$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa File: 979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa (raw, json) Hash identifier: Oo8Lw5s1qR5syTny49hVmNMaHkHd+dZn14W1Si9LDW4= Subject key identifier: 1A:FB:EF:1B:26:4A:93:2C:67:3A:EE:39:99:C8:57:00:93:23:CC:F2 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F549D5EB232D98B702663D900 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 17275 IP address blocks: 161.107.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:5e:b2:32:d9:8b:70:26:63:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=7eb1e97a-6d34-420c-ac6c-e4b615adedac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ab:dc:d5:de:93:61:7d:58:51:3d:f8:5a:9e: ea:6a:a8:17:70:64:96:bd:70:45:6e:68:f2:25:e9: f3:bc:80:e7:e6:71:49:c4:10:57:b0:83:6a:d2:0f: 5f:21:30:15:ba:2b:b8:69:1c:e0:e5:99:ef:2e:74: 32:cc:fa:71:d1:86:a1:65:5f:b1:44:11:21:0b:98: e0:65:a5:05:e9:fb:0a:52:ba:da:75:e5:ae:5a:60: 7e:5f:14:50:a3:a8:d7:9a:f7:95:22:51:cd:b5:19: b0:15:d4:0d:42:a0:13:2a:4c:1c:d1:4f:2e:0d:de: 76:9e:b2:1e:46:01:2f:43:58:50:25:39:ff:cb:32: d2:90:db:be:a3:d8:38:b2:f2:b6:ff:e3:01:44:08: c6:6d:a4:3f:ba:95:29:92:25:8b:ce:1c:01:4d:22: 53:c2:5b:42:ff:e0:6d:2d:8a:09:0b:4f:7a:d7:50: 89:62:6a:65:62:36:eb:14:7a:e7:48:ba:74:1c:ef: 20:11:3c:ed:36:ca:ed:32:e0:f0:ee:76:b3:a9:28: d6:c1:b6:e2:0c:ee:69:5c:e1:a3:29:d2:41:ca:f3: 9e:17:05:00:ee:12:89:d7:5c:c7:c1:bd:3d:ea:f1: 57:15:b0:a9:d7:3e:ee:a4:58:8c:cd:a5:78:59:31: 78:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FB:EF:1B:26:4A:93:2C:67:3A:EE:39:99:C8:57:00:93:23:CC:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/979f70ee-44b8-3aaf-a1eb-ba1233c71944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:d2:d7:9c:71:9a:52:5c:a4:fc:f0:61:53:a3:70:2e:81:0a: 2e:ea:52:75:fd:5b:65:a7:f5:a4:38:c6:6f:31:35:1c:4a:08: 2f:c6:03:1c:44:e2:a7:79:a6:db:67:96:2c:62:50:06:ed:ff: 2a:65:bb:2b:f7:8a:c1:2d:24:3d:13:fa:f0:b3:54:a5:4f:d9: a6:69:a2:f6:8c:18:2e:60:e8:6e:74:fa:24:57:92:ce:8c:e8: 7b:61:76:40:95:40:5d:fa:c5:7f:85:62:31:97:df:73:b6:a0: 98:62:85:bd:56:fc:5b:48:f0:9a:91:a0:8a:98:d6:21:db:87: e2:5a:5d:bd:72:df:7f:5a:f5:ce:13:bf:9c:84:32:c5:32:7b: 67:17:cf:13:75:ca:4e:8e:a1:6a:03:e7:68:27:78:4e:e5:08: 62:78:cd:16:fd:e1:9b:bb:a3:b7:14:e7:95:65:b5:94:eb:25: 94:06:bc:98:20:f7:d4:a2:25:35:6d:0a:e4:fe:3a:8d:15:24: 12:a5:da:77:65:f5:99:f0:b4:51:f3:ea:34:fb:17:a5:10:6f: 6d:74:dd:a7:93:5e:6c:25:e4:93:d1:99:f6:b4:48:ed:18:54: 59:9e:78:ae:60:15:34:ed:da:bd:80:cf:a5:6b:e1:6e:10:12: 6d:16:44:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnV6yMtmLcCZj2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk N2ViMWU5N2EtNmQzNC00MjBjLWFjNmMtZTRiNjE1YWRlZGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvavc1d6TYX1YUT34Wp7qaqgXcGSWvXBFbmjy JenzvIDn5nFJxBBXsINq0g9fITAVuiu4aRzg5ZnvLnQyzPpx0YahZV+xRBEhC5jg ZaUF6fsKUrradeWuWmB+XxRQo6jXmveVIlHNtRmwFdQNQqATKkwc0U8uDd52nrIe RgEvQ1hQJTn/yzLSkNu+o9g4svK2/+MBRAjGbaQ/upUpkiWLzhwBTSJTwltC/+Bt LYoJC09611CJYmplYjbrFHrnSLp0HO8gETztNsrtMuDw7nazqSjWwbbiDO5pXOGj KdJByvOeFwUA7hKJ11zHwb096vFXFbCp1z7upFiMzaV4WTF4+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBr77xsmSpMsZzruOZnIVwCTI8zyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTc5ZjcwZWUtNDRiOC0z YWFmLWExZWItYmExMjMzYzcxOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITS15xxmlJcpPzwYVOjcC6BCi7qUnX9W2Wn9aQ4xm8xNRxKCC/GAxxE 4qd5pttnlixiUAbt/ypluyv3isEtJD0T+vCzVKVP2aZpovaMGC5g6G50+iRXks6M 6HthdkCVQF36xX+FYjGX33O2oJhihb1W/FtI8JqRoIqY1iHbh+JaXb1y339a9c4T v5yEMsUye2cXzxN1yk6OoWoD52gneE7lCGJ4zRb94Zu7o7cU55VltZTrJZQGvJgg 99SiJTVtCuT+Oo0VJBKl2ndl9ZnwtFHz6jT7F6UQb2103aeTXmwl5JPRmfa0SO0Y VFmeeK5gFTTt2r2Az6Vr4W4QEm0WRDo= -----END CERTIFICATE-----Generated at Thu Oct 8 12:24:54 2026 by rpki-client