$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa File: 6d9a77e0-b762-3686-a999-6668700e8c1a.roa (raw, json) Hash identifier: iTdsNATHzs+ZmLc5Vo/dEsp3MiM+ePWyVP6rYcWrmOs= Subject key identifier: 25:EE:0E:61:3A:C1:74:62:78:D1:B9:03:EA:59:77:21:FE:58:78:6C Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F457B4B797A2FC7D5BE8100 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa Signing time: Mon 06 Oct 2025 19:02:25 +0000 ROA not before: Mon 06 Oct 2025 19:02:25 +0000 ROA not after: Sun 04 Jan 2026 20:02:25 +0000 asID: 17275 IP address blocks: 161.107.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:45:7b:4b:79:7a:2f:c7:d5:be:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 19:02:25 2025 GMT Not After : Jan 4 20:02:25 2026 GMT Subject: CN=e41c4fa6-875f-43af-adaf-8a08da8bd061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:7c:07:88:37:20:c3:af:bf:a1:dd:6d:10:21: 5c:ec:59:0a:b9:3a:7e:68:46:ab:c3:eb:d1:16:bc: 12:01:67:c3:6b:14:a8:ea:8e:e8:e9:13:f7:62:2f: ee:02:90:af:a0:b1:40:b9:ba:63:85:80:66:9c:4c: 40:ca:18:d9:65:34:36:13:44:11:63:92:12:d8:14: 5a:6e:ee:9a:dc:6d:f6:6a:1e:21:70:88:99:b8:7a: 5f:3e:5a:c5:2f:a7:60:7e:75:3e:a2:1b:0c:55:26: b3:37:93:ed:f6:a6:c3:ff:11:53:11:b2:c4:8b:5b: ce:4c:c7:a9:4a:e3:24:84:02:1e:6b:3c:85:33:32: c2:4a:0f:73:e7:95:1a:26:07:2f:4c:23:4c:47:e4: bb:52:16:00:fb:30:46:4a:b0:64:0c:c5:44:19:98: 07:54:2e:82:07:7c:4e:4e:61:5f:cf:8d:52:7b:bd: 83:ff:94:74:5a:b0:d5:79:a3:78:bc:c3:b2:ee:c7: 21:7b:ca:77:2e:82:65:b6:f2:31:9e:b1:31:1b:d0: 64:41:22:65:1f:b6:35:4f:b0:54:2f:0a:1a:34:69: 54:fb:95:1c:1b:f4:b9:98:2b:12:27:69:08:3a:f8: 27:ed:91:0c:1c:5f:d0:bd:42:21:de:43:e6:d5:aa: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:EE:0E:61:3A:C1:74:62:78:D1:B9:03:EA:59:77:21:FE:58:78:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:1c:22:70:22:8b:7b:4b:f7:0d:61:ff:01:bd:49:48:3f:09: 99:f8:14:b1:29:31:56:a7:a6:d3:ec:d1:51:89:b6:6a:b9:f6: 4f:2c:41:53:fa:20:8b:6c:3e:12:32:73:d5:22:60:ab:d0:9f: 2c:b9:e0:5b:45:7f:bd:f6:ea:b7:fa:23:e2:42:0c:38:09:86: 8a:c0:bb:2b:79:f2:ff:27:df:11:d9:33:35:6b:01:ad:45:dc: 29:84:19:48:4b:82:9b:74:bb:7d:e1:12:e3:f1:1e:88:cb:e5: 2c:a6:3a:bd:db:a5:97:d9:fa:1b:a8:f1:f3:b4:4a:d6:79:91: 89:c1:63:38:02:37:c2:62:a6:92:04:23:40:17:76:76:9a:93: 2c:44:14:77:5f:b8:0a:50:4d:4e:ba:d3:96:81:d4:da:06:5a: 0b:30:c1:8b:68:ba:61:bb:9e:cf:ce:df:fa:5e:6f:61:5b:e0: 76:6c:67:8f:c4:db:c9:20:d4:3a:93:38:a7:31:b9:85:d7:fe: bc:66:82:7a:c0:45:88:bd:a8:df:38:e9:f3:50:4e:ee:8d:de: 54:7a:e4:45:86:e3:39:0b:fc:ab:5e:97:93:56:50:bf:d9:19: d2:68:5e:a2:75:40:dd:61:e1:4d:0f:28:2d:99:da:d5:9c:b6: b2:1f:64:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvRXtLeXovx9W+gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE5MDIyNVoXDTI2MDEwNDIwMDIyNVowLzEtMCsGA1UEAxMk ZTQxYzRmYTYtODc1Zi00M2FmLWFkYWYtOGEwOGRhOGJkMDYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XwHiDcgw6+/od1tECFc7FkKuTp+aEarw+vR FrwSAWfDaxSo6o7o6RP3Yi/uApCvoLFAubpjhYBmnExAyhjZZTQ2E0QRY5IS2BRa bu6a3G32ah4hcIiZuHpfPlrFL6dgfnU+ohsMVSazN5Pt9qbD/xFTEbLEi1vOTMep SuMkhAIeazyFMzLCSg9z55UaJgcvTCNMR+S7UhYA+zBGSrBkDMVEGZgHVC6CB3xO TmFfz41Se72D/5R0WrDVeaN4vMOy7sche8p3LoJltvIxnrExG9BkQSJlH7Y1T7BU LwoaNGlU+5UcG/S5mCsSJ2kIOvgn7ZEMHF/QvUIh3kPm1aqPdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXuDmE6wXRieNG5A+pZdyH+WHhsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNmQ5YTc3ZTAtYjc2Mi0z Njg2LWE5OTktNjY2ODcwMGU4YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAcInAii3tL9w1h/wG9SUg/CZn4FLEpMVanptPs0VGJtmq59k8sQVP6 IItsPhIyc9UiYKvQnyy54FtFf7326rf6I+JCDDgJhorAuyt58v8n3xHZMzVrAa1F 3CmEGUhLgpt0u33hEuPxHojL5SymOr3bpZfZ+huo8fO0StZ5kYnBYzgCN8JippIE I0AXdnaakyxEFHdfuApQTU6605aB1NoGWgswwYtoumG7ns/O3/peb2Fb4HZsZ4/E 28kg1DqTOKcxuYXX/rxmgnrARYi9qN846fNQTu6N3lR65EWG4zkL/Ktel5NWUL/Z GdJoXqJ1QN1h4U0PKC2Z2tWctrIfZBY= -----END CERTIFICATE-----Generated at Wed Nov 5 16:55:55 2025 by rpki-client