$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa File: 2cf2825c-6372-3688-bd45-d02fb09144f4.roa (raw, json) Hash identifier: UnWqSL+oIppdrZ5qcUa/cNEJEA5xdnwev5Djaa6Bipo= Subject key identifier: 8C:4D:55:4E:DA:37:03:F3:16:48:0E:DF:40:9D:F6:E0:24:35:73:FC Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A2BD2A1F2A7004C338100 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2b:d2:a1:f2:a7:00:4c:33:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=8e4f4bd6-93ef-4619-8a9b-3d8b59d4e453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:d8:cd:1f:25:db:44:b7:b4:fd:07:19:3c: 16:95:7f:50:b5:72:08:56:c5:21:c7:42:51:cb:02: 4b:b4:6e:85:28:74:fa:54:c3:51:9b:5c:f9:a3:94: 9e:e6:d3:cc:4b:c6:ec:69:75:27:a9:d6:eb:68:a5: 54:27:dd:05:91:4b:e1:02:a8:eb:5e:9d:26:31:65: 06:0c:19:b3:02:b4:72:9d:55:30:18:8d:c4:ab:2a: 5c:6b:0b:6c:69:e8:e4:cc:a4:83:94:6b:43:4a:e2: e9:1e:2f:b5:fd:15:a8:2c:30:88:83:f9:a7:7a:47: 14:67:c5:2f:2b:64:c7:41:5d:34:02:27:8d:06:6f: 36:96:19:bc:14:b3:d9:76:62:0b:66:56:e7:54:b3: 64:65:c2:7a:22:58:06:55:76:71:b4:aa:e1:27:42: 93:14:a7:39:ed:36:bd:9b:1b:33:2b:bc:8e:71:6e: a0:ea:25:8e:40:78:0e:10:a0:35:4d:db:49:80:d6: a1:27:38:2f:b3:9a:c8:de:3a:4c:17:32:9c:b6:d8: 62:c1:b0:29:70:32:e9:db:08:c6:93:de:35:37:97: 11:89:d1:89:a8:b4:3f:cd:a0:2c:3f:eb:c3:0f:9b: 1d:98:64:d4:04:f8:d0:7b:66:81:f9:ba:6d:4b:df: 3e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4D:55:4E:DA:37:03:F3:16:48:0E:DF:40:9D:F6:E0:24:35:73:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ca:9b:6c:98:8a:e1:bb:fe:8e:f5:8f:ef:b3:b6:ca:42:84: 29:98:67:ee:e5:4d:75:40:12:25:7f:75:e8:e0:8b:90:b0:76: 99:fc:45:23:f3:54:d6:ef:31:2f:d6:4d:95:d6:10:a5:dc:bb: d8:1e:5a:e2:27:e4:2d:b9:27:a9:37:33:07:e3:b5:9d:ee:60: 85:9e:f5:b4:78:ad:7a:87:66:26:37:29:7e:df:73:91:f3:6a: 9c:32:33:24:7b:9d:4a:35:37:ba:ec:e6:29:a7:02:2e:c1:c9: e9:a6:e0:6d:56:ae:f9:5e:fd:e4:8b:43:55:46:24:64:d9:9c: bd:16:6d:4a:f5:60:c8:89:39:e1:2c:74:b8:89:bd:85:23:c2: 40:61:5e:42:82:e9:c4:7a:62:72:dc:94:a8:cc:39:00:f4:75: 61:6e:60:8e:7d:04:79:e8:e9:96:b1:d7:24:e8:39:ca:d7:b4: 07:54:6b:e9:49:01:86:ea:f4:3e:6b:44:fc:af:8b:40:2c:a3: 08:8c:4d:4d:83:9f:15:40:ee:f2:65:3b:3b:7d:67:43:14:59: a3:f2:bb:5d:93:43:42:fe:67:cd:02:1d:01:ea:41:07:a2:f3: 46:6d:4b:d4:02:f7:df:cb:86:25:c6:71:52:f4:6b:29:ef:03: e1:93:7c:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCivSofKnAEwzgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OGU0ZjRiZDYtOTNlZi00NjE5LThhOWItM2Q4YjU5ZDRlNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSDYzR8l20S3tP0HGTwWlX9QtXIIVsUhx0JR ywJLtG6FKHT6VMNRm1z5o5Se5tPMS8bsaXUnqdbraKVUJ90FkUvhAqjrXp0mMWUG DBmzArRynVUwGI3EqypcawtsaejkzKSDlGtDSuLpHi+1/RWoLDCIg/mnekcUZ8Uv K2THQV00AieNBm82lhm8FLPZdmILZlbnVLNkZcJ6IlgGVXZxtKrhJ0KTFKc57Ta9 mxszK7yOcW6g6iWOQHgOEKA1TdtJgNahJzgvs5rI3jpMFzKctthiwbApcDLp2wjG k941N5cRidGJqLQ/zaAsP+vDD5sdmGTUBPjQe2aB+bptS98+qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxNVU7aNwPzFkgO30Cd9uAkNXP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMmNmMjgyNWMtNjM3Mi0z Njg4LWJkNDUtZDAyZmIwOTE0NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADKm2yYiuG7/o71j++ztspChCmYZ+7lTXVAEiV/dejgi5Cwdpn8RSPz VNbvMS/WTZXWEKXcu9geWuIn5C25J6k3MwfjtZ3uYIWe9bR4rXqHZiY3KX7fc5Hz apwyMyR7nUo1N7rs5imnAi7Byemm4G1Wrvle/eSLQ1VGJGTZnL0WbUr1YMiJOeEs dLiJvYUjwkBhXkKC6cR6YnLclKjMOQD0dWFuYI59BHno6Zax1yToOcrXtAdUa+lJ AYbq9D5rRPyvi0AsowiMTU2DnxVA7vJlOzt9Z0MUWaPyu12TQ0L+Z80CHQHqQQei 80ZtS9QC99/LhiXGcVL0aynvA+GTfMU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:43:56 2026 by rpki-client