$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa File: dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa (raw, json) Hash identifier: MkFMAzVzOYt0WYFR+unZ+rQ0OjzPFkNfiiLRvPgP4iM= Subject key identifier: BE:56:57:54:D4:44:1D:A5:98:F6:00:85:46:EF:12:D3:29:40:14:8D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584EB416F7058241B5F4C25A7E60 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa Signing time: Sun 02 Aug 2026 13:00:12 +0000 ROA not before: Sun 02 Aug 2026 13:00:12 +0000 ROA not after: Sat 31 Oct 2026 13:00:12 +0000 asID: 17275 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b4:16:f7:05:82:41:b5:f4:c2:5a:7e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Aug 2 13:00:12 2026 GMT Not After : Oct 31 13:00:12 2026 GMT Subject: CN=ab3dab83-7be6-471e-8503-b9ae17276e88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e8:c1:c5:88:2e:f5:9c:0b:78:c3:fd:23:b0: 16:8f:db:f1:11:11:5b:86:b6:74:6c:ae:5c:07:c5: a0:04:06:8a:d8:8c:35:20:d0:b3:7c:7d:48:97:1e: c4:d3:a0:99:25:54:6c:88:e8:f4:e4:56:b5:14:81: 64:f6:2d:b8:ff:ed:a3:0a:41:7c:57:b5:6b:46:3e: 18:bb:d7:c4:f6:37:1e:b3:13:3a:9e:42:67:57:c2: 82:fc:38:bd:4b:11:c4:fc:36:65:f1:0f:6e:46:46: 42:c6:55:af:e9:50:66:88:74:24:d3:c7:f1:24:bf: 21:b6:72:92:a3:b8:0d:4a:1e:f4:29:18:38:0e:6e: 5d:18:b3:88:b7:3e:04:57:ac:dc:ec:53:52:74:59: 65:cb:dc:56:7f:d8:03:6e:be:c5:73:c4:4d:2e:60: eb:91:9d:58:12:da:81:12:47:fa:04:ba:66:13:ab: ab:22:3f:08:c8:1e:e7:3a:0c:e6:18:da:71:58:20: 3e:c9:12:ce:aa:d1:46:34:dd:a3:b9:9a:01:f2:e6: c6:51:de:35:11:ef:25:3a:d4:33:7f:15:41:8b:c9: dd:3f:7f:79:32:bb:f4:2f:88:65:2c:c9:e6:f6:c0: c7:49:a5:31:85:f6:e1:d2:ba:aa:dc:72:99:85:6f: 20:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:56:57:54:D4:44:1D:A5:98:F6:00:85:46:EF:12:D3:29:40:14:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:53:0f:32:4c:a0:0b:07:83:86:b4:b1:8b:d8:51:51:70:eb: bc:a3:e9:ed:ab:ea:50:b6:92:53:cc:37:c8:ca:26:81:06:38: 46:da:56:f9:50:1d:1b:e3:9a:ab:e2:e8:ea:f5:77:38:cd:e9: b8:d0:8b:a3:3d:d8:67:c3:75:65:3a:91:ed:79:22:29:a9:fe: e4:25:e0:9e:01:a7:42:d4:0e:45:9b:6a:62:2f:d5:5f:65:cd: 58:11:dd:19:d0:43:da:f3:bc:3b:f4:b8:63:3f:57:3b:95:c0: 1b:19:c3:8a:44:c0:ce:14:32:e2:de:c1:3a:a4:f9:71:22:8e: 8c:50:85:ad:31:3f:ea:2c:3e:3e:3c:fb:72:2f:2f:d5:e6:cb: 62:f5:53:6f:23:42:8a:81:94:0f:08:32:06:22:53:c2:08:e4: ab:71:e2:84:b5:6a:53:eb:8b:a6:4b:4d:25:85:07:30:d8:3e: 8f:43:ca:71:45:43:eb:c9:bf:6c:2e:a3:83:5c:99:78:38:d1: 3f:0d:20:d5:16:98:d2:2d:30:6c:76:63:f7:d3:83:bf:62:8a: 01:60:e6:db:6f:f9:b1:2a:58:e8:c4:0e:99:db:30:9d:de:5f: 28:d8:73:61:39:79:28:5a:d5:9f:78:9a:46:64:92:ba:77:ff: 79:0c:09:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE60FvcFgkG19MJafmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDgwMjEzMDAxMloXDTI2MTAzMTEzMDAxMlowLzEtMCsGA1UEAxMk YWIzZGFiODMtN2JlNi00NzFlLTg1MDMtYjlhZTE3Mjc2ZTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+jBxYgu9ZwLeMP9I7AWj9vxERFbhrZ0bK5c B8WgBAaK2Iw1INCzfH1Ilx7E06CZJVRsiOj05Fa1FIFk9i24/+2jCkF8V7VrRj4Y u9fE9jcesxM6nkJnV8KC/Di9SxHE/DZl8Q9uRkZCxlWv6VBmiHQk08fxJL8htnKS o7gNSh70KRg4Dm5dGLOItz4EV6zc7FNSdFlly9xWf9gDbr7Fc8RNLmDrkZ1YEtqB Ekf6BLpmE6urIj8IyB7nOgzmGNpxWCA+yRLOqtFGNN2juZoB8ubGUd41Ee8lOtQz fxVBi8ndP395Mrv0L4hlLMnm9sDHSaUxhfbh0rqq3HKZhW8gqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5WV1TURB2lmPYAhUbvEtMpQBSNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGJkYmFmY2YtNThkOC0z MWRmLThlY2YtZTE2YWZiNDVkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALRTDzJMoAsHg4a0sYvYUVFw67yj6e2r6lC2klPMN8jKJoEGOEbaVvlQ HRvjmqvi6Or1dzjN6bjQi6M92GfDdWU6ke15Iimp/uQl4J4Bp0LUDkWbamIv1V9l zVgR3RnQQ9rzvDv0uGM/VzuVwBsZw4pEwM4UMuLewTqk+XEijoxQha0xP+osPj48 +3IvL9Xmy2L1U28jQoqBlA8IMgYiU8II5Ktx4oS1alPri6ZLTSWFBzDYPo9DynFF Q+vJv2wuo4NcmXg40T8NINUWmNItMGx2Y/fTg79iigFg5ttv+bEqWOjEDpnbMJ3e XyjYc2E5eSha1Z94mkZkkrp3/3kMCd0= -----END CERTIFICATE-----Generated at Tue Sep 22 20:28:33 2026 by rpki-client