$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2dbf659e-cd53-3831-a4c0-20e94c12b64c.roa File: 2dbf659e-cd53-3831-a4c0-20e94c12b64c.roa (raw, json) Hash identifier: WGpdTfRdmvnJ4O9FK1piUsLtqf4q+esw6blbA6iu8io= Subject key identifier: 0C:49:2B:8F:D1:A6:B4:F0:35:E5:43:FB:01:75:A7:49:93:88:4C:71 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F443BCBD0D7A277E0C24F80 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2dbf659e-cd53-3831-a4c0-20e94c12b64c.roa Signing time: Mon 06 Oct 2025 18:59:55 +0000 ROA not before: Mon 06 Oct 2025 18:59:55 +0000 ROA not after: Sun 04 Jan 2026 19:59:55 +0000 asID: 17275 IP address blocks: 161.107.112.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:44:3b:cb:d0:d7:a2:77:e0:c2:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 18:59:55 2025 GMT Not After : Jan 4 19:59:55 2026 GMT Subject: CN=7965afaf-2653-4e21-960d-28c06f658819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ca:11:cc:d0:b3:f0:8c:f9:11:48:41:05:14: c4:5e:8a:46:b8:b9:ed:15:fc:e3:9c:67:ee:d1:68: 90:4f:20:af:86:51:bc:85:10:f6:59:fe:8a:b3:bc: 09:d3:a9:27:46:e3:1e:68:7a:98:a9:d6:af:5c:32: 52:55:5c:3f:97:8e:e5:83:df:d1:26:e7:13:31:fb: c9:0b:6b:ef:24:c1:ad:75:83:a4:99:8c:b8:bf:8d: ac:14:2a:57:a5:e8:bb:ba:09:e8:12:36:fd:40:80: 04:ba:e1:00:cd:83:1b:bc:86:ac:33:b3:ff:bd:4b: ce:07:8f:0e:e9:37:87:8d:43:9a:63:a4:52:e5:c2: 7b:8a:05:85:ac:43:99:ae:ab:df:54:ba:97:00:a9: 83:c0:df:5c:7e:7c:e7:c6:c3:2f:a7:6a:26:4e:89: a4:e5:96:77:02:b7:d3:43:4c:d1:ad:f2:a1:89:1d: 69:e0:91:b5:8b:a0:9e:17:ac:1c:dc:02:6e:3f:00: 4e:bb:23:e1:1d:24:b6:90:0b:e4:21:40:9f:ae:27: 7a:b4:c3:47:bd:4e:65:59:09:c6:43:dd:dc:ba:fa: f6:0f:9b:8e:75:3b:4a:f9:86:c1:9a:39:e7:9f:c4: 58:54:1d:91:cf:ea:fa:43:15:e9:91:51:04:ff:68: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:2B:8F:D1:A6:B4:F0:35:E5:43:FB:01:75:A7:49:93:88:4C:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2dbf659e-cd53-3831-a4c0-20e94c12b64c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.112.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:90:c4:b1:7a:44:8c:46:06:e8:88:06:2a:1f:da:9f:e8:62: 89:63:9c:85:2a:9c:a4:5c:4e:06:54:75:09:97:8d:75:b4:64: 9e:5e:c5:0f:f8:f3:08:83:b7:a8:69:a9:d8:e2:a6:0b:a7:a8: c8:bc:61:de:9d:29:2f:91:33:a0:35:91:aa:93:12:b6:c1:d4: 5d:d1:02:23:b6:e8:70:b4:e2:92:75:fa:5d:95:5f:00:25:23: f9:c3:92:57:c8:34:d3:3b:2e:0a:16:6b:77:07:6f:98:e9:00: 4b:e8:ca:78:ec:2d:cc:20:20:94:65:49:45:65:39:c1:7c:d8: c8:84:d2:87:66:48:ba:95:43:59:6a:8c:0c:81:ed:b5:f3:b9: 0e:10:4f:46:dc:2e:95:c1:19:8c:d0:64:5c:d7:b8:f1:be:b0: a8:fb:a4:69:b0:c9:bc:6a:c2:b9:29:b0:12:2f:73:f7:61:80: 9f:77:0b:91:30:07:47:89:bc:cd:4e:67:35:51:74:60:8b:fc: 97:b7:d0:3d:13:7f:42:86:61:2d:d8:f9:54:c9:a8:93:5a:cc: 48:ca:74:36:b6:d0:b5:1e:a7:e3:e5:72:2d:f0:07:0f:39:d3: 04:2b:2a:f1:65:f6:78:c0:83:49:b9:ac:9d:83:57:6f:8e:39: 70:5f:87:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvRDvL0Neid+DCT4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE4NTk1NVoXDTI2MDEwNDE5NTk1NVowLzEtMCsGA1UEAxMk Nzk2NWFmYWYtMjY1My00ZTIxLTk2MGQtMjhjMDZmNjU4ODE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMoRzNCz8Iz5EUhBBRTEXopGuLntFfzjnGfu 0WiQTyCvhlG8hRD2Wf6Ks7wJ06knRuMeaHqYqdavXDJSVVw/l47lg9/RJucTMfvJ C2vvJMGtdYOkmYy4v42sFCpXpei7ugnoEjb9QIAEuuEAzYMbvIasM7P/vUvOB48O 6TeHjUOaY6RS5cJ7igWFrEOZrqvfVLqXAKmDwN9cfnznxsMvp2omTomk5ZZ3ArfT Q0zRrfKhiR1p4JG1i6CeF6wc3AJuPwBOuyPhHSS2kAvkIUCfrid6tMNHvU5lWQnG Q93cuvr2D5uOdTtK+YbBmjnnn8RYVB2Rz+r6QxXpkVEE/2iCAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxJK4/RprTwNeVD+wF1p0mTiExxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMmRiZjY1OWUtY2Q1My0z ODMxLWE0YzAtMjBlOTRjMTJiNjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWtwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWQxLF6RIxGBuiIBiof2p/oYoljnIUqnKRcTgZUdQmXjXW0ZJ5exQ/4 8wiDt6hpqdjipgunqMi8Yd6dKS+RM6A1kaqTErbB1F3RAiO26HC04pJ1+l2VXwAl I/nDklfINNM7LgoWa3cHb5jpAEvoynjsLcwgIJRlSUVlOcF82MiE0odmSLqVQ1lq jAyB7bXzuQ4QT0bcLpXBGYzQZFzXuPG+sKj7pGmwybxqwrkpsBIvc/dhgJ93C5Ew B0eJvM1OZzVRdGCL/Je30D0Tf0KGYS3Y+VTJqJNazEjKdDa20LUep+Plci3wBw85 0wQrKvFl9njAg0m5rJ2DV2+OOXBfh/U= -----END CERTIFICATE-----Generated at Wed Oct 8 19:30:36 2025 by rpki-client