$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa File: db70a171-7d33-3fc2-9576-733bc49c0285.roa (raw, json) Hash identifier: QgkhDRUWtpfB0+BgMVWK2/4ZyTccAKbOnG+APlMWMeI= Subject key identifier: 07:60:49:DA:41:04:B6:4F:46:4D:B8:BB:33:74:6D:92:2C:B2:35:45 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D300A2C28D61471C2D7D7F980 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 13335 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:2c:28:d6:14:71:c2:d7:d7:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=e50256b3-68bf-444d-a731-18fd81ed1e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:53:5f:23:a4:4b:57:7c:3b:25:6f:09:28:f1: 6e:56:2d:72:4e:53:07:b9:a2:fc:b6:25:4f:46:7e: 9d:6a:cc:02:7b:37:08:ea:bb:45:6b:94:50:89:1b: 9e:c6:4f:cb:83:14:88:84:2f:82:ac:a3:cf:86:bb: 0d:17:ab:5d:d1:36:d8:0e:68:c4:a7:4c:de:43:eb: 0b:ef:53:ca:10:13:46:70:22:68:b8:a5:ca:d9:5d: c3:29:23:95:91:37:fe:d6:9c:59:b7:cd:25:b8:1d: bb:3d:1e:50:83:f7:7c:46:8e:6f:3f:5e:be:ce:cb: 01:62:ad:26:a3:b5:43:c7:0d:34:a3:a3:50:24:79: 0f:be:be:3c:1d:56:ad:58:fb:7b:da:d5:59:83:8a: fc:e5:67:19:76:e5:b0:f4:51:51:d3:9c:b9:48:aa: 0b:ea:6c:93:ef:35:c4:58:ff:86:41:71:13:94:0b: 40:1f:bb:75:5f:60:30:7d:d7:e7:09:de:17:93:21: d3:76:45:b1:ac:24:2f:39:f5:fe:16:4b:97:ba:31: 44:82:a9:86:52:ad:4d:55:96:60:07:ef:f5:51:5d: 3d:fb:ae:da:91:69:ae:9a:2f:48:8a:3b:30:79:05: f4:38:5b:2c:af:52:63:d3:23:9f:2f:b7:2a:be:d4: c7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:60:49:DA:41:04:B6:4F:46:4D:B8:BB:33:74:6D:92:2C:B2:35:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/db70a171-7d33-3fc2-9576-733bc49c0285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:6f:9a:6e:b6:a7:96:52:20:9a:8a:ec:9c:98:b2:bf:fd:74: 0d:29:44:80:e0:fa:4e:37:e9:0a:d6:2a:5d:4d:3a:e8:4e:06: 67:1e:c1:5c:7c:d3:52:5c:7c:13:18:70:8b:e4:fc:cc:40:30: 6e:5d:3c:bd:e5:09:ac:c5:d6:9c:94:db:a5:b8:73:f4:fd:68: 10:14:74:60:a3:64:46:78:8f:dd:f8:38:55:8e:62:a3:49:57: 0b:90:37:15:92:c8:85:7a:6d:08:97:d5:02:a2:6b:c0:a1:ab: 7f:5f:41:ad:2c:92:f3:31:9b:06:a2:eb:72:32:8d:c8:4d:4c: 7e:b9:a9:ab:78:ee:5c:ba:fe:44:ad:39:99:d3:ba:ae:3f:0c: 38:bb:e1:90:7c:b4:7d:4e:1a:fc:ac:90:2c:ae:1e:d2:b9:27: 6f:f5:8d:8d:55:72:56:97:3c:50:4c:e6:b4:3d:70:a2:e2:c9: 9e:a7:66:14:d4:3c:dd:dc:2e:78:e4:b1:35:92:92:b4:70:08: d9:0d:eb:b6:4e:10:65:9b:12:33:e6:44:4a:34:6f:42:03:b1: a7:aa:d6:5e:54:1e:37:52:f1:d8:71:76:2a:88:06:16:c0:72: 1a:ce:27:78:06:ac:1d:04:e7:5b:aa:68:29:dc:31:3d:a5:fa: 54:c3:6a:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCiwo1hRxwtfX+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZTUwMjU2YjMtNjhiZi00NDRkLWE3MzEtMThmZDgxZWQxZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1NfI6RLV3w7JW8JKPFuVi1yTlMHuaL8tiVP Rn6daswCezcI6rtFa5RQiRuexk/LgxSIhC+CrKPPhrsNF6td0TbYDmjEp0zeQ+sL 71PKEBNGcCJouKXK2V3DKSOVkTf+1pxZt80luB27PR5Qg/d8Ro5vP16+zssBYq0m o7VDxw00o6NQJHkPvr48HVatWPt72tVZg4r85WcZduWw9FFR05y5SKoL6myT7zXE WP+GQXETlAtAH7t1X2AwfdfnCd4XkyHTdkWxrCQvOfX+FkuXujFEgqmGUq1NVZZg B+/1UV09+67akWmumi9IijsweQX0OFssr1Jj0yOfL7cqvtTHAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdgSdpBBLZPRk24uzN0bZIssjVFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGI3MGExNzEtN2QzMy0z ZmMyLTk1NzYtNzMzYmM0OWMwMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVvmm62p5ZSIJqK7JyYsr/9dA0pRIDg+k436QrWKl1NOuhOBmcewVx8 01JcfBMYcIvk/MxAMG5dPL3lCazF1pyU26W4c/T9aBAUdGCjZEZ4j934OFWOYqNJ VwuQNxWSyIV6bQiX1QKia8Chq39fQa0skvMxmwai63IyjchNTH65qat47ly6/kSt OZnTuq4/DDi74ZB8tH1OGvyskCyuHtK5J2/1jY1VclaXPFBM5rQ9cKLiyZ6nZhTU PN3cLnjksTWSkrRwCNkN67ZOEGWbEjPmREo0b0IDsaeq1l5UHjdS8dhxdiqIBhbA chrOJ3gGrB0E51uqaCncMT2l+lTDarw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:58 2026 by rpki-client