$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa File: 877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa (raw, json) Hash identifier: EQeZVnD/MkyocDuRZvD1yb6B+E2UK+aCTc0fnhlu9wE= Subject key identifier: 4C:40:FC:EC:EB:C5:FB:A3:E5:D6:30:AF:D2:9E:04:38:81:56:BB:F4 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D316F6C7207AF304F72B263F4 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 14618 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:6c:72:07:af:30:4f:72:b2:63:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=34512f40-4014-4f42-be25-69295315584e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9b:07:c1:1f:6d:9b:9d:de:a2:fb:6f:c1:13: bc:f7:8b:d9:26:95:55:d1:22:11:4e:a8:3c:4f:fb: f5:f4:70:88:69:8b:d7:78:70:5d:e2:cc:7c:5f:2b: b5:13:14:48:48:43:2e:90:8c:f0:62:f7:9a:7b:95: 2a:9b:24:11:45:36:8e:e0:99:69:28:c8:83:9d:ef: 22:a1:83:07:52:82:7b:3b:0a:09:53:e0:dd:04:91: ad:c8:1b:f2:3d:bf:c7:54:f6:16:07:cf:5e:40:ec: a4:2f:bd:79:af:7e:9b:db:92:44:57:b6:d5:2c:61: 7d:72:da:ec:98:02:94:80:fd:6e:18:cb:e3:f3:a7: 8b:de:2c:59:ae:ef:30:88:9d:e0:90:d7:4a:59:86: d5:74:87:33:b8:0f:79:70:9b:08:75:92:89:b1:50: 6e:e4:24:07:47:1a:41:75:18:9e:52:56:c7:f3:d6: 7c:04:fb:90:1f:de:f4:b4:83:fa:14:47:9f:84:6f: 1d:4d:20:36:d9:e3:18:84:f3:4f:01:7f:96:a1:ff: 9d:1f:1c:c4:30:07:e0:9a:43:8d:c5:f0:8d:6d:21: 78:63:27:58:37:6b:2f:f1:30:98:7d:c1:93:9c:49: b3:13:77:bd:b4:3d:99:43:46:88:11:90:a4:6e:70: c1:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:40:FC:EC:EB:C5:FB:A3:E5:D6:30:AF:D2:9E:04:38:81:56:BB:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:0e:60:81:53:e0:b7:21:20:4c:85:8a:fe:7f:0c:97:62:44: 98:27:c8:52:3a:5d:62:f0:0d:6c:bc:08:3b:00:a7:d9:8a:38: a2:7e:d7:c2:2a:d2:81:90:93:81:33:be:93:18:73:53:95:5c: aa:e5:1d:db:64:54:ad:d9:17:b5:5b:8e:7e:ff:08:58:d8:2b: 6c:36:6d:e2:b2:22:12:f2:ad:74:3d:5a:f1:70:2c:68:82:c7: 08:8d:81:5d:f6:1d:64:11:4d:19:1e:51:1f:3a:9f:4c:e5:e2: 3c:7a:8b:aa:36:93:b6:9d:f1:3e:4d:82:e5:9d:42:81:be:79: 66:85:13:55:e0:b7:da:89:75:9b:77:03:aa:31:f7:14:89:d9: 34:5b:0a:84:f4:5d:69:7a:7c:78:9b:0f:e8:0f:ea:7d:9b:24: ae:00:94:0b:62:70:2e:ba:f2:a4:d2:ba:2c:da:ac:99:fc:b3: 9c:9e:58:c5:58:b7:0f:a9:2b:a6:fd:1c:90:39:01:d7:32:b2: 03:5a:ee:6e:c6:5f:87:bb:3a:17:29:a1:53:3a:e2:ce:1d:78: e1:34:89:8a:0d:05:6f:be:c4:34:3f:34:01:6e:1c:8a:76:8c: 6c:1d:b9:77:43:1b:f8:08:cc:ba:32:23:73:35:00:1a:fb:23: 82:ff:51:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb2xyB68wT3KyY/QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk MzQ1MTJmNDAtNDAxNC00ZjQyLWJlMjUtNjkyOTUzMTU1ODRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpsHwR9tm53eovtvwRO894vZJpVV0SIRTqg8 T/v19HCIaYvXeHBd4sx8Xyu1ExRISEMukIzwYveae5UqmyQRRTaO4JlpKMiDne8i oYMHUoJ7OwoJU+DdBJGtyBvyPb/HVPYWB89eQOykL715r36b25JEV7bVLGF9ctrs mAKUgP1uGMvj86eL3ixZru8wiJ3gkNdKWYbVdIczuA95cJsIdZKJsVBu5CQHRxpB dRieUlbH89Z8BPuQH970tIP6FEefhG8dTSA22eMYhPNPAX+Wof+dHxzEMAfgmkON xfCNbSF4YydYN2sv8TCYfcGTnEmzE3e9tD2ZQ0aIEZCkbnDBFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExA/Ozrxfuj5dYwr9KeBDiBVrv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvODc3YmI3MmEtMTA0Ni0z NmQ1LTgzYzAtY2RiM2ZkM2JhMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYOYIFT4LchIEyFiv5/DJdiRJgnyFI6XWLwDWy8CDsAp9mKOKJ+18Iq 0oGQk4EzvpMYc1OVXKrlHdtkVK3ZF7Vbjn7/CFjYK2w2beKyIhLyrXQ9WvFwLGiC xwiNgV32HWQRTRkeUR86n0zl4jx6i6o2k7ad8T5NguWdQoG+eWaFE1Xgt9qJdZt3 A6ox9xSJ2TRbCoT0XWl6fHibD+gP6n2bJK4AlAticC668qTSuizarJn8s5yeWMVY tw+pK6b9HJA5AdcysgNa7m7GX4e7OhcpoVM64s4deOE0iYoNBW++xDQ/NAFuHIp2 jGwduXdDG/gIzLoyI3M1ABr7I4L/UQQ= -----END CERTIFICATE-----Generated at Thu Mar 26 03:49:12 2026 by rpki-client