$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa File: 877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa (raw, json) Hash identifier: 60XosSL+0R+oZR8ybUd50DW7UdugONL3HJKlHvICGqk= Subject key identifier: BC:46:28:65:30:EA:17:E5:54:A3:E0:4B:1D:C0:BC:69:D6:F6:C8:2E Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E11B42E891A93107B8E27EE40 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa Signing time: Fri 05 Jun 2026 09:00:12 +0000 ROA not before: Fri 05 Jun 2026 09:00:12 +0000 ROA not after: Thu 03 Sep 2026 09:00:12 +0000 asID: 14618 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:11:b4:2e:89:1a:93:10:7b:8e:27:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 5 09:00:12 2026 GMT Not After : Sep 3 09:00:12 2026 GMT Subject: CN=b10d6ea0-f311-4063-ba0d-a46b14a720e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8f:6f:38:83:1d:0c:e3:f6:2e:bc:0b:3e:b6: e7:c7:c3:1a:1b:ef:13:ad:39:bf:42:20:61:c3:bd: 64:9c:1f:f7:f4:dd:36:f9:0a:62:5c:b2:2c:8a:e6: c4:c8:f6:e8:0a:47:b3:5b:47:e8:6b:8c:ef:1b:d0: cf:99:5e:f4:3d:e2:4d:a8:a9:de:17:23:30:e5:94: e6:ea:2a:e3:f8:8d:7a:3c:d5:a6:54:4a:02:7f:7c: 45:a9:50:01:fb:11:18:c6:43:5b:44:15:70:9b:a7: 37:85:d9:ce:65:5f:b9:0d:1c:c8:59:4c:45:6d:8e: 29:01:87:c6:c9:ab:36:68:62:bb:1e:c8:84:5c:8b: 5e:f2:dc:b5:a2:dc:d5:ba:42:3e:c8:ea:8f:8c:2a: 03:f0:ad:85:2d:6d:0d:cf:2a:54:61:df:32:12:bd: db:70:f4:6b:e9:3a:0f:18:9e:2f:5b:88:01:ab:4f: 9d:56:34:5f:8b:bf:e9:b8:15:4e:64:fa:0b:16:f1: 38:b6:d0:90:e1:e5:d2:2c:73:76:df:10:e7:ba:97: 91:59:41:53:d4:77:bc:6c:50:81:de:8e:e3:23:ad: 2a:36:cd:ca:fc:16:bd:d8:89:89:0a:0e:c8:02:c5: 9c:cb:57:6d:04:cc:11:72:63:86:8d:af:94:bd:dd: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:46:28:65:30:EA:17:E5:54:A3:E0:4B:1D:C0:BC:69:D6:F6:C8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6f:90:55:fe:b3:01:53:88:b1:3d:31:9d:8a:dc:02:df:98: 9f:9d:d4:c4:fa:6d:91:1b:76:8b:33:76:7b:ab:25:81:d6:7a: d1:ae:ad:12:cc:0d:ca:62:c5:53:ba:6a:7e:98:d8:54:37:9d: b5:48:5b:00:e1:7e:3c:ad:ed:7f:4b:d2:7c:ee:65:b0:52:46: 2b:02:97:94:9d:27:11:0c:c7:da:d3:44:8f:cb:c1:56:e5:69: aa:82:a5:b7:81:6c:29:07:89:77:66:71:0b:8e:21:c8:d5:c3: 9d:46:53:a6:f7:c3:13:b7:02:f0:65:12:3c:c3:76:c5:35:fe: 80:f7:aa:ea:0f:12:96:ed:55:89:d5:af:5f:7e:2e:6d:7a:a7: 47:2f:c1:10:3e:8f:d0:2f:58:ed:bd:11:13:b9:2b:ea:a6:71: fc:9a:59:dc:c6:3c:c1:28:b1:0d:25:44:a1:1d:ba:f3:bb:a9: c0:e7:cf:29:38:18:4b:43:08:73:95:4e:77:fa:d7:0b:7c:20: db:9b:69:4e:08:d8:d8:95:2e:7a:24:21:79:d5:7f:40:85:1e: e3:70:a3:dd:13:51:82:5f:86:4d:e0:dc:88:54:ef:02:0f:66: fa:c1:1f:17:ad:80:4c:96:ad:4e:c5:66:ea:92:54:01:07:8b: f4:3f:6c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4RtC6JGpMQe44n7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNTA5MDAxMloXDTI2MDkwMzA5MDAxMlowLzEtMCsGA1UEAxMk YjEwZDZlYTAtZjMxMS00MDYzLWJhMGQtYTQ2YjE0YTcyMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj49vOIMdDOP2LrwLPrbnx8MaG+8TrTm/QiBh w71knB/39N02+QpiXLIsiubEyPboCkezW0foa4zvG9DPmV70PeJNqKneFyMw5ZTm 6irj+I16PNWmVEoCf3xFqVAB+xEYxkNbRBVwm6c3hdnOZV+5DRzIWUxFbY4pAYfG yas2aGK7HsiEXIte8ty1otzVukI+yOqPjCoD8K2FLW0NzypUYd8yEr3bcPRr6ToP GJ4vW4gBq0+dVjRfi7/puBVOZPoLFvE4ttCQ4eXSLHN23xDnupeRWUFT1He8bFCB 3o7jI60qNs3K/Ba92ImJCg7IAsWcy1dtBMwRcmOGja+Uvd2mbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLxGKGUw6hflVKPgSx3AvGnW9sguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvODc3YmI3MmEtMTA0Ni0z NmQ1LTgzYzAtY2RiM2ZkM2JhMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBvkFX+swFTiLE9MZ2K3ALfmJ+d1MT6bZEbdoszdnurJYHWetGurRLM DcpixVO6an6Y2FQ3nbVIWwDhfjyt7X9L0nzuZbBSRisCl5SdJxEMx9rTRI/LwVbl aaqCpbeBbCkHiXdmcQuOIcjVw51GU6b3wxO3AvBlEjzDdsU1/oD3quoPEpbtVYnV r19+Lm16p0cvwRA+j9AvWO29ERO5K+qmcfyaWdzGPMEosQ0lRKEduvO7qcDnzyk4 GEtDCHOVTnf61wt8INubaU4I2NiVLnokIXnVf0CFHuNwo90TUYJfhk3g3IhU7wIP ZvrBHxetgEyWrU7FZuqSVAEHi/Q/bDM= -----END CERTIFICATE-----Generated at Sat Jun 13 07:28:42 2026 by rpki-client