$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa File: 4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa (raw, json) Hash identifier: F3Xs/4AgjW46AfBK7gij1heWf02ovSPFp5KGjIYG+eY= Subject key identifier: 49:6D:AE:18:AE:38:04:B5:46:73:80:F0:F9:A2:6B:68:62:C1:75:93 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F5767FB200344CEA3B6913600 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 17275 IP address blocks: 161.107.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:fb:20:03:44:ce:a3:b6:91:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=570daa78-1248-4d11-bd15-c3c537634725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:08:1a:7b:42:a5:76:b3:19:26:55:15:cc:f7: 60:07:f2:d2:30:47:fa:07:9f:a8:f5:11:ff:e5:40: 63:77:8c:3b:98:dd:b7:ef:aa:19:4d:40:d7:7d:c1: 6c:7c:ce:6f:80:ea:33:8d:89:fd:5c:52:5f:88:d9: 3e:88:5d:31:6c:0f:2c:21:15:ee:ab:9c:04:33:5c: f4:f9:2d:05:33:bd:bd:35:43:29:16:0f:d1:d3:66: a5:3e:ef:f8:c8:30:00:65:d8:fb:f8:5e:e6:73:9d: d0:06:69:48:bd:00:75:1b:5b:53:aa:1b:ab:30:88: 9d:58:a5:70:ea:b0:b0:7c:bc:50:db:3f:1d:0b:54: 9e:24:a4:ac:5c:d2:ee:fe:43:21:b7:b4:de:81:c8: 85:5d:db:7f:15:5f:d9:8b:b9:75:c6:7d:ea:37:c5: 17:56:5c:81:4b:3d:54:c4:87:93:4f:b0:ff:68:5b: 0c:b5:40:47:50:c3:e0:2a:85:76:70:53:f2:55:e2: e7:1c:bd:91:46:7c:c6:68:67:58:47:b4:cd:85:2c: 2c:40:f9:6a:13:95:f6:c2:a7:99:f0:73:b5:eb:87: 53:8a:e6:4d:1e:a8:37:53:b7:a7:41:62:5b:32:35: 80:ef:03:8a:f2:ff:bc:0b:4b:77:ff:1b:3c:46:b2: 21:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6D:AE:18:AE:38:04:B5:46:73:80:F0:F9:A2:6B:68:62:C1:75:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:9c:a1:4e:62:f7:12:a4:f9:5b:b6:6c:51:be:f5:66:76:cd: ff:44:b5:cc:03:35:49:aa:f5:b0:2e:f6:84:8f:60:f8:1f:de: 8e:ba:8e:17:ae:54:41:95:07:6e:e7:73:78:a7:12:a7:42:b8: 5b:6a:34:de:d6:9d:c9:0c:1a:1e:4e:79:0e:10:f8:25:ec:05: 3a:7c:26:e6:5b:f7:b8:48:b9:fc:dd:15:26:3b:2c:50:ac:2b: 2e:db:00:45:9a:17:b5:24:9f:39:21:20:5e:4b:35:e1:72:a6: b8:97:50:69:65:91:ba:1d:7a:5c:d7:bb:4d:d2:38:40:52:d0: fe:d2:f0:b7:7a:7a:81:10:8e:a9:20:7c:df:10:63:5e:73:29: 76:b5:d3:36:fe:0c:66:c2:2e:55:44:2d:e9:86:04:fa:30:60: a0:b1:88:16:47:1b:19:67:49:20:1b:13:f3:e4:33:02:0c:f7: 00:17:2c:dd:16:92:6f:4a:03:36:ee:91:b6:f0:28:7d:b1:81: 3f:14:55:5f:f8:f1:a9:72:b3:a1:35:61:88:f2:ad:fa:96:d9: 07:80:fc:90:31:01:1c:bc:06:20:50:d8:fa:18:a2:89:44:f9: 7f:4e:0e:e6:3f:f2:e8:65:03:c2:82:bc:86:01:a3:93:3d:5b: 46:64:87:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XZ/sgA0TOo7aRNgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk NTcwZGFhNzgtMTI0OC00ZDExLWJkMTUtYzNjNTM3NjM0NzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwgae0KldrMZJlUVzPdgB/LSMEf6B5+o9RH/ 5UBjd4w7mN2376oZTUDXfcFsfM5vgOozjYn9XFJfiNk+iF0xbA8sIRXuq5wEM1z0 +S0FM729NUMpFg/R02alPu/4yDAAZdj7+F7mc53QBmlIvQB1G1tTqhurMIidWKVw 6rCwfLxQ2z8dC1SeJKSsXNLu/kMht7TegciFXdt/FV/Zi7l1xn3qN8UXVlyBSz1U xIeTT7D/aFsMtUBHUMPgKoV2cFPyVeLnHL2RRnzGaGdYR7TNhSwsQPlqE5X2wqeZ 8HO164dTiuZNHqg3U7enQWJbMjWA7wOK8v+8C0t3/xs8RrIhZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEltrhiuOAS1RnOA8Pmia2hiwXWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNGU1OTFiNWUtNjU4Ny0z ZmI1LWE2ZDgtNWRkZTJiODI3MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqcoU5i9xKk+Vu2bFG+9WZ2zf9EtcwDNUmq9bAu9oSPYPgf3o66jheu VEGVB27nc3inEqdCuFtqNN7WnckMGh5OeQ4Q+CXsBTp8JuZb97hIufzdFSY7LFCs Ky7bAEWaF7UknzkhIF5LNeFypriXUGllkbodelzXu03SOEBS0P7S8Ld6eoEQjqkg fN8QY15zKXa10zb+DGbCLlVELemGBPowYKCxiBZHGxlnSSAbE/PkMwIM9wAXLN0W km9KAzbukbbwKH2xgT8UVV/48alys6E1YYjyrfqW2QeA/JAxARy8BiBQ2PoYoolE +X9ODuY/8uhlA8KCvIYBo5M9W0Zkhw8= -----END CERTIFICATE-----Generated at Sun Oct 4 08:38:24 2026 by rpki-client