$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa File: 80a272c9-5f45-3f5b-b597-eef2874f8eab.roa (raw, json) Hash identifier: hOh9uSmACxrZXcIHF73ecmPp8EVxrOJty89bjDulyyk= Subject key identifier: 9B:F7:B6:88:9E:C9:EF:16:AE:27:64:02:15:89:B7:C7:0C:15:AF:C3 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F549D524D40BA04A026A4D550 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 17275 IP address blocks: 161.107.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:52:4d:40:ba:04:a0:26:a4:d5:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=0f91d433-1314-47eb-be6f-7a76b051c93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b4:4b:e8:e4:57:04:5f:26:36:15:64:e5:25: 52:5d:c4:ba:0d:55:02:da:b2:fd:78:f7:af:1d:88: 1c:87:3b:6a:40:73:9c:03:f9:48:8b:d6:7f:3d:d6: b1:da:6e:16:bf:88:7a:7d:e0:a2:4a:76:69:06:19: 81:39:36:87:4a:17:44:7d:a1:a0:21:b1:66:84:73: ad:cd:43:0b:75:e5:39:2e:0d:27:1e:a6:ba:f0:7e: e3:92:44:f5:b6:20:e2:df:4b:ee:8d:d6:a9:86:f2: 22:26:01:9b:df:8f:ea:6d:d7:5d:e8:a7:10:85:51: 66:a6:6f:29:37:3b:35:5a:b6:24:5b:23:b2:e6:fb: 55:b0:3c:12:21:4a:3b:6c:2b:c3:2a:6c:f7:e6:59: ca:89:08:e8:32:f2:5b:fb:79:ec:64:8b:94:ed:a5: de:90:3f:21:54:2c:c6:8d:29:9e:73:38:ba:d4:b3: ae:09:89:a8:7e:25:b0:87:27:dd:1f:7f:90:f0:b5: ff:c7:b4:ff:19:c5:12:ca:f7:fb:01:98:a6:79:f6: 82:52:0f:0c:46:c7:92:3b:eb:9b:36:22:d2:34:cd: f8:c1:60:f5:44:f1:e0:b8:84:e9:d6:50:66:e9:23: 1e:ef:13:78:a9:9c:b1:13:79:b1:d5:86:aa:4a:c0: 95:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:F7:B6:88:9E:C9:EF:16:AE:27:64:02:15:89:B7:C7:0C:15:AF:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:93:42:68:1a:0c:42:6f:2a:1c:8d:25:25:6c:6e:77:f6:7a: 3e:a8:1e:78:5e:2f:26:1a:96:0d:c5:a9:f2:5b:28:e9:b6:07: 46:45:5f:d4:aa:8c:89:92:23:4e:44:5e:3c:37:3f:bb:27:1a: be:29:61:36:f5:6e:44:f5:07:12:6a:e6:61:80:f2:37:0b:93: 54:74:14:bf:c6:b5:5c:70:a6:31:dc:dc:fa:89:5d:ae:58:c9: 83:98:57:88:e5:ce:16:61:67:a0:15:e6:9a:75:2e:ba:7e:f8: 86:b0:5d:fe:cc:01:a8:c3:f9:dd:ac:89:2a:a8:7b:7d:73:4c: 20:38:4a:89:68:35:f9:26:41:c0:f9:36:1e:84:69:1c:06:10: e9:51:ae:63:a8:ea:a2:bb:c4:f9:e5:d6:04:3f:e7:de:c1:14: 6c:a0:9d:ff:19:14:fc:d0:7f:a2:73:1c:10:b6:94:14:6b:98: f6:72:43:7a:b6:31:22:4c:3b:05:60:40:d4:5e:f8:79:4f:87: b4:fb:b5:fb:8e:c8:e4:e8:67:a4:be:42:ca:d9:ed:98:72:26: c9:1a:8e:b7:99:d4:a9:ba:3a:48:9d:75:c2:ff:1e:d0:26:dd: db:08:cb:c5:83:e1:d5:55:a6:60:e4:3b:ac:b3:e9:71:19:d0: a4:2d:7c:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnVJNQLoEoCak1VAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MGY5MWQ0MzMtMTMxNC00N2ViLWJlNmYtN2E3NmIwNTFjOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrRL6ORXBF8mNhVk5SVSXcS6DVUC2rL9ePev HYgchztqQHOcA/lIi9Z/Pdax2m4Wv4h6feCiSnZpBhmBOTaHShdEfaGgIbFmhHOt zUMLdeU5Lg0nHqa68H7jkkT1tiDi30vujdaphvIiJgGb34/qbddd6KcQhVFmpm8p Nzs1WrYkWyOy5vtVsDwSIUo7bCvDKmz35lnKiQjoMvJb+3nsZIuU7aXekD8hVCzG jSmeczi61LOuCYmofiWwhyfdH3+Q8LX/x7T/GcUSyvf7AZimefaCUg8MRseSO+ub NiLSNM34wWD1RPHguITp1lBm6SMe7xN4qZyxE3mx1YaqSsCVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJv3toieye8WridkAhWJt8cMFa/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvODBhMjcyYzktNWY0NS0z ZjViLWI1OTctZWVmMjg3NGY4ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmTQmgaDEJvKhyNJSVsbnf2ej6oHnheLyYalg3FqfJbKOm2B0ZFX9Sq jImSI05EXjw3P7snGr4pYTb1bkT1BxJq5mGA8jcLk1R0FL/GtVxwpjHc3PqJXa5Y yYOYV4jlzhZhZ6AV5pp1Lrp++IawXf7MAajD+d2siSqoe31zTCA4SoloNfkmQcD5 Nh6EaRwGEOlRrmOo6qK7xPnl1gQ/597BFGygnf8ZFPzQf6JzHBC2lBRrmPZyQ3q2 MSJMOwVgQNRe+HlPh7T7tfuOyOToZ6S+QsrZ7ZhyJskajreZ1Km6OkiddcL/HtAm 3dsIy8WD4dVVpmDkO6yz6XEZ0KQtfHY= -----END CERTIFICATE-----Generated at Sun Oct 4 08:38:39 2026 by rpki-client