$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa File: 48d5e969-a007-31a6-842d-607947a27601.roa (raw, json) Hash identifier: cp5+2a5pNbwdYuZHSI+FrpGzYK128G/GAWQT6Zpd77Y= Subject key identifier: 7D:19:37:35:BE:61:F6:CD:29:81:A5:A7:D0:78:91:63:20:F4:51:2C Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F439A937DF5C1816A109D00 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa Signing time: Mon 06 Oct 2025 18:58:38 +0000 ROA not before: Mon 06 Oct 2025 18:58:38 +0000 ROA not after: Sun 04 Jan 2026 19:58:38 +0000 asID: 17275 IP address blocks: 161.107.16.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:43:9a:93:7d:f5:c1:81:6a:10:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 18:58:38 2025 GMT Not After : Jan 4 19:58:38 2026 GMT Subject: CN=3b16cb0b-183a-4a9c-8fdc-ce28d5aedd69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cf:d1:19:89:5d:aa:e4:ba:c1:f8:17:05:ba: 1d:11:7e:83:ec:ca:f3:f3:5c:b8:21:60:6b:46:86: 98:7e:36:58:40:a7:4e:ca:ef:58:33:3d:22:3d:ab: 03:e6:0a:7e:a8:1e:52:8e:92:2b:de:ec:1c:2c:fa: 1a:5b:95:7d:55:79:95:07:40:f1:5f:8a:c6:c9:69: a3:1f:40:2f:b4:d1:08:72:33:a2:8a:55:f6:3b:19: 03:af:de:c9:81:ff:21:3a:f2:ee:04:12:80:97:62: 1b:7b:f0:29:0c:87:0d:9a:d0:06:c5:8f:45:29:41: bc:e4:16:71:87:d1:e8:b2:7b:ee:d1:9b:80:a6:83: 67:e3:1d:5b:3c:24:85:c3:58:64:d2:dd:69:e4:62: e8:fe:21:3f:e1:3b:78:97:21:93:73:b6:42:4e:13: e5:88:65:6d:44:ef:d7:62:f0:b7:b1:e7:28:45:78: dd:fa:19:72:4f:b5:70:9d:54:4c:e5:50:7c:aa:b8: 9b:cc:3d:32:fe:9e:e2:2a:d8:b0:f6:3b:fa:06:ad: d6:e9:92:14:51:1f:04:74:78:9c:a3:19:2f:21:1a: 7a:7b:d3:3e:de:ef:97:d1:1b:bb:55:44:29:49:99: ee:9f:6a:b9:1f:d9:16:5d:79:42:ba:e2:6c:e4:2f: f3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:19:37:35:BE:61:F6:CD:29:81:A5:A7:D0:78:91:63:20:F4:51:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/48d5e969-a007-31a6-842d-607947a27601.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.16.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:dd:73:ae:0b:6d:cb:e1:a0:4f:4c:0b:3c:a7:39:08:7c:55: 5f:b5:49:fb:38:a2:89:73:d8:59:ee:ef:56:e0:3c:54:78:e3: 97:93:c7:a1:27:9a:1f:13:4e:cc:c8:63:60:59:3d:88:28:f9: af:41:22:97:90:b4:d7:91:db:fb:bf:e8:1c:a1:16:52:e4:a7: d8:67:46:97:29:e9:de:33:d6:53:3f:85:e3:25:8d:b3:70:c3: af:5d:85:76:24:10:92:ab:bd:13:17:92:53:24:7d:33:dd:5a: a5:01:b3:dc:c5:a7:0a:be:7e:80:53:5e:de:cd:b5:d2:fd:de: bb:a1:9e:11:ee:ed:9a:99:ef:69:1b:f7:20:68:b9:54:64:fc: 50:5f:bc:88:bc:7f:11:e1:50:23:bc:35:29:64:3e:65:c7:f9: 48:11:00:28:54:69:47:9a:d9:d3:fd:61:c8:52:63:4f:79:45: 39:d5:6d:d2:04:51:2f:fb:84:18:86:e4:d9:91:52:fe:3d:83: d7:6a:b1:f7:fc:8d:c9:4c:cc:8c:19:7d:65:2a:bf:7e:b1:32: 63:c6:07:b7:3e:0e:f8:f4:17:27:35:40:00:e1:51:12:cf:00: b6:50:17:ef:0f:16:d6:9b:6f:99:e7:95:dc:53:61:f8:a1:6a: 41:5d:5a:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvQ5qTffXBgWoQnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE4NTgzOFoXDTI2MDEwNDE5NTgzOFowLzEtMCsGA1UEAxMk M2IxNmNiMGItMTgzYS00YTljLThmZGMtY2UyOGQ1YWVkZDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc/RGYldquS6wfgXBbodEX6D7Mrz81y4IWBr RoaYfjZYQKdOyu9YMz0iPasD5gp+qB5SjpIr3uwcLPoaW5V9VXmVB0DxX4rGyWmj H0AvtNEIcjOiilX2OxkDr97Jgf8hOvLuBBKAl2Ibe/ApDIcNmtAGxY9FKUG85BZx h9Hosnvu0ZuApoNn4x1bPCSFw1hk0t1p5GLo/iE/4Tt4lyGTc7ZCThPliGVtRO/X YvC3secoRXjd+hlyT7VwnVRM5VB8qribzD0y/p7iKtiw9jv6Bq3W6ZIUUR8EdHic oxkvIRp6e9M+3u+X0Ru7VUQpSZnun2q5H9kWXXlCuuJs5C/zAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0ZNzW+YfbNKYGlp9B4kWMg9FEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvNDhkNWU5NjktYTAwNy0z MWE2LTg0MmQtNjA3OTQ3YTI3NjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHdc64LbcvhoE9MCzynOQh8VV+1Sfs4oolz2Fnu71bgPFR445eTx6En mh8TTszIY2BZPYgo+a9BIpeQtNeR2/u/6ByhFlLkp9hnRpcp6d4z1lM/heMljbNw w69dhXYkEJKrvRMXklMkfTPdWqUBs9zFpwq+foBTXt7NtdL93ruhnhHu7ZqZ72kb 9yBouVRk/FBfvIi8fxHhUCO8NSlkPmXH+UgRAChUaUea2dP9YchSY095RTnVbdIE US/7hBiG5NmRUv49g9dqsff8jclMzIwZfWUqv36xMmPGB7c+Dvj0Fyc1QADhURLP ALZQF+8PFtabb5nnldxTYfihakFdWkY= -----END CERTIFICATE-----Generated at Wed Oct 8 22:55:07 2025 by rpki-client