$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa File: 4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa (raw, json) Hash identifier: Kycr6tFElcwgFEg0JjvoRtEvUpukCM50ZRnutM09jIQ= Subject key identifier: 04:3E:8E:CC:95:F7:2D:15:A5:F4:F2:9C:74:17:BA:A5:67:E9:2A:6C Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D316F68F5C1F8A7418FC086C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:68:f5:c1:f8:a7:41:8f:c0:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=653005a3-f856-43bb-ad4a-e00ec126fe4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:b0:fc:f3:bf:ac:ba:24:f5:07:fd:4c:b8:9c: 9b:37:7f:0d:c1:d5:1f:9f:1e:4f:6a:b6:ff:8b:61: 89:52:65:ed:ef:b7:7b:d6:ff:34:17:70:0d:d5:82: 81:31:ea:37:07:3a:15:cb:ad:57:ac:82:16:1d:74: d8:2e:5a:c2:b4:ec:8a:34:a8:62:63:6e:cb:f4:fd: d6:18:56:4b:d0:4c:ea:86:ba:c9:94:7e:33:a3:52: 58:15:d4:38:6a:ef:f3:c9:fa:1f:2c:54:34:f2:63: 9f:7c:50:a6:6f:0d:61:10:f0:32:4b:f1:7a:2c:eb: 1c:3f:fe:c6:11:0a:28:c5:76:a4:d3:47:95:20:fc: eb:d0:47:7a:15:c1:e5:4f:8d:23:6e:7b:a3:d2:9a: 46:b0:18:a2:b9:fe:c0:9b:f5:b5:21:e6:20:90:5d: 02:b5:00:2f:a9:1b:59:df:87:79:eb:67:8e:4d:c3: b6:79:2c:c5:d1:41:fe:79:74:17:71:3e:0d:a5:f6: d1:24:18:39:f3:20:0c:ca:42:5d:b5:8a:79:7c:16: 92:cb:97:cd:89:78:f3:a8:ad:ea:13:13:f6:8c:09: 24:35:cb:af:e6:85:9f:52:2d:79:ac:33:e6:82:a6: 9d:4f:73:3c:3e:c8:54:71:fc:8d:95:f6:9f:20:fe: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:3E:8E:CC:95:F7:2D:15:A5:F4:F2:9C:74:17:BA:A5:67:E9:2A:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/4e591b5e-6587-3fb5-a6d8-5dde2b827129.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.98.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2d:e0:8c:09:46:49:b1:1b:75:93:fd:d2:91:b9:d1:22:15: 24:bc:60:a3:c8:84:9c:08:6e:62:13:ee:68:01:98:fc:00:08: 93:d7:d7:0a:5f:3f:f3:70:17:a2:75:e2:cc:31:6a:cf:8e:e7: 00:6d:5c:6e:6c:17:da:8c:9a:df:4b:05:63:25:92:ec:f9:99: d5:ba:20:4f:7c:43:af:87:ef:5a:e5:63:0c:ad:c6:12:7c:d7: f1:92:28:c8:1e:4b:d9:73:f2:4a:40:19:4d:31:c5:90:3d:13: 9c:28:d6:b1:c8:a5:2f:4c:b3:4b:e2:99:80:45:06:3f:31:99: 75:f0:c2:09:1a:e6:1e:12:88:21:df:d8:01:db:ed:30:cf:45: 70:19:87:ee:29:13:0f:55:73:98:bb:80:c0:af:bb:41:e5:ff: 0f:6a:c4:1c:f3:1c:38:19:9a:fc:77:04:59:f7:26:08:90:2a: 64:c1:7e:39:2d:b8:ca:bb:56:df:33:86:f1:97:10:92:71:2b: 42:1f:3a:44:cd:67:11:d3:dd:e5:d1:f0:4f:f6:29:7e:d5:44: 57:4c:33:b0:77:5f:77:cc:1f:37:28:54:fa:79:37:d9:f7:0b: d2:26:ac:5f:9a:7c:03:73:36:de:6f:03:c0:0b:0a:55:8a:46: 67:72:b4:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2j1wfinQY/AhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk NjUzMDA1YTMtZjg1Ni00M2JiLWFkNGEtZTAwZWMxMjZmZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7D887+suiT1B/1MuJybN38NwdUfnx5Parb/ i2GJUmXt77d71v80F3AN1YKBMeo3BzoVy61XrIIWHXTYLlrCtOyKNKhiY27L9P3W GFZL0EzqhrrJlH4zo1JYFdQ4au/zyfofLFQ08mOffFCmbw1hEPAyS/F6LOscP/7G EQooxXak00eVIPzr0Ed6FcHlT40jbnuj0ppGsBiiuf7Am/W1IeYgkF0CtQAvqRtZ 34d562eOTcO2eSzF0UH+eXQXcT4NpfbRJBg58yAMykJdtYp5fBaSy5fNiXjzqK3q ExP2jAkkNcuv5oWfUi15rDPmgqadT3M8PshUcfyNlfafIP70hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQ+jsyV9y0VpfTynHQXuqVn6SpsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNGU1OTFiNWUtNjU4Ny0z ZmI1LWE2ZDgtNWRkZTJiODI3MTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8t4IwJRkmxG3WT/dKRudEiFSS8YKPIhJwIbmIT7mgBmPwACJPX1wpf P/NwF6J14swxas+O5wBtXG5sF9qMmt9LBWMlkuz5mdW6IE98Q6+H71rlYwytxhJ8 1/GSKMgeS9lz8kpAGU0xxZA9E5wo1rHIpS9Ms0vimYBFBj8xmXXwwgka5h4SiCHf 2AHb7TDPRXAZh+4pEw9Vc5i7gMCvu0Hl/w9qxBzzHDgZmvx3BFn3JgiQKmTBfjkt uMq7Vt8zhvGXEJJxK0IfOkTNZxHT3eXR8E/2KX7VRFdMM7B3X3fMHzcoVPp5N9n3 C9ImrF+afANzNt5vA8ALClWKRmdytG4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:13 2026 by rpki-client