$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa File: 6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa (raw, json) Hash identifier: uumF5E8VqFK248ZFgTMnKMw5KunQ0w6nX+JCs3YR+TE= Subject key identifier: A9:A5:39:6E:3C:02:25:E5:B8:D8:95:BF:C3:CD:3A:47:5C:45:3A:56 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E11B42788E99888FDB2AC6A80 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 16509 IP address blocks: 161.107.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:27:88:e9:98:88:fd:b2:ac:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=c33ebf8b-3900-4dc2-9463-aea06008be12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:97:5b:2f:c4:4c:64:9c:5c:ba:b3:7e:2c:d1: 54:f3:de:cd:d7:3c:80:10:74:15:a2:c7:cb:6c:3b: 5b:d2:e1:4b:d7:de:c6:d9:68:f5:ed:43:07:51:4e: 0a:63:42:b0:41:c2:c7:fc:d8:c9:cb:e5:7b:3b:39: 35:0b:b9:22:b5:73:85:90:d4:1f:7c:da:0a:30:4a: 87:73:bb:8f:6c:49:7f:f7:18:c1:ac:0a:65:e3:8d: d5:93:b8:12:62:83:e9:f9:09:d3:a3:7b:37:45:af: 06:50:1f:ac:26:cc:71:2f:96:e9:b5:fd:9a:41:e7: bc:56:f5:e5:d1:41:18:e9:6c:64:4d:fd:19:94:68: 51:d0:34:61:e3:f6:81:ce:70:33:fe:1f:c0:94:2e: 39:c4:46:bc:ff:7c:df:ea:33:ef:76:02:5c:09:ce: ab:63:ea:99:e4:ed:41:d2:25:33:91:40:6c:93:6d: 2f:97:8a:a1:f5:6c:89:ff:72:0f:d8:19:54:47:63: 3a:7c:34:59:a2:fc:42:dc:0e:cc:a4:b3:de:b9:d3: ac:52:40:63:26:bd:23:ce:50:06:3c:c8:f1:53:21: 97:7f:2d:91:37:ff:11:e4:d7:c7:29:cd:74:2e:cf: b9:de:61:b7:d8:e3:12:c5:80:0d:d0:24:d9:a0:60: 22:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A5:39:6E:3C:02:25:E5:B8:D8:95:BF:C3:CD:3A:47:5C:45:3A:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6b005c9e-b6a1-3485-878a-a7c273ad05bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:c5:f9:51:a1:20:24:fa:c0:04:57:ac:db:1d:91:72:cf:6b: 3d:c6:6e:0b:c6:88:64:a9:85:35:0e:3b:c0:dd:38:30:7c:3b: 29:11:a2:36:38:a0:7b:2f:2d:7d:89:c9:1b:f4:cd:81:b9:5e: 40:57:86:93:74:c4:06:6f:fa:08:3a:fa:3b:e6:f8:ad:70:a8: c3:66:11:1b:3e:06:d3:3a:51:1a:60:84:b3:a8:6f:b7:ca:72: f0:3b:f3:ed:2b:e0:2f:53:51:f0:47:97:c8:57:10:e8:56:18: ad:cd:a7:ec:6e:92:9e:ef:44:04:dd:54:f0:9b:37:de:2d:ba: 4c:fa:f3:df:ce:a1:c2:1a:c1:4d:7b:b3:f6:86:5f:c5:2b:9f: 07:ca:37:9f:9b:03:88:80:7a:66:eb:8c:b7:73:66:9b:f2:7a: 72:0d:c2:9b:6f:e4:94:41:49:44:3a:7a:dc:04:61:3b:fd:94: e1:d8:31:1c:aa:7e:29:f6:71:28:75:96:62:99:dd:c8:65:1b: b0:44:c8:d8:50:7f:eb:f5:b5:d8:e4:5e:99:3a:ed:d6:a1:8a: 8a:8a:c2:b6:23:d9:2a:5a:c3:49:7d:17:cb:83:8b:3a:fe:45: 1e:36:3c:46:46:73:26:ef:68:60:1c:87:74:ea:9f:e0:cc:67: 60:68:c7:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtCeI6ZiI/bKsaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk YzMzZWJmOGItMzkwMC00ZGMyLTk0NjMtYWVhMDYwMDhiZTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpdbL8RMZJxcurN+LNFU897N1zyAEHQVosfL bDtb0uFL197G2Wj17UMHUU4KY0KwQcLH/NjJy+V7Ozk1C7kitXOFkNQffNoKMEqH c7uPbEl/9xjBrApl443Vk7gSYoPp+QnTo3s3Ra8GUB+sJsxxL5bptf2aQee8VvXl 0UEY6WxkTf0ZlGhR0DRh4/aBznAz/h/AlC45xEa8/3zf6jPvdgJcCc6rY+qZ5O1B 0iUzkUBsk20vl4qh9WyJ/3IP2BlUR2M6fDRZovxC3A7MpLPeudOsUkBjJr0jzlAG PMjxUyGXfy2RN/8R5NfHKc10Ls+53mG32OMSxYAN0CTZoGAidwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmlOW48AiXluNiVv8PNOkdcRTpWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNmIwMDVjOWUtYjZhMS0z NDg1LTg3OGEtYTdjMjczYWQwNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7F+VGhICT6wARXrNsdkXLPaz3GbgvGiGSphTUOO8DdODB8OykRojY4 oHsvLX2JyRv0zYG5XkBXhpN0xAZv+gg6+jvm+K1wqMNmERs+BtM6URpghLOob7fK cvA78+0r4C9TUfBHl8hXEOhWGK3Np+xukp7vRATdVPCbN94tukz689/OocIawU17 s/aGX8UrnwfKN5+bA4iAembrjLdzZpvyenINwptv5JRBSUQ6etwEYTv9lOHYMRyq fin2cSh1lmKZ3chlG7BEyNhQf+v1tdjkXpk67dahioqKwrYj2Spaw0l9F8uDizr+ RR42PEZGcybvaGAch3Tqn+DMZ2Box+Q= -----END CERTIFICATE-----Generated at Sat Jun 13 23:29:45 2026 by rpki-client