$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa File: 3ee49716-5be7-3c02-b135-f2c82d1c463e.roa (raw, json) Hash identifier: r/a4CWEJIzqSoMQFtepKiHieo04CQRzCkItJgnGKgRs= Subject key identifier: CD:86:0E:C3:EA:F5:8E:FE:E5:E0:95:EA:3A:E2:41:08:28:7E:9B:02 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F5767FAE57778D3021D101500 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:fa:e5:77:78:d3:02:1d:10:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=3bbbd667-8f05-4be8-a10f-7b6ca713975f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:8f:b2:01:dc:5a:4a:41:3b:3e:74:5e:9f: aa:b4:c8:61:0f:34:2e:b6:4f:74:15:bb:25:3a:bc: ea:9e:be:08:e3:4e:ef:eb:08:e2:d9:00:02:87:f0: 89:0a:f6:73:cd:53:17:31:e2:2e:6c:f1:54:fc:99: 2b:39:be:5d:9c:d7:c5:91:f5:78:40:1b:60:39:a8: ef:2b:bb:04:31:ed:76:77:7f:c9:6c:cf:bd:02:65: 1a:d0:ce:70:60:c3:f8:ca:5a:12:06:87:da:47:28: 26:d1:a9:b9:ab:fc:2a:41:6e:9f:ca:b1:04:e3:3f: c3:14:1c:ab:da:c8:16:05:29:4c:6f:71:df:e1:f5: c0:49:ec:a2:83:69:77:af:2c:56:79:47:a7:23:16: a0:63:a4:b8:68:b5:7b:a1:95:a4:f1:f6:50:58:95: 15:c4:59:a9:fa:67:80:6f:6b:61:85:b7:80:e0:01: 9f:ef:8d:e5:8c:b8:d6:70:ef:bc:04:ba:19:af:fb: df:97:0d:7e:30:a6:27:4f:ca:1d:56:5a:65:a7:33: 30:69:27:65:0f:94:3c:11:71:6f:ff:5d:c3:be:47: cc:51:6c:dd:6e:38:f0:4e:43:62:d4:8a:59:3a:3d: c9:c6:7d:e5:75:dc:d0:aa:a4:01:b3:4a:76:eb:87: c7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:86:0E:C3:EA:F5:8E:FE:E5:E0:95:EA:3A:E2:41:08:28:7E:9B:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/3ee49716-5be7-3c02-b135-f2c82d1c463e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:33:77:58:32:b0:83:25:dc:20:43:63:b4:6f:f0:69:22:c0: f3:6d:2c:12:dd:b8:f4:33:71:8f:a9:04:a2:14:85:ec:8e:c6: 1a:ec:92:0f:5e:d7:b1:dc:af:b2:30:34:b0:f3:87:30:e4:b0: ea:62:32:5f:f5:81:3d:43:c9:58:9d:eb:6c:20:de:04:79:c0: bb:28:25:e5:0e:d0:40:9c:bc:ea:35:0f:7f:a7:b7:8e:98:0f: 5a:f0:0b:02:77:d8:58:46:8b:7e:40:98:d7:31:60:a3:cb:fb: 16:d8:93:31:16:82:b6:6c:f6:67:a1:bd:ff:19:ee:86:ae:c3: 5e:15:66:16:7f:7b:81:09:2a:08:2b:61:74:8e:5a:b8:a2:da: f0:98:73:15:c7:ab:78:a4:67:19:51:87:d5:50:15:73:f6:28: 2e:30:db:0f:0b:a0:05:d2:65:2f:42:aa:eb:e7:82:d7:77:57: 4f:10:6f:bc:aa:7b:df:8e:05:6f:02:a8:b2:c3:1c:a5:1e:9f: 05:93:60:bf:96:18:99:86:a9:5f:18:93:ea:9e:4f:9b:88:6f: bb:e2:80:86:5f:ca:6f:ff:b1:ef:66:83:31:cb:11:d0:9f:1b: 12:fa:71:cd:6c:b2:ff:e1:c0:2b:bb:6f:cb:81:f3:f0:8f:fa: 2d:06:64:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ/rld3jTAh0QFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk M2JiYmQ2NjctOGYwNS00YmU4LWExMGYtN2I2Y2E3MTM5NzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd+PsgHcWkpBOz50Xp+qtMhhDzQutk90Fbsl Orzqnr4I407v6wji2QACh/CJCvZzzVMXMeIubPFU/JkrOb5dnNfFkfV4QBtgOajv K7sEMe12d3/JbM+9AmUa0M5wYMP4yloSBofaRygm0am5q/wqQW6fyrEE4z/DFByr 2sgWBSlMb3Hf4fXASeyig2l3ryxWeUenIxagY6S4aLV7oZWk8fZQWJUVxFmp+meA b2thhbeA4AGf743ljLjWcO+8BLoZr/vflw1+MKYnT8odVlplpzMwaSdlD5Q8EXFv /13DvkfMUWzdbjjwTkNi1IpZOj3Jxn3lddzQqqQBs0p264fHkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2GDsPq9Y7+5eCV6jriQQgofpsCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvM2VlNDk3MTYtNWJlNy0z YzAyLWIxMzUtZjJjODJkMWM0NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAzd1gysIMl3CBDY7Rv8GkiwPNtLBLduPQzcY+pBKIUheyOxhrskg9e 17Hcr7IwNLDzhzDksOpiMl/1gT1DyVid62wg3gR5wLsoJeUO0ECcvOo1D3+nt46Y D1rwCwJ32FhGi35AmNcxYKPL+xbYkzEWgrZs9mehvf8Z7oauw14VZhZ/e4EJKggr YXSOWrii2vCYcxXHq3ikZxlRh9VQFXP2KC4w2w8LoAXSZS9Cquvngtd3V08Qb7yq e9+OBW8CqLLDHKUenwWTYL+WGJmGqV8Yk+qeT5uIb7vigIZfym//se9mgzHLEdCf GxL6cc1ssv/hwCu7b8uB8/CP+i0GZJE= -----END CERTIFICATE-----Generated at Sat Oct 3 14:19:15 2026 by rpki-client