$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa File: 2cf2825c-6372-3688-bd45-d02fb09144f4.roa (raw, json) Hash identifier: x1WMWNyOqwwj8zBPxdElikFwlZF+PmBQUM1TTBzUfmI= Subject key identifier: 4E:AF:9D:B7:9B:60:CA:42:9F:19:68:01:18:67:9F:3A:6B:26:AC:8D Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F40258E4863150695ADCAD0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa Signing time: Mon 06 Oct 2025 18:51:40 +0000 ROA not before: Mon 06 Oct 2025 18:51:40 +0000 ROA not after: Sun 04 Jan 2026 19:51:40 +0000 asID: 13335 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:40:25:8e:48:63:15:06:95:ad:ca:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 18:51:40 2025 GMT Not After : Jan 4 19:51:40 2026 GMT Subject: CN=cf8d823d-ca5e-482a-87eb-1448ecc8b6b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:85:a3:95:49:50:68:f0:c1:07:f3:06:a0:e5: 94:89:60:50:13:21:48:f7:1e:00:51:70:da:72:b1: 28:5e:99:24:bc:88:b8:9f:fe:4d:a1:cc:85:34:01: 7d:b2:dd:ce:5c:c3:81:34:92:aa:73:3b:01:17:21: a4:66:48:d5:00:01:5f:d1:39:25:58:b2:55:61:97: 63:17:03:70:e1:1b:68:a0:92:12:3b:25:99:ed:77: f0:c4:dc:7a:4e:9b:fb:34:b4:02:5e:df:ba:13:1f: 62:3c:56:b7:57:ea:1d:db:2f:01:9f:48:a9:06:02: 89:0b:82:e5:bd:ec:4b:2a:8f:cb:0b:f5:53:81:8b: 62:e8:f7:10:72:04:24:28:51:e5:4f:92:db:c4:4c: 2a:9e:70:02:95:c3:a6:af:7a:05:4a:86:c8:d4:0a: 1e:52:f1:d6:3d:c5:16:9b:4b:25:8b:ee:c4:99:9a: 5d:59:2d:4c:00:69:d6:cf:25:9a:c8:bd:f0:f2:0f: 1b:50:1b:60:c2:a8:b1:60:3e:44:d0:84:63:c9:0e: 3d:dd:5f:8c:eb:d9:dd:9a:a2:9a:28:5c:49:b3:7c: d3:58:3f:17:47:cb:96:43:17:5a:14:cf:11:47:9a: 45:c6:04:f1:95:be:29:aa:91:dc:b5:3f:68:70:a8: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AF:9D:B7:9B:60:CA:42:9F:19:68:01:18:67:9F:3A:6B:26:AC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:75:d0:02:39:8b:e1:b0:80:bd:da:d3:1f:fa:41:54:92:eb: c3:43:fc:8e:74:d1:e2:c9:7b:ac:e5:64:a6:17:5f:7d:82:a8: a4:15:94:0e:45:af:14:53:e4:23:22:86:b5:b6:af:a2:73:6e: 75:e4:92:d2:30:64:63:42:6f:d7:d9:c9:eb:8e:f1:a9:43:b0: 78:cb:8c:18:be:1e:d6:c8:8d:48:ec:c1:87:7b:49:f4:9b:04: 90:44:f6:c5:3b:32:f4:fa:bb:54:79:cb:fe:e0:05:8d:c3:ad: 7f:91:58:b9:eb:8d:ee:56:12:43:10:16:77:93:53:b2:b8:95: 1c:84:57:e4:65:39:e3:b9:d5:5c:63:ee:9f:7f:f9:84:1b:3a: ac:80:ef:a5:a1:0a:ff:77:40:50:6e:55:83:3b:f0:40:d4:6a: f5:e6:db:a5:63:d5:4c:64:1e:86:6e:95:e3:01:d5:ae:0c:69: f7:8f:2f:4f:a9:28:a6:9f:e4:88:54:55:a0:0a:66:48:f0:48: 80:ab:a1:a2:02:e0:1e:68:ea:17:d6:8f:89:86:40:bc:49:a9: 22:3f:48:a9:77:2f:98:68:89:17:36:48:bc:32:fa:ca:24:44: 62:b3:27:aa:3e:dd:fd:96:aa:79:57:2c:72:e1:fe:dc:f1:27: 49:4f:20:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvQCWOSGMVBpWtytAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE4NTE0MFoXDTI2MDEwNDE5NTE0MFowLzEtMCsGA1UEAxMk Y2Y4ZDgyM2QtY2E1ZS00ODJhLTg3ZWItMTQ0OGVjYzhiNmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54WjlUlQaPDBB/MGoOWUiWBQEyFI9x4AUXDa crEoXpkkvIi4n/5NocyFNAF9st3OXMOBNJKqczsBFyGkZkjVAAFf0TklWLJVYZdj FwNw4RtooJISOyWZ7XfwxNx6Tpv7NLQCXt+6Ex9iPFa3V+od2y8Bn0ipBgKJC4Ll vexLKo/LC/VTgYti6PcQcgQkKFHlT5LbxEwqnnAClcOmr3oFSobI1AoeUvHWPcUW m0sli+7EmZpdWS1MAGnWzyWayL3w8g8bUBtgwqixYD5E0IRjyQ493V+M69ndmqKa KFxJs3zTWD8XR8uWQxdaFM8RR5pFxgTxlb4pqpHctT9ocKhMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6vnbebYMpCnxloARhnnzprJqyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMmNmMjgyNWMtNjM3Mi0z Njg4LWJkNDUtZDAyZmIwOTE0NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp10AI5i+GwgL3a0x/6QVSS68ND/I500eLJe6zlZKYXX32CqKQVlA5F rxRT5CMihrW2r6JzbnXkktIwZGNCb9fZyeuO8alDsHjLjBi+HtbIjUjswYd7SfSb BJBE9sU7MvT6u1R5y/7gBY3DrX+RWLnrje5WEkMQFneTU7K4lRyEV+RlOeO51Vxj 7p9/+YQbOqyA76WhCv93QFBuVYM78EDUavXm26Vj1UxkHoZuleMB1a4MafePL0+p KKaf5IhUVaAKZkjwSICroaIC4B5o6hfWj4mGQLxJqSI/SKl3L5hoiRc2SLwy+sok RGKzJ6o+3f2WqnlXLHLh/tzxJ0lPIPo= -----END CERTIFICATE-----Generated at Wed Oct 8 22:55:09 2025 by rpki-client