$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa File: efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa (raw, json) Hash identifier: pLVvQIvdCCXZe8wX9btUCNftkpCPYwSnTYUFZW0EMZk= Subject key identifier: B6:7A:B7:16:72:16:FE:C2:E2:2A:5E:5C:8B:47:F7:22:06:3B:ED:3B Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584D316F743702D908DEAC88EB00 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa Signing time: Tue 17 Mar 2026 01:00:32 +0000 ROA not before: Tue 17 Mar 2026 01:00:32 +0000 ROA not after: Mon 15 Jun 2026 01:00:32 +0000 asID: 17275 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:31:6f:74:37:02:d9:08:de:ac:88:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Mar 17 01:00:32 2026 GMT Not After : Jun 15 01:00:32 2026 GMT Subject: CN=3cc1f59c-c9fb-463e-8bf8-ae3dc5171f95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:69:29:ca:92:92:aa:d7:bb:33:46:29:45: 76:d8:56:9b:e6:e3:ed:3a:4a:2a:2c:94:5f:3e:ea: 89:f7:09:5a:1a:8d:a0:9e:8c:1f:3a:07:04:4c:44: e9:02:c7:06:d3:28:02:fa:2c:be:2c:0f:c8:50:2f: a0:89:41:87:29:f8:fe:ce:e1:87:71:fb:05:c8:b8: e5:0c:61:b7:da:63:9c:ad:3b:24:36:e6:ae:65:8c: 1c:4d:b9:f9:cd:65:2f:e9:da:94:a4:c0:88:d9:c4: e9:ff:9f:8c:d0:b6:3e:44:95:bf:20:cb:7d:f2:33: b6:d9:3f:cb:fc:ea:5b:8a:b7:62:d1:87:68:34:46: 91:7e:78:c6:e1:48:05:37:7c:ba:3e:02:f1:6f:de: dd:17:27:a5:cf:e6:e1:2c:68:2a:a8:0a:bf:a3:62: 30:9f:5e:c3:17:e5:ad:cc:07:95:28:fe:8e:60:7a: 79:9d:2c:81:76:d0:64:80:a8:d0:b2:d4:37:f5:a9: 3c:29:61:78:aa:5d:6d:c8:24:cb:cf:c1:8e:8d:f5: 0a:f5:d2:f6:78:cd:74:48:a9:18:fa:88:2d:fa:3c: 99:6a:18:c2:5f:99:57:09:b3:16:d4:d3:3f:53:7f: 9d:e7:54:17:66:db:01:1f:0f:6c:b9:17:0b:73:02: e6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7A:B7:16:72:16:FE:C2:E2:2A:5E:5C:8B:47:F7:22:06:3B:ED:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:c1:5b:a9:c0:81:e6:a6:86:b1:ee:4f:25:09:fe:f7:44:22: 54:4e:9b:65:15:ca:59:2f:85:80:0d:5e:9c:ca:be:fc:85:b0: 0c:a5:3a:75:70:1e:02:21:30:20:31:44:1b:31:4c:8e:e5:b0: a1:20:96:ca:f3:4a:36:ad:e9:bf:90:de:3d:2b:54:69:2d:5f: 85:74:25:e7:85:24:c7:fb:13:fe:dd:f6:f2:b0:41:e2:58:58: 85:33:23:36:da:bd:e6:3d:ad:81:a8:50:96:f2:aa:a5:63:20: ee:fa:9e:5f:1f:b7:1b:e4:e2:50:3c:ad:e4:8e:28:93:2f:d1: 45:83:6b:16:f3:c3:f3:34:44:49:c1:7c:12:03:7d:69:31:26: 7f:69:95:8a:b6:fe:f2:28:47:04:81:51:d5:91:82:d9:f2:21: bd:a7:2a:8f:da:25:32:ba:02:d2:73:f4:b7:5c:72:52:c2:d6: 28:ed:e4:09:88:64:b2:bb:68:31:aa:a8:70:b2:75:c6:8f:a4: 22:83:84:cb:30:5a:cb:d8:cb:38:8c:1c:eb:39:a1:1f:8a:a7: 21:d8:ef:fd:54:f4:e0:fd:e6:ed:91:78:fc:64:d0:1e:4e:b4: 4b:b1:08:89:79:dd:a0:95:14:57:2a:13:e5:c8:aa:a7:ef:a7: 9f:45:fa:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0xb3Q3AtkI3qyI6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDMxNzAxMDAzMloXDTI2MDYxNTAxMDAzMlowLzEtMCsGA1UEAxMk M2NjMWY1OWMtYzlmYi00NjNlLThiZjgtYWUzZGM1MTcxZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUBpKcqSkqrXuzNGKUV22Fab5uPtOkoqLJRf PuqJ9wlaGo2gnowfOgcETETpAscG0ygC+iy+LA/IUC+giUGHKfj+zuGHcfsFyLjl DGG32mOcrTskNuauZYwcTbn5zWUv6dqUpMCI2cTp/5+M0LY+RJW/IMt98jO22T/L /Opbirdi0YdoNEaRfnjG4UgFN3y6PgLxb97dFyelz+bhLGgqqAq/o2Iwn17DF+Wt zAeVKP6OYHp5nSyBdtBkgKjQstQ39ak8KWF4ql1tyCTLz8GOjfUK9dL2eM10SKkY +ogt+jyZahjCX5lXCbMW1NM/U3+d51QXZtsBHw9suRcLcwLmmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ6txZyFv7C4ipeXItH9yIGO+07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZWZjYzg3ZjItZjg5ZC0z MGEyLTliNWItZmNmYTY4ZjdmMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjBW6nAgeamhrHuTyUJ/vdEIlROm2UVylkvhYANXpzKvvyFsAylOnVw HgIhMCAxRBsxTI7lsKEglsrzSjat6b+Q3j0rVGktX4V0JeeFJMf7E/7d9vKwQeJY WIUzIzbaveY9rYGoUJbyqqVjIO76nl8ftxvk4lA8reSOKJMv0UWDaxbzw/M0REnB fBIDfWkxJn9plYq2/vIoRwSBUdWRgtnyIb2nKo/aJTK6AtJz9LdcclLC1ijt5AmI ZLK7aDGqqHCydcaPpCKDhMswWsvYyziMHOs5oR+KpyHY7/1U9OD95u2RePxk0B5O tEuxCIl53aCVFFcqE+XIqqfvp59F+o4= -----END CERTIFICATE-----Generated at Thu Mar 26 23:51:59 2026 by rpki-client