$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa File: 1d5a3ec4-950e-303d-a621-ef1988db9a14.roa (raw, json) Hash identifier: Roo3/F0flvDL4BOXcnZe0RIXCU6ya8E1YsVaAzeMIjA= Subject key identifier: 8C:E3:1F:80:92:AD:21:23:0F:F1:C7:F8:1A:21:BF:00:A0:FF:CC:DD Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B7192374495A664BBF295C178 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa Signing time: Tue 07 Oct 2025 14:48:39 +0000 ROA not before: Tue 07 Oct 2025 14:48:39 +0000 ROA not after: Mon 05 Jan 2026 15:48:39 +0000 asID: 17275 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:92:37:44:95:a6:64:bb:f2:95:c1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 14:48:39 2025 GMT Not After : Jan 5 15:48:39 2026 GMT Subject: CN=04d845d9-a254-422c-875c-ba156708dabb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:9b:23:64:d2:2c:72:0b:f3:4d:54:8a:c3:be: 32:b3:54:9b:42:80:a7:9c:aa:57:aa:dc:26:03:10: 41:59:63:92:6c:ef:7f:f6:cc:6f:31:69:28:e5:63: da:d2:b0:13:9d:e8:38:b8:4b:02:63:82:d9:d4:ed: 32:26:91:1d:d3:bc:00:60:89:ac:38:be:a8:46:77: 90:00:77:13:d0:0b:2f:cd:b5:63:e9:cd:0c:1c:02: 3e:cf:19:e4:79:5a:7e:2e:17:e9:87:68:7a:fb:c7: fa:7b:6c:f1:23:12:4b:9c:40:17:99:c6:6c:00:4d: a9:15:af:a0:e3:c9:c1:f1:ed:06:5b:5a:42:fc:c1: 69:28:fa:41:4d:ec:96:51:b3:9f:b6:fb:10:70:14: d7:12:af:c2:01:2f:42:f7:4e:24:79:b9:90:91:1f: 58:16:18:91:b7:0d:1d:30:dd:8f:1d:e3:2e:f6:92: 73:02:29:df:56:83:2b:55:d7:ab:bc:e6:3a:8f:0f: 26:2a:d1:d4:ce:d2:a2:60:1b:6d:09:9b:37:6f:1a: 60:bd:b7:75:00:9a:cd:d0:69:89:0a:8e:b0:1a:4a: 64:f3:b9:b5:5d:f7:4e:bb:c6:d6:f0:d9:85:14:e4: 36:63:8e:80:18:35:7f:43:0f:f8:2d:6c:68:bf:28: df:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:E3:1F:80:92:AD:21:23:0F:F1:C7:F8:1A:21:BF:00:A0:FF:CC:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/1d5a3ec4-950e-303d-a621-ef1988db9a14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:a4:c2:56:bd:b0:da:6d:44:f9:0b:59:3e:ef:9b:bb:1e:5b: 4f:cc:6e:dd:ef:74:14:b6:4c:9e:27:50:30:dc:53:32:90:d0: 84:27:0a:ad:c0:fa:16:55:53:a5:f6:7a:c7:ee:cb:85:66:3c: 70:79:31:4e:38:09:35:e0:bb:52:13:4f:e9:b9:ff:79:d9:c2: 34:21:32:de:1c:19:b9:a3:dd:a8:9a:98:31:fa:80:ff:f0:23: df:2c:aa:82:b3:be:eb:8f:3c:8e:c3:0b:b2:12:34:55:88:a2: c9:37:be:33:f8:b5:77:5e:46:df:a9:f2:39:46:09:b7:f6:e6: 1b:38:e5:67:80:15:b9:a9:2d:b0:31:56:ca:6d:14:1f:cb:e1: 2e:8d:4b:82:f5:8a:55:a0:93:3d:b3:7b:d4:8a:6f:39:30:fb: 07:36:a7:3a:fa:4b:06:2b:7e:78:e8:d7:6f:8a:8f:83:83:71: 5c:b5:46:1f:de:cc:08:19:d5:14:8b:f0:5d:a2:64:23:9b:2f: bc:46:8f:8d:d1:f5:25:5f:a0:87:e4:fa:1f:df:c6:3b:4d:43: 1f:74:4e:01:85:ea:ae:e5:9e:f0:2f:04:0c:bb:81:ad:2e:0c: fb:41:d4:1f:de:6d:ba:65:f7:83:58:c3:3d:94:30:a3:11:08: b2:0e:a0:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxkjdElaZku/KVwXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE0NDgzOVoXDTI2MDEwNTE1NDgzOVowLzEtMCsGA1UEAxMk MDRkODQ1ZDktYTI1NC00MjJjLTg3NWMtYmExNTY3MDhkYWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZsjZNIscgvzTVSKw74ys1SbQoCnnKpXqtwm AxBBWWOSbO9/9sxvMWko5WPa0rATneg4uEsCY4LZ1O0yJpEd07wAYImsOL6oRneQ AHcT0AsvzbVj6c0MHAI+zxnkeVp+Lhfph2h6+8f6e2zxIxJLnEAXmcZsAE2pFa+g 48nB8e0GW1pC/MFpKPpBTeyWUbOftvsQcBTXEq/CAS9C904kebmQkR9YFhiRtw0d MN2PHeMu9pJzAinfVoMrVdervOY6jw8mKtHUztKiYBttCZs3bxpgvbd1AJrN0GmJ Co6wGkpk87m1XfdOu8bW8NmFFOQ2Y46AGDV/Qw/4LWxovyjfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzjH4CSrSEjD/HH+BohvwCg/8zdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMWQ1YTNlYzQtOTUwZS0z MDNkLWE2MjEtZWYxOTg4ZGI5YTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGkwla9sNptRPkLWT7vm7seW0/Mbt3vdBS2TJ4nUDDcUzKQ0IQnCq3A +hZVU6X2esfuy4VmPHB5MU44CTXgu1ITT+m5/3nZwjQhMt4cGbmj3aiamDH6gP/w I98sqoKzvuuPPI7DC7ISNFWIosk3vjP4tXdeRt+p8jlGCbf25hs45WeAFbmpLbAx VsptFB/L4S6NS4L1ilWgkz2ze9SKbzkw+wc2pzr6SwYrfnjo12+Kj4ODcVy1Rh/e zAgZ1RSL8F2iZCObL7xGj43R9SVfoIfk+h/fxjtNQx90TgGF6q7lnvAvBAy7ga0u DPtB1B/ebbpl94NYwz2UMKMRCLIOoI0= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:26 2025 by rpki-client