$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa File: b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa (raw, json) Hash identifier: Kf5QMeQqrGnTMofcUpqSrhdYWoGEqYhIz0VVZ6HtAts= Subject key identifier: 2B:E9:F9:0E:3E:0A:CE:6D:00:A7:3F:5E:9F:8E:0E:7E:A9:46:8B:E0 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A3D6013EDEAAC77D347A8 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 17275 IP address blocks: 161.107.24.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:3d:60:13:ed:ea:ac:77:d3:47:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=5ac12a9c-7282-4d96-bee7-74058be07422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:e0:e1:04:b6:91:f9:23:08:56:30:31:64:ee: 03:ee:ee:bd:93:44:61:18:92:98:ed:5f:77:4c:95: 26:93:2d:2a:79:43:a7:ba:85:ba:fe:95:45:98:fa: 01:3b:3e:1e:f4:55:da:8b:2b:f7:fe:94:03:09:85: 79:a5:a6:c4:7c:c8:44:fe:e5:8a:6c:7f:bf:a8:fb: ca:d2:11:ac:9e:5e:00:f1:57:79:07:6c:4f:30:5d: 3b:1e:19:90:2d:bb:ab:6b:ce:78:06:42:89:75:1b: 25:df:ec:3c:29:ac:1c:a3:da:f0:5a:71:a0:10:11: 01:7e:6c:f5:2b:6b:ae:55:78:e6:89:26:7c:59:19: c9:43:a9:df:92:fc:ff:fd:08:ef:2c:bc:cb:a1:e5: e8:a3:37:70:51:73:84:d0:ab:42:0c:3d:fe:4b:aa: 1c:39:0e:da:b6:45:b0:9d:c8:2d:df:71:60:8f:78: 39:d5:0a:c3:41:2f:c7:fe:35:e5:fc:e2:03:0f:9a: 5f:60:7b:ec:2f:eb:5b:39:77:ce:60:67:24:57:f9: 69:2b:95:66:4a:cd:5f:26:b3:c1:ee:e6:4d:0c:ac: 23:ab:fe:1f:b5:ae:05:22:d3:e6:a1:99:de:09:f0: b2:b9:56:d7:1a:d4:2c:23:ca:a0:4d:13:07:97:87: 52:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:F9:0E:3E:0A:CE:6D:00:A7:3F:5E:9F:8E:0E:7E:A9:46:8B:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/b3cbdff1-ce0b-345f-8063-f0aca1858b4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.24.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:86:16:55:fa:fd:85:d7:91:b1:c7:87:14:a8:62:47:b0:7b: ec:cf:52:51:93:57:fc:69:a7:f0:8f:23:c8:1d:8c:54:a7:a4: 08:6c:16:4f:8a:e9:a6:45:3a:70:b3:3e:93:1c:19:27:05:bd: 6a:87:42:1a:26:0b:d9:a0:4b:fa:a3:31:0b:b6:47:67:04:86: 53:34:51:70:56:03:80:8f:c4:2b:d3:8a:d2:f8:7a:63:03:ed: aa:8e:e4:95:d5:31:23:1b:5f:dd:b4:10:c4:98:54:01:ad:bf: 67:c1:3e:9d:1d:3a:5d:79:d0:aa:e7:c9:09:1f:6d:da:80:ec: 07:6f:c5:3f:5c:2d:67:e1:e8:5c:13:9e:7b:6d:33:7f:79:7c: 6d:b7:94:91:75:b4:5d:76:29:ae:1c:44:16:96:65:6b:0d:31: b3:a2:64:5a:b8:dd:b7:f4:94:ea:52:2e:ff:6a:9b:82:7a:df: cb:d1:9f:04:66:1b:ca:bb:32:61:29:36:6b:3e:a2:3d:af:c9: cd:c4:9e:9d:85:83:12:e8:2d:96:d7:d9:d1:e4:4c:c8:a0:b2: fb:26:c8:85:99:eb:fc:ef:bd:da:4a:e3:84:fc:33:de:a0:fb: 4b:f1:c6:d8:c8:12:41:1c:bf:f0:6b:c4:01:58:e8:5b:29:b4: f9:8a:6b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCj1gE+3qrHfTR6gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk NWFjMTJhOWMtNzI4Mi00ZDk2LWJlZTctNzQwNThiZTA3NDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+DhBLaR+SMIVjAxZO4D7u69k0RhGJKY7V93 TJUmky0qeUOnuoW6/pVFmPoBOz4e9FXaiyv3/pQDCYV5pabEfMhE/uWKbH+/qPvK 0hGsnl4A8Vd5B2xPMF07HhmQLbura854BkKJdRsl3+w8Kawco9rwWnGgEBEBfmz1 K2uuVXjmiSZ8WRnJQ6nfkvz//QjvLLzLoeXoozdwUXOE0KtCDD3+S6ocOQ7atkWw ncgt33Fgj3g51QrDQS/H/jXl/OIDD5pfYHvsL+tbOXfOYGckV/lpK5VmSs1fJrPB 7uZNDKwjq/4fta4FItPmoZneCfCyuVbXGtQsI8qgTRMHl4dSiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvp+Q4+Cs5tAKc/Xp+ODn6pRovgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvYjNjYmRmZjEtY2UwYi0z NDVmLTgwNjMtZjBhY2ExODU4YjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWsYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC+GFlX6/YXXkbHHhxSoYkewe+zPUlGTV/xpp/CPI8gdjFSnpAhsFk+K 6aZFOnCzPpMcGScFvWqHQhomC9mgS/qjMQu2R2cEhlM0UXBWA4CPxCvTitL4emMD 7aqO5JXVMSMbX920EMSYVAGtv2fBPp0dOl150KrnyQkfbdqA7AdvxT9cLWfh6FwT nnttM395fG23lJF1tF12Ka4cRBaWZWsNMbOiZFq43bf0lOpSLv9qm4J638vRnwRm G8q7MmEpNms+oj2vyc3Enp2FgxLoLZbX2dHkTMigsvsmyIWZ6/zvvdpK44T8M96g +0vxxtjIEkEcv/BrxAFY6FsptPmKawE= -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:39 2026 by rpki-client