$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa File: b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa (raw, json) Hash identifier: aME5U6OxPjl3C0hmjGa9u59f7LUP0c3UfEtf4dpMmKM= Subject key identifier: 00:DA:A9:9B:E1:B6:0B:AF:F3:44:94:56:3B:01:37:A6:C6:7B:DB:B8 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E104F2C694646F5E97B9B3400 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 17275 IP address blocks: 161.107.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 16 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:2c:69:46:46:f5:e9:7b:9b:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2e92eeda-f22f-4a35-8c62-a4ae167b630b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:81:31:e7:78:4c:47:0b:16:4c:74:86:4f:15: 63:05:34:73:6f:e5:16:f8:6c:33:ba:79:e2:ec:5b: 2b:6d:c1:73:5d:19:55:74:ac:23:0e:f9:49:fd:9c: fd:14:92:3c:a5:ce:21:5c:bb:b5:2d:58:6b:0d:66: 0d:99:2d:36:1f:7d:c8:25:12:09:3e:f7:35:3a:ea: b1:91:1e:0a:84:e1:ee:2d:75:77:8f:e8:bc:38:57: 05:51:56:b7:e0:b8:69:8a:ed:79:45:2c:83:f3:eb: df:37:7a:20:84:09:73:83:51:15:77:9a:1a:71:81: d2:a9:76:72:21:a2:8e:dd:4f:41:ba:f3:86:82:98: a5:bc:d1:c0:59:ac:da:c9:1e:e8:b0:1b:03:26:f8: cf:5a:13:cf:76:4a:4f:7e:6d:41:8c:cc:04:d3:b5: 74:e2:a6:4a:aa:2a:6c:59:47:7b:65:84:6d:68:db: f3:c2:65:60:63:73:7f:12:98:83:08:3d:8a:2d:e1: 9f:29:27:ca:bb:bf:80:31:cb:6f:d8:c3:36:a4:f4: 2d:79:52:5a:09:77:47:38:8a:4f:08:fd:86:6a:10: 3f:be:3f:4e:a5:f8:e6:55:92:e6:9b:31:3e:3a:85: 9c:8c:00:e2:79:15:2d:f8:d2:e3:3a:19:b1:2a:12: a5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:DA:A9:9B:E1:B6:0B:AF:F3:44:94:56:3B:01:37:A6:C6:7B:DB:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:e3:5f:7d:be:e9:cc:bb:29:69:6a:12:0d:5b:26:e3:4a:f1: 9a:93:e9:89:06:a4:f8:5e:31:a3:fa:f6:43:47:94:aa:48:3b: 18:05:aa:f6:53:8a:2e:7e:fa:26:0c:52:78:0f:5e:15:8f:66: 45:24:32:6d:3a:63:38:b9:5d:a3:20:6c:4b:dd:42:c4:b7:bd: df:9e:31:f7:c1:95:9d:78:b5:ba:d7:91:53:c3:18:44:65:c0: a5:1e:eb:41:01:e0:d2:a8:22:8a:09:ad:c2:4f:83:a2:75:35: cb:88:fe:89:fb:72:01:8c:db:83:35:62:15:36:4d:1e:1f:7c: 39:70:d3:c0:e9:3c:62:3d:94:89:29:fb:41:9a:0b:cf:f4:6d: d1:fb:d7:5d:d8:f8:8f:05:56:76:43:9b:a6:24:81:3c:7b:52: b1:68:90:80:7b:23:82:e0:a2:6b:eb:c1:8b:8d:db:f5:c2:b4: ce:36:8b:50:6c:eb:26:d3:4e:ce:80:d2:72:e5:7a:ba:2f:97: 82:6a:37:17:8b:89:fb:79:cf:32:88:87:f3:0b:e8:4e:85:ae: 03:b0:47:c4:04:0d:b2:a5:86:d8:80:f8:7d:ab:92:27:e5:ec: a6:b7:41:d9:17:ee:5a:1c:2d:98:35:6a:d6:98:30:d0:ee:c7: 7d:64:00:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTyxpRkb16XubNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmU5MmVlZGEtZjIyZi00YTM1LThjNjItYTRhZTE2N2I2MzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoEx53hMRwsWTHSGTxVjBTRzb+UW+Gwzunni 7FsrbcFzXRlVdKwjDvlJ/Zz9FJI8pc4hXLu1LVhrDWYNmS02H33IJRIJPvc1Ouqx kR4KhOHuLXV3j+i8OFcFUVa34Lhpiu15RSyD8+vfN3oghAlzg1EVd5oacYHSqXZy IaKO3U9BuvOGgpilvNHAWazayR7osBsDJvjPWhPPdkpPfm1BjMwE07V04qZKqips WUd7ZYRtaNvzwmVgY3N/EpiDCD2KLeGfKSfKu7+AMctv2MM2pPQteVJaCXdHOIpP CP2GahA/vj9OpfjmVZLmmzE+OoWcjADieRUt+NLjOhmxKhKlcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADaqZvhtguv80SUVjsBN6bGe9u4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvYjNjYmRmZjEtY2UwYi0z NDVmLTgwNjMtZjBhY2ExODU4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHjX32+6cy7KWlqEg1bJuNK8ZqT6YkGpPheMaP69kNHlKpIOxgFqvZT ii5++iYMUngPXhWPZkUkMm06Yzi5XaMgbEvdQsS3vd+eMffBlZ14tbrXkVPDGERl wKUe60EB4NKoIooJrcJPg6J1NcuI/on7cgGM24M1YhU2TR4ffDlw08DpPGI9lIkp +0GaC8/0bdH7113Y+I8FVnZDm6YkgTx7UrFokIB7I4LgomvrwYuN2/XCtM42i1Bs 6ybTTs6A0nLlerovl4JqNxeLift5zzKIh/ML6E6FrgOwR8QEDbKlhtiA+H2rkifl 7Ka3QdkX7locLZg1ataYMNDux31kAMs= -----END CERTIFICATE-----Generated at Sat Jun 13 23:10:32 2026 by rpki-client