$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa File: 1d5a3ec4-950e-303d-a621-ef1988db9a14.roa (raw, json) Hash identifier: tqBq5ekI8MJ7/1QVkicEyKkMmcCBCAYFYgopZDYYKSA= Subject key identifier: 06:3A:10:94:D2:1C:22:D6:40:D0:57:3B:67:69:92:B4:9B:B9:4B:1D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D316F7DC722E77B0C7C6002C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:7d:c7:22:e7:7b:0c:7c:60:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=52f43d15-57cb-413e-8829-bf3a01a24e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:a6:85:d3:7f:d2:b1:73:80:1f:94:31:22:29: 13:97:20:58:03:38:a3:01:45:93:5d:e6:5a:09:1a: be:33:aa:e1:40:42:3a:5f:a3:45:ea:52:89:86:a4: 43:a3:49:84:1c:65:60:b1:0c:bb:9b:e2:81:8d:ab: 65:0e:3f:e5:c3:7e:2b:2c:b0:f8:1e:33:66:bf:e9: e6:ea:4c:55:bf:fe:fc:6a:ec:71:08:60:e0:3f:0b: 75:7f:23:3b:15:6f:70:14:67:17:74:46:a4:0f:bc: 76:f9:75:0c:66:6f:51:3d:ac:7d:ba:8a:d6:2e:45: c4:8b:a6:bc:46:68:f6:bf:cf:e1:e1:82:b3:b5:be: cb:3b:8b:02:52:93:1a:87:6b:40:dd:82:d1:91:a0: 3a:09:28:5d:29:32:88:36:d7:cd:3c:22:03:a8:4c: b2:06:2e:38:31:a1:62:f9:66:e5:37:ac:9f:6a:2e: 33:58:9c:6e:35:8b:b2:f3:aa:57:1a:12:d3:3b:0c: 21:81:56:a1:41:b9:2d:22:bd:83:57:f7:a6:c0:2c: 9d:24:07:27:d5:16:ad:ea:d6:a3:64:02:1d:91:79: fe:0c:2b:f7:a0:55:2c:43:72:fa:18:fa:3a:90:0f: e9:f2:9a:ba:04:34:ea:5c:b2:0b:10:66:8e:64:b9: f8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:3A:10:94:D2:1C:22:D6:40:D0:57:3B:67:69:92:B4:9B:B9:4B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:40:92:e9:02:3d:05:28:a6:d7:23:66:71:6d:3d:05:34:04: 18:e8:f3:4c:1c:e9:4a:57:1c:64:57:74:c2:4e:48:85:61:9d: 13:bf:99:6b:2f:9d:f7:d8:a3:84:ee:2d:af:3f:72:1c:96:6b: 9c:e9:64:ef:25:7e:69:80:41:8d:36:19:13:81:8f:dc:2c:71: 5b:ff:a7:ac:18:79:1d:0f:c7:e2:f8:13:b5:bf:72:26:9a:b9: 76:67:be:96:25:13:55:48:b8:66:bc:af:67:27:67:a2:0d:a4: 8c:51:65:14:dd:f6:57:a8:7c:e2:56:ed:26:0a:d3:ec:d9:b3: 0b:ac:1a:fb:29:b6:1d:bc:c1:2a:55:d9:c4:de:f0:2b:99:79: 99:1d:bf:43:23:61:f7:8b:e7:3e:46:6a:6d:9d:e3:e1:44:11: 8a:fd:c5:64:7b:da:e9:66:ea:62:b5:bf:11:38:e9:7f:20:63: c1:12:9b:15:5e:2b:34:53:46:d1:2e:5e:c0:a5:71:4e:01:8c: ba:0c:b8:81:54:fe:5b:9d:09:35:81:ff:41:4f:00:c7:0e:dd: 5a:c0:8e:61:3e:64:1b:3d:69:9a:80:0e:b4:6d:9d:62:e4:f5: af:99:52:8e:20:35:68:0b:59:48:6b:e9:fe:a8:f1:eb:ae:a4: 29:c8:bd:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb33HIud7DHxgAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NTJmNDNkMTUtNTdjYi00MTNlLTg4MjktYmYzYTAxYTI0ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6aF03/SsXOAH5QxIikTlyBYAzijAUWTXeZa CRq+M6rhQEI6X6NF6lKJhqRDo0mEHGVgsQy7m+KBjatlDj/lw34rLLD4HjNmv+nm 6kxVv/78auxxCGDgPwt1fyM7FW9wFGcXdEakD7x2+XUMZm9RPax9uorWLkXEi6a8 Rmj2v8/h4YKztb7LO4sCUpMah2tA3YLRkaA6CShdKTKINtfNPCIDqEyyBi44MaFi +WblN6yfai4zWJxuNYuy86pXGhLTOwwhgVahQbktIr2DV/emwCydJAcn1Rat6taj ZAIdkXn+DCv3oFUsQ3L6GPo6kA/p8pq6BDTqXLILEGaOZLn44wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY6EJTSHCLWQNBXO2dpkrSbuUsdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMWQ1YTNlYzQtOTUwZS0z MDNkLWE2MjEtZWYxOTg4ZGI5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJAkukCPQUoptcjZnFtPQU0BBjo80wc6UpXHGRXdMJOSIVhnRO/mWsv nffYo4TuLa8/chyWa5zpZO8lfmmAQY02GROBj9wscVv/p6wYeR0Px+L4E7W/ciaa uXZnvpYlE1VIuGa8r2cnZ6INpIxRZRTd9leofOJW7SYK0+zZswusGvspth28wSpV 2cTe8CuZeZkdv0MjYfeL5z5Gam2d4+FEEYr9xWR72ulm6mK1vxE46X8gY8ESmxVe KzRTRtEuXsClcU4BjLoMuIFU/ludCTWB/0FPAMcO3VrAjmE+ZBs9aZqADrRtnWLk 9a+ZUo4gNWgLWUhr6f6o8euupCnIvVo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:03:13 2026 by rpki-client