$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa File: 80a272c9-5f45-3f5b-b597-eef2874f8eab.roa (raw, json) Hash identifier: ksc0JoV26kxsJBS+y9I5UdgegyWMlCqjf5mK0uwPOAk= Subject key identifier: 17:1D:13:8C:53:FE:27:BD:1A:64:D3:8A:62:21:A7:49:32:8A:CE:F1 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A244FC86288F1279D4740 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 17275 IP address blocks: 161.107.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:24:4f:c8:62:88:f1:27:9d:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=0b915c1e-487f-470e-988f-c74854b01c18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:30:15:47:e6:29:b8:d6:27:de:16:b5:44:de: ce:18:eb:50:b8:c5:ac:66:42:7e:2b:9c:05:a8:34: b9:5f:6c:1a:d5:28:e1:47:93:af:8e:c1:fe:25:37: 2f:32:3f:d9:75:c6:e2:78:0a:d9:5c:d4:8e:b4:a3: 10:2b:90:36:fe:8c:a4:c3:1f:a7:b7:28:07:75:b6: c4:03:b6:80:df:d3:76:48:35:c0:7e:e7:15:69:85: f4:82:7b:19:9a:31:a0:cf:97:ed:7e:75:05:b5:22: eb:bb:00:94:40:e7:6d:75:8e:28:69:5c:5c:c8:fc: 58:fc:31:7b:1d:4c:9f:5b:40:6f:bb:9e:28:a0:c1: 2a:df:76:6a:2a:d1:52:80:45:42:1e:1d:bb:3e:56: 1f:82:04:dc:4c:de:7a:63:e5:97:25:21:d7:d9:65: 82:84:f0:f9:e9:a5:63:bf:35:f9:07:3a:df:3c:4c: 8a:dc:03:e2:03:04:ab:8f:93:2e:f0:5f:fa:1a:c5: 20:dc:a3:fc:56:56:dd:24:b9:b6:9f:0a:84:cb:1a: 1f:d2:13:fc:55:63:42:b2:f6:f9:48:3a:2a:03:63: 3b:fd:dc:e4:f8:6b:dc:71:2d:85:85:22:24:b4:07: e6:2c:85:29:88:6d:57:fd:c3:01:57:58:3b:c5:22: 76:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1D:13:8C:53:FE:27:BD:1A:64:D3:8A:62:21:A7:49:32:8A:CE:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/80a272c9-5f45-3f5b-b597-eef2874f8eab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.64.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:b8:c6:2f:1c:de:4b:f8:58:a1:57:e5:cb:5f:80:6f:87:8f: 57:5a:74:8f:20:6e:56:a0:af:de:a9:00:5d:fa:f6:0b:40:a5: 15:d1:e8:96:29:26:81:80:24:8c:7e:4f:55:4e:c8:fa:6b:40: 9f:d3:9e:9f:b2:09:e1:37:2a:0c:7c:8b:4b:a8:5d:d0:cb:7b: 1b:8f:fc:02:31:ce:bb:4f:a1:10:4a:54:4d:4e:ac:18:41:a3: f5:f8:64:6c:44:0c:69:f7:c2:8c:c0:9f:b8:6f:ef:d4:54:44: 08:97:e5:13:dc:e3:95:d9:ea:a8:08:a1:06:7d:f9:44:1c:41: c1:09:28:75:11:be:8c:56:51:c0:6b:ca:29:3f:0e:91:3b:ae: 76:e0:99:9e:42:5d:db:ae:b6:8d:8e:e0:4c:2b:9f:98:99:0c: 95:a9:0c:90:1b:df:66:b8:b0:29:4e:8a:59:f9:ea:7e:f2:36: 77:81:e4:01:a2:1e:ef:7e:c3:ff:80:3f:21:68:9f:c2:b0:57: 74:1c:39:e9:e9:50:0c:98:10:17:5f:ab:05:4a:48:ad:6b:b3: 39:0d:d4:b7:7a:e9:0b:af:3b:68:c5:07:80:9e:7e:8a:f5:28: 27:05:a1:63:9a:1c:b9:61:22:45:98:79:e4:88:d4:1b:4d:6b: 1a:1c:e3:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCiRPyGKI8SedR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk MGI5MTVjMWUtNDg3Zi00NzBlLTk4OGYtYzc0ODU0YjAxYzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDAVR+YpuNYn3ha1RN7OGOtQuMWsZkJ+K5wF qDS5X2wa1SjhR5OvjsH+JTcvMj/ZdcbieArZXNSOtKMQK5A2/oykwx+ntygHdbbE A7aA39N2SDXAfucVaYX0gnsZmjGgz5ftfnUFtSLruwCUQOdtdY4oaVxcyPxY/DF7 HUyfW0Bvu54ooMEq33ZqKtFSgEVCHh27PlYfggTcTN56Y+WXJSHX2WWChPD56aVj vzX5BzrfPEyK3APiAwSrj5Mu8F/6GsUg3KP8VlbdJLm2nwqEyxof0hP8VWNCsvb5 SDoqA2M7/dzk+GvccS2FhSIktAfmLIUpiG1X/cMBV1g7xSJ25wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcdE4xT/ie9GmTTimIhp0kyis7xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvODBhMjcyYzktNWY0NS0z ZjViLWI1OTctZWVmMjg3NGY4ZWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALm4xi8c3kv4WKFX5ctfgG+Hj1dadI8gblagr96pAF369gtApRXR6JYp JoGAJIx+T1VOyPprQJ/Tnp+yCeE3Kgx8i0uoXdDLexuP/AIxzrtPoRBKVE1OrBhB o/X4ZGxEDGn3wozAn7hv79RURAiX5RPc45XZ6qgIoQZ9+UQcQcEJKHURvoxWUcBr yik/DpE7rnbgmZ5CXduuto2O4Ewrn5iZDJWpDJAb32a4sClOiln56n7yNneB5AGi Hu9+w/+APyFon8KwV3QcOenpUAyYEBdfqwVKSK1rszkN1Ld66QuvO2jFB4Cefor1 KCcFoWOaHLlhIkWYeeSI1BtNaxoc44g= -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:13 2026 by rpki-client