 161.107.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:f6:a3:6c:41:05:9c:43:40:32:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=be39088e-31d1-4321-8c4a-013c6cdb0e41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a5:f5:ae:02:6b:af:d4:77:06:3d:3e:fd:a3: 97:69:eb:7d:05:f6:2a:45:2f:39:28:00:61:d7:16: 62:90:bb:22:81:3b:fc:bb:49:8d:5e:00:a5:4b:da: fe:3b:0d:7c:9d:d1:23:7e:98:45:2d:b1:19:f0:f0: 13:4b:ed:4a:5b:39:a8:2c:3c:89:d4:8d:c9:60:7c: 68:40:a0:cc:66:28:e5:5f:a6:be:13:05:3d:a4:dc: 5c:6c:2f:71:fc:9a:01:2f:37:e0:c1:ca:d9:e1:12: 29:e0:ba:2f:10:52:57:12:cb:21:c5:97:01:84:aa: 07:b8:f9:c4:59:f0:94:b5:42:33:11:b5:fc:f4:3c: a8:16:8c:e6:87:d9:bf:ec:00:a7:b0:a1:ce:87:9a: 0f:14:e8:da:83:16:0c:67:e8:1e:9f:09:c9:d3:9e: e1:22:0b:3e:b3:68:91:c3:ca:7c:4b:50:21:6d:41: 6e:9c:76:5c:df:25:d4:92:03:32:7e:f4:ea:5a:d6: ab:bc:ba:5b:1a:71:6e:9b:e9:d4:06:b9:c4:07:31: fd:7f:25:ae:5b:67:c3:a2:96:12:88:6e:b1:0a:f6: b8:4b:b8:71:82:2d:e5:69:b5:33:50:87:44:cc:16: be:29:70:3c:e1:b0:34:b1:88:db:8d:19:af:22:1d: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:49:F8:D4:FB:05:A3:FD:A5:5C:0A:D7:30:27:94:DB:F8:C1:55:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:81:e0:a2:f2:19:4c:b1:58:c4:ff:48:c2:ff:81:6e:c0:87: 95:bf:cf:d1:62:b4:16:54:dc:5f:45:51:99:e0:e1:9d:b2:cc: 6e:1f:bb:a1:da:ef:32:c7:ae:15:ba:29:37:11:19:92:f1:ca: aa:26:f3:f5:a7:ea:e5:b6:d3:e2:92:71:74:2b:dc:80:8a:6c: 70:58:4b:3f:51:e1:bf:b1:ee:ec:1a:f6:03:bf:4b:1b:f2:ea: 1a:f5:61:3b:ab:30:34:3b:a5:7e:b8:fe:01:e8:d8:c8:b8:5b: c5:33:5d:d0:b2:49:17:07:60:9f:de:2c:af:44:ee:ab:87:68: 3d:e7:49:8b:ec:87:70:f6:88:6d:15:b0:de:dd:6a:63:ff:bf: ae:a9:52:5f:79:84:67:db:2d:d3:3c:3c:6e:9a:c6:5b:6f:8f: 98:71:af:47:94:2c:bc:89:68:ee:66:9e:4d:fc:da:9c:09:86: d9:c6:df:90:a0:98:6e:b6:4f:96:74:7d:6a:25:18:11:fb:8e: 2d:dd:3c:a0:da:a2:4f:13:5f:2a:08:06:02:9b:a1:44:a9:96: 0d:23:02:dc:00:6c:de:e3:e0:a4:a1:1b:f9:3e:e4:e8:70:27: 8d:0f:cc:98:2f:fd:78:18:c6:7e:d5:21:5e:9e:49:ed:e5:20: 89:d4:63:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvajbEEFnENAMoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk YmUzOTA4OGUtMzFkMS00MzIxLThjNGEtMDEzYzZjZGIwZTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6X1rgJrr9R3Bj0+/aOXaet9BfYqRS85KABh 1xZikLsigTv8u0mNXgClS9r+Ow18ndEjfphFLbEZ8PATS+1KWzmoLDyJ1I3JYHxo QKDMZijlX6a+EwU9pNxcbC9x/JoBLzfgwcrZ4RIp4LovEFJXEsshxZcBhKoHuPnE WfCUtUIzEbX89DyoFozmh9m/7ACnsKHOh5oPFOjagxYMZ+genwnJ057hIgs+s2iR w8p8S1AhbUFunHZc3yXUkgMyfvTqWtarvLpbGnFum+nUBrnEBzH9fyWuW2fDopYS iG6xCva4S7hxgi3labUzUIdEzBa+KXA84bA0sYjbjRmvIh04MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlJ+NT7BaP9pVwK1zAnlNv4wVUNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNGU1OTFiNWUtNjU4Ny0z ZmI1LWE2ZDgtNWRkZTJiODI3MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOB4KLyGUyxWMT/SML/gW7Ah5W/z9FitBZU3F9FUZng4Z2yzG4fu6Ha 7zLHrhW6KTcRGZLxyqom8/Wn6uW20+KScXQr3ICKbHBYSz9R4b+x7uwa9gO/Sxvy 6hr1YTurMDQ7pX64/gHo2Mi4W8UzXdCySRcHYJ/eLK9E7quHaD3nSYvsh3D2iG0V sN7damP/v66pUl95hGfbLdM8PG6axltvj5hxr0eULLyJaO5mnk382pwJhtnG35Cg mG62T5Z0fWolGBH7ji3dPKDaok8TXyoIBgKboUSplg0jAtwAbN7j4KShG/k+5Ohw J40PzJgv/XgYxn7VIV6eSe3lIInUYxU= -----END CERTIFICATE-----Generated at Fri Sep 25 03:37:23 2026 by rpki-client