$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa File: db70a171-7d33-3fc2-9576-733bc49c0285.roa (raw, json) Hash identifier: eCXlEoqMmWNqL5SAc6EAxqURfI8DjP+K5siOrrM8+mA= Subject key identifier: 19:A4:86:21:6D:F8:62:83:00:0C:D4:FD:F4:7D:B7:53:D5:4C:7C:C2 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E104EE33F1B743A9BFD1C53C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 13335 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4e:e3:3f:1b:74:3a:9b:fd:1c:53:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=e05498e2-628d-4863-8d20-307bf5b57f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:93:98:66:8c:4c:7b:08:62:8c:08:4a:99:28: 90:62:a3:04:d9:4b:a0:a2:a7:4d:bf:dd:32:e0:94: 7e:b6:b8:07:76:ee:3b:bf:8d:47:34:a9:c0:f4:a8: fd:64:c0:f6:99:c9:da:4d:a7:33:b4:b7:56:93:26: 34:49:d2:4f:1a:80:62:44:fb:46:57:c0:07:a3:5b: f6:65:7c:64:52:c7:3c:ba:c2:4c:e7:25:0b:23:7f: 33:36:71:46:92:bd:e8:85:2f:be:b5:07:a6:1c:33: da:bd:98:09:59:c9:75:f7:b5:9e:ae:b1:b7:05:fe: 69:25:cc:5d:56:42:72:0d:b1:c5:27:af:a4:bf:1c: 66:97:fb:97:4b:6b:37:a0:5d:48:29:b5:70:63:0e: 56:45:f7:1c:09:79:0a:0a:fb:6d:7d:32:78:6d:05: d4:3a:0e:c5:c1:5a:bc:60:03:f5:54:70:13:1a:53: df:c7:c5:70:f0:d4:d9:9f:2a:cf:24:30:46:49:82: c8:56:e1:e5:05:e1:43:8b:ec:be:4c:74:9f:a6:d1: c4:73:52:7e:71:ca:75:da:0f:08:cd:f3:09:d2:14: f3:ad:8f:8e:95:e0:39:97:64:33:f8:85:c5:de:bd: 4b:2d:44:e5:60:eb:80:2b:c7:d4:3a:e5:3f:9a:7f: 79:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A4:86:21:6D:F8:62:83:00:0C:D4:FD:F4:7D:B7:53:D5:4C:7C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:29:19:03:94:1e:8d:72:28:e9:85:90:ea:9e:11:36:26:dc: 6b:c9:52:39:4b:e5:b1:3a:c1:4d:68:5c:d5:71:9e:7f:d4:f2: bf:7e:04:a1:18:a6:49:d3:f3:80:5d:a4:3b:31:1f:6d:75:29: fc:4f:76:e1:fb:b1:dd:03:25:29:f0:53:04:53:2a:60:1d:7d: ed:5c:12:3c:c5:c6:10:80:da:02:fa:bc:ef:d8:55:1f:db:a3: 96:dc:e8:c3:b7:8a:32:c2:51:48:e3:04:2e:22:bf:51:24:3b: b3:a8:5c:8d:8a:d5:7b:9b:c0:bd:ee:ee:8c:10:53:0a:b0:68: e1:49:33:d8:ab:1b:bd:7d:dd:b9:92:57:8a:ef:1d:35:70:86: 69:27:d6:d0:df:67:03:a7:a3:c6:37:b2:50:c9:66:6f:86:a7: a1:5f:a9:08:71:a1:7a:fd:71:d2:9b:10:5e:6b:07:9a:af:fd: 30:88:22:d2:9f:bc:93:d2:4e:ac:8f:67:f1:36:7b:96:32:ad: b2:ce:33:80:1b:9f:a2:7f:71:d2:fc:48:df:5b:55:fa:d6:96: 95:e9:e3:ab:fd:05:62:e6:7b:e1:4f:83:ba:60:92:74:98:6f: 28:6a:f0:ea:05:2e:79:d3:91:7d:1f:5f:e2:41:e3:90:a0:f1: be:f9:22:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTuM/G3Q6m/0cU8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk ZTA1NDk4ZTItNjI4ZC00ODYzLThkMjAtMzA3YmY1YjU3ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpOYZoxMewhijAhKmSiQYqME2UugoqdNv90y 4JR+trgHdu47v41HNKnA9Kj9ZMD2mcnaTacztLdWkyY0SdJPGoBiRPtGV8AHo1v2 ZXxkUsc8usJM5yULI38zNnFGkr3ohS++tQemHDPavZgJWcl197WerrG3Bf5pJcxd VkJyDbHFJ6+kvxxml/uXS2s3oF1IKbVwYw5WRfccCXkKCvttfTJ4bQXUOg7FwVq8 YAP1VHATGlPfx8Vw8NTZnyrPJDBGSYLIVuHlBeFDi+y+THSfptHEc1J+ccp12g8I zfMJ0hTzrY+OleA5l2Qz+IXF3r1LLUTlYOuAK8fUOuU/mn953QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmkhiFt+GKDAAzU/fR9t1PVTHzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGI3MGExNzEtN2QzMy0z ZmMyLTk1NzYtNzMzYmM0OWMwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgpGQOUHo1yKOmFkOqeETYm3GvJUjlL5bE6wU1oXNVxnn/U8r9+BKEY pknT84BdpDsxH211KfxPduH7sd0DJSnwUwRTKmAdfe1cEjzFxhCA2gL6vO/YVR/b o5bc6MO3ijLCUUjjBC4iv1EkO7OoXI2K1XubwL3u7owQUwqwaOFJM9irG7193bmS V4rvHTVwhmkn1tDfZwOno8Y3slDJZm+Gp6FfqQhxoXr9cdKbEF5rB5qv/TCIItKf vJPSTqyPZ/E2e5YyrbLOM4Abn6J/cdL8SN9bVfrWlpXp46v9BWLme+FPg7pgknSY byhq8OoFLnnTkX0fX+JB45Cg8b75Io8= -----END CERTIFICATE-----Generated at Sat Jun 13 19:15:03 2026 by rpki-client