$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa File: 5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa (raw, json) Hash identifier: xcVlWMn3QUYcwqnlhbdQjH1Cp144JVScOhJaav6ezbU= Subject key identifier: FC:7B:90:2A:44:6D:50:29:D3:A0:65:B7:4C:1A:AE:3D:A2:C6:2D:2D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A294A3FE0A06F41047AF8 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 17275 IP address blocks: 161.107.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:29:4a:3f:e0:a0:6f:41:04:7a:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=aa419899-d0b9-4cf1-8083-f9da791a6fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:78:2f:44:e4:87:8b:5c:8a:b3:87:92:e5:23: ed:25:ce:8f:0d:06:c5:85:c6:eb:22:57:3e:12:71: 36:ac:31:4c:af:93:69:b1:51:4a:ea:77:83:7b:e2: 81:2d:d1:82:d7:6a:8b:fa:52:47:c6:74:1b:8e:f0: 74:92:73:e3:5a:23:77:17:14:d7:ad:7b:9f:e8:5f: 88:35:0d:4e:ba:bc:3a:2f:77:cb:67:32:86:a0:d5: ea:6f:04:99:44:d7:6b:94:96:8c:48:f3:3f:ad:c0: cf:93:f9:17:ed:7f:4b:ad:cc:ca:81:3c:2f:16:4f: 44:70:f7:3a:25:7c:a1:96:f1:84:49:a5:4f:9e:4b: 81:9a:b0:7e:8b:46:2c:1c:46:61:35:d5:94:1d:5f: c7:e3:10:f9:c6:6f:e6:d4:0b:df:af:68:ac:04:46: 00:c9:0b:51:d6:5e:bd:51:9b:b7:c8:da:80:9c:b5: c3:2a:3f:8a:a4:98:6a:f7:bd:c2:9e:b7:ef:f9:51: a1:29:c7:2a:60:3f:46:74:be:21:0a:fe:4c:09:2b: 2c:28:d5:a3:4d:73:af:f8:5c:c5:ef:41:94:6f:97: 02:61:de:6a:91:09:86:9e:fa:62:c6:25:6b:f6:f7: 5e:01:0b:ae:07:64:0f:c3:bb:38:58:77:07:80:1a: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:7B:90:2A:44:6D:50:29:D3:A0:65:B7:4C:1A:AE:3D:A2:C6:2D:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/5e43ac0c-a8c1-3ab8-92ef-a906a8443bf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:25:cd:ec:e5:81:c9:35:ee:2c:2c:3b:9f:9e:40:4e:c5:89: 64:36:2a:1e:29:80:11:7b:6a:00:52:67:8b:69:d4:96:1f:5a: 1c:9d:4c:42:b8:1a:db:56:42:ee:59:e5:fb:ab:0a:85:3f:57: 19:13:0d:14:06:36:e0:7d:42:b8:44:4a:f8:c4:2e:15:28:a5: 49:50:b4:6f:63:9a:e1:c0:18:da:29:46:f9:95:0d:20:e3:f5: 1b:31:7b:65:4e:08:b7:58:52:91:fe:5e:c6:89:84:76:ee:e0: 58:9f:0a:3a:e0:11:a0:ce:02:96:4d:5a:09:b1:11:6e:da:2b: 7a:7a:1b:1d:29:5c:00:1e:b9:bd:62:ea:cf:61:4c:11:eb:bf: 98:65:7d:3a:c6:85:7f:9f:5a:b5:b9:28:8b:34:a1:31:3c:3c: c6:ed:ed:30:24:eb:a5:df:03:13:1e:cf:88:7e:07:37:2f:d2: 68:f1:53:af:51:e5:36:5d:a1:5b:63:bc:b5:76:98:0f:88:83: 34:99:56:2b:d2:11:e7:47:fb:5f:b8:44:d7:37:ca:21:ac:8f: 30:d0:fa:eb:71:1f:0f:22:c4:04:43:d6:18:90:ba:cb:60:5a: cf:54:24:38:b5:64:87:9d:4e:71:f9:d6:75:6c:53:1e:be:9d: 28:d4:88:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCilKP+Cgb0EEevgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YWE0MTk4OTktZDBiOS00Y2YxLTgwODMtZjlkYTc5MWE2ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhngvROSHi1yKs4eS5SPtJc6PDQbFhcbrIlc+ EnE2rDFMr5NpsVFK6neDe+KBLdGC12qL+lJHxnQbjvB0knPjWiN3FxTXrXuf6F+I NQ1Ourw6L3fLZzKGoNXqbwSZRNdrlJaMSPM/rcDPk/kX7X9LrczKgTwvFk9EcPc6 JXyhlvGESaVPnkuBmrB+i0YsHEZhNdWUHV/H4xD5xm/m1Avfr2isBEYAyQtR1l69 UZu3yNqAnLXDKj+KpJhq973Cnrfv+VGhKccqYD9GdL4hCv5MCSssKNWjTXOv+FzF 70GUb5cCYd5qkQmGnvpixiVr9vdeAQuuB2QPw7s4WHcHgBo+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPx7kCpEbVAp06Blt0warj2ixi0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNWU0M2FjMGMtYThjMS0z YWI4LTkyZWYtYTkwNmE4NDQzYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK4lzezlgck17iwsO5+eQE7FiWQ2Kh4pgBF7agBSZ4tp1JYfWhydTEK4 GttWQu5Z5furCoU/VxkTDRQGNuB9QrhESvjELhUopUlQtG9jmuHAGNopRvmVDSDj 9Rsxe2VOCLdYUpH+XsaJhHbu4FifCjrgEaDOApZNWgmxEW7aK3p6Gx0pXAAeub1i 6s9hTBHrv5hlfTrGhX+fWrW5KIs0oTE8PMbt7TAk66XfAxMez4h+Bzcv0mjxU69R 5TZdoVtjvLV2mA+IgzSZVivSEedH+1+4RNc3yiGsjzDQ+utxHw8ixARD1hiQustg Ws9UJDi1ZIedTnH51nVsUx6+nSjUiPo= -----END CERTIFICATE-----Generated at Thu Mar 26 19:34:04 2026 by rpki-client