$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa File: 979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa (raw, json) Hash identifier: KvFs9gmoWFD6QOXKfKNOVVFj/5i+PtMZaPvsQWKOVrk= Subject key identifier: 06:36:22:9E:5D:C0:BA:A1:4E:0D:51:10:7B:97:B6:EA:A9:AC:1F:25 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E104EE22DEA9F5173BDABB000 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 17275 IP address blocks: 161.107.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:e2:2d:ea:9f:51:73:bd:ab:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=5ba18b33-5f2a-41fc-a2ca-d93109bd533c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a8:a1:45:34:83:11:31:7f:ff:60:68:cf:5d: bc:29:7b:67:9e:3b:d3:07:d7:ec:97:7f:05:be:ae: b1:87:94:f4:30:5a:ec:77:bb:0c:73:b4:c2:78:d6: db:9e:c4:13:37:2f:14:99:ca:3f:23:9f:e2:9b:f3: c8:d6:b4:da:40:59:39:b7:94:13:8a:47:46:14:01: 46:b9:d4:73:a8:6d:1e:9e:8a:1a:a4:0c:63:9e:c4: 2a:7a:59:f9:72:c7:e9:e3:0f:18:c1:4e:63:b1:16: c9:67:79:68:11:50:d4:0a:81:30:82:a9:6d:52:a5: 0e:b3:48:9b:8c:80:01:88:ce:d2:bc:4a:ec:0a:e7: 77:c6:9c:ef:ba:49:03:27:dc:2f:57:59:c3:45:44: 45:3f:4f:3f:2c:89:a7:a6:0a:8e:f4:ce:a3:14:84: e2:bb:07:1f:7d:48:8f:24:05:67:86:d5:29:06:6a: a8:aa:84:57:3f:a3:02:86:a9:df:b2:1c:ce:12:d4: 63:59:d7:5a:e5:72:bd:3e:e1:72:49:fb:23:62:25: 0d:0e:f2:a5:12:cd:d6:ce:ac:d1:68:fd:ba:a6:d1: 82:33:df:0b:1b:07:19:30:6e:d3:26:f2:9b:18:ef: 9b:8e:2d:b1:9f:33:3c:06:74:91:5e:08:1d:ca:e7: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:36:22:9E:5D:C0:BA:A1:4E:0D:51:10:7B:97:B6:EA:A9:AC:1F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:55:42:27:6b:fe:15:c9:43:1d:5b:e4:de:af:a0:e8:fd:b5: c4:2e:89:8c:57:e1:bd:73:27:36:61:27:26:fc:6f:84:cd:66: 2b:7e:5a:c5:49:07:92:92:17:0d:b7:c8:1b:3b:e5:82:3c:27: 36:cc:96:29:c3:7c:e3:90:8c:8d:08:98:6d:7c:36:b0:2e:50: ad:f7:d3:68:ac:d7:df:cb:d3:7b:48:cc:af:a5:00:9f:9a:bd: a0:96:49:51:09:79:82:3e:3f:14:9b:5b:2b:31:97:49:15:1b: 51:53:52:a6:dd:12:73:bf:73:1f:e2:34:3c:0f:31:08:d0:b2: 61:eb:e3:6a:d4:86:bf:32:16:07:52:9f:5e:12:3d:d5:a7:ec: 69:a3:9b:f9:5f:5b:40:bd:e5:93:43:0a:b6:4e:8d:aa:7e:14: 22:24:aa:c6:8f:c5:bf:ae:c0:4e:aa:3d:4e:63:50:5b:62:80: 71:bb:bb:fe:bd:ce:58:29:a0:63:5d:55:2b:28:0c:e7:e7:c7: 2b:61:81:2c:1d:44:20:5f:09:1f:98:7b:97:ce:5c:59:52:08: 92:0c:61:86:36:1a:cd:0d:1f:8a:21:fa:03:96:0c:7b:d4:3d: f6:14:d3:dc:dc:90:d7:13:b8:bc:d0:19:30:88:32:d7:5c:b3: 7d:54:46:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTuIt6p9Rc72rsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk NWJhMThiMzMtNWYyYS00MWZjLWEyY2EtZDkzMTA5YmQ1MzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqihRTSDETF//2Boz128KXtnnjvTB9fsl38F vq6xh5T0MFrsd7sMc7TCeNbbnsQTNy8Umco/I5/im/PI1rTaQFk5t5QTikdGFAFG udRzqG0enooapAxjnsQqeln5csfp4w8YwU5jsRbJZ3loEVDUCoEwgqltUqUOs0ib jIABiM7SvErsCud3xpzvukkDJ9wvV1nDRURFP08/LImnpgqO9M6jFITiuwcffUiP JAVnhtUpBmqoqoRXP6MChqnfshzOEtRjWdda5XK9PuFySfsjYiUNDvKlEs3WzqzR aP26ptGCM98LGwcZMG7TJvKbGO+bji2xnzM8BnSRXggdyufE5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY2Ip5dwLqhTg1REHuXtuqprB8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTc5ZjcwZWUtNDRiOC0z YWFmLWExZWItYmExMjMzYzcxOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNVQidr/hXJQx1b5N6voOj9tcQuiYxX4b1zJzZhJyb8b4TNZit+WsVJ B5KSFw23yBs75YI8JzbMlinDfOOQjI0ImG18NrAuUK3302is19/L03tIzK+lAJ+a vaCWSVEJeYI+PxSbWysxl0kVG1FTUqbdEnO/cx/iNDwPMQjQsmHr42rUhr8yFgdS n14SPdWn7Gmjm/lfW0C95ZNDCrZOjap+FCIkqsaPxb+uwE6qPU5jUFtigHG7u/69 zlgpoGNdVSsoDOfnxythgSwdRCBfCR+Ye5fOXFlSCJIMYYY2Gs0NH4oh+gOWDHvU PfYU09zckNcTuLzQGTCIMtdcs31URkI= -----END CERTIFICATE-----Generated at Sat Jun 13 23:29:47 2026 by rpki-client