$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa File: 6d9a77e0-b762-3686-a999-6668700e8c1a.roa (raw, json) Hash identifier: RdfPdWDh2ExqQgXOTfv3exgVZg8JEaNtLYeFhevAUpI= Subject key identifier: 62:1A:3C:1E:36:F1:AC:EC:2E:74:B7:29:4E:8D:BB:A2:BF:10:38:AC Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A39B41A24723EEAD8B0C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 17275 IP address blocks: 161.107.112.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:39:b4:1a:24:72:3e:ea:d8:b0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=94bcddec-2beb-4a2a-91c4-b232c7de1cef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:12:70:b5:3e:e7:9b:3e:2c:a4:7a:66:c0: 34:4a:e4:72:95:40:53:17:09:69:4f:fc:1a:d3:a6: 7f:db:0d:64:46:a4:83:df:5c:6c:40:32:bd:cf:e6: cc:c5:7c:74:06:e1:c8:4f:02:19:51:cc:b0:c8:a3: f8:66:22:1b:06:12:fa:6d:50:85:78:c7:a5:85:fe: 6d:0b:77:69:ca:6b:9c:b1:74:42:01:c9:ce:4c:44: bc:d4:19:b2:4b:17:4b:85:46:86:5c:99:d8:34:ff: 62:b7:7b:e9:d7:28:b8:b2:5c:7d:18:92:be:08:3b: d5:0e:71:c3:30:e0:27:43:1e:06:d3:84:bd:38:2c: c0:db:5d:eb:e5:19:3f:24:80:21:fc:30:c2:ac:a5: b1:0d:9d:a2:7a:fb:f4:93:8a:7e:34:57:1f:f7:70: 56:cb:2c:23:f4:cf:5e:a5:53:8a:7c:5d:68:c5:82: 3f:9a:b8:7d:ac:55:13:58:9b:25:2f:80:3c:d1:55: de:57:b6:8b:e6:94:b9:e2:5c:70:d1:fa:fa:95:d9: 58:9e:99:14:d9:73:9b:6b:b7:06:b1:56:da:cc:16: 24:9f:24:b7:89:da:6a:a7:d8:38:62:c6:75:eb:cf: 90:53:0f:7c:31:58:11:95:73:0e:d3:07:9f:a0:c7: 80:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:1A:3C:1E:36:F1:AC:EC:2E:74:B7:29:4E:8D:BB:A2:BF:10:38:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/6d9a77e0-b762-3686-a999-6668700e8c1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:39:41:95:4f:77:66:d5:49:b2:c6:7f:2a:7e:75:71:f9:d2: 7f:da:7e:a5:f3:ae:e8:e0:62:e1:26:25:ff:dd:dd:0c:f1:29: 29:59:be:3a:03:2d:7d:b1:42:76:24:4e:52:c6:0c:5c:69:c0: ab:d0:d5:2a:70:28:b2:19:1d:39:e3:a2:ab:bf:73:bf:72:b7: 26:b4:92:17:a4:5f:cf:f6:1c:b3:a5:62:cd:9a:37:db:a2:d1: 9f:cf:eb:36:3a:c5:bd:5e:1c:d9:14:4f:a8:5b:89:3a:30:d7: 8d:a3:c0:4a:24:87:d7:b3:09:d1:67:db:5d:9e:0a:ce:55:38: a4:71:42:96:ed:1d:56:f2:5a:84:78:42:15:b0:50:50:57:85: c9:d8:22:82:25:8d:07:ff:ac:65:f4:87:b2:a9:82:69:3d:77: b4:5f:d5:49:28:61:a7:44:39:a2:f0:56:5f:b1:30:40:2b:f7: 8b:b7:fe:e3:dc:6c:d4:62:8a:90:da:c2:b3:3c:95:ff:1a:58: 8c:6e:c5:91:f1:39:a8:26:26:17:cc:80:5f:af:b5:b6:da:ae: 71:22:79:12:5b:29:d2:fd:03:9d:65:fa:82:43:70:e0:3b:30: b2:21:c7:68:6a:3a:f6:44:95:43:07:c4:b3:88:3d:bf:65:49: 81:3b:95:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCjm0GiRyPurYsMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk OTRiY2RkZWMtMmJlYi00YTJhLTkxYzQtYjIzMmM3ZGUxY2VmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLcScLU+55s+LKR6ZsA0SuRylUBTFwlpT/wa 06Z/2w1kRqSD31xsQDK9z+bMxXx0BuHITwIZUcywyKP4ZiIbBhL6bVCFeMelhf5t C3dpymucsXRCAcnOTES81BmySxdLhUaGXJnYNP9it3vp1yi4slx9GJK+CDvVDnHD MOAnQx4G04S9OCzA213r5Rk/JIAh/DDCrKWxDZ2ievv0k4p+NFcf93BWyywj9M9e pVOKfF1oxYI/mrh9rFUTWJslL4A80VXeV7aL5pS54lxw0fr6ldlYnpkU2XOba7cG sVbazBYknyS3idpqp9g4YsZ168+QUw98MVgRlXMO0wefoMeARQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIaPB428azsLnS3KU6Nu6K/EDisMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNmQ5YTc3ZTAtYjc2Mi0z Njg2LWE5OTktNjY2ODcwMGU4YzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEoWtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADw5QZVPd2bVSbLGfyp+dXH50n/afqXzrujgYuEmJf/d3QzxKSlZvjoD LX2xQnYkTlLGDFxpwKvQ1SpwKLIZHTnjoqu/c79ytya0khekX8/2HLOlYs2aN9ui 0Z/P6zY6xb1eHNkUT6hbiTow142jwEokh9ezCdFn212eCs5VOKRxQpbtHVbyWoR4 QhWwUFBXhcnYIoIljQf/rGX0h7Kpgmk9d7Rf1UkoYadEOaLwVl+xMEAr94u3/uPc bNRiipDawrM8lf8aWIxuxZHxOagmJhfMgF+vtbbarnEieRJbKdL9A51l+oJDcOA7 MLIhx2hqOvZElUMHxLOIPb9lSYE7lR0= -----END CERTIFICATE-----Generated at Thu Mar 26 18:07:11 2026 by rpki-client