$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa File: 877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa (raw, json) Hash identifier: g9OmnbwboI93+zSALDiHIVMYxCwcfTaNOcsrvB8HrgA= Subject key identifier: A8:4A:BA:54:D8:4D:A0:1A:D4:FB:18:33:C2:B3:1A:26:25:BE:00:87 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B719D60685B835023A751B780 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa Signing time: Tue 07 Oct 2025 15:11:08 +0000 ROA not before: Tue 07 Oct 2025 15:11:08 +0000 ROA not after: Mon 05 Jan 2026 16:11:08 +0000 asID: 14618 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:9d:60:68:5b:83:50:23:a7:51:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 15:11:08 2025 GMT Not After : Jan 5 16:11:08 2026 GMT Subject: CN=d87c4247-35da-46e7-b48a-ff25c36e168a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:5a:ca:b5:67:6d:c1:57:4b:08:36:df:d7: d0:6a:17:c8:20:43:6d:ac:9c:af:52:ef:3a:a0:7f: f6:b0:e8:30:22:ae:c5:4b:87:79:a4:97:2b:94:43: 21:99:5f:e3:39:4b:11:43:ca:84:93:39:c2:77:8b: 0c:92:47:90:29:e7:dc:8b:d9:7f:6a:21:b8:1f:3c: 68:9f:4c:f2:7e:d7:9f:36:3c:0e:2a:5b:71:a5:e4: 2d:5e:6d:6a:02:f4:7b:b1:6b:5d:72:59:e1:88:27: f6:6e:85:e2:ae:08:21:20:31:25:2d:e9:6b:a5:46: 60:09:7e:75:36:e2:b4:39:e2:4f:b4:ee:1f:59:99: 22:3c:64:e8:e9:63:16:ac:99:ed:75:b5:aa:f0:c4: 11:57:f2:3a:2e:38:98:52:b2:c8:17:e8:24:94:75: 62:5f:30:2b:e6:b8:ed:c4:d2:63:7c:ab:2d:10:47: 17:81:b3:27:0f:ad:73:67:77:42:5c:10:98:02:34: ce:4b:1f:05:23:39:d8:cf:01:8c:7f:8f:0d:f5:ff: bc:4c:b7:fd:19:25:90:21:6b:ed:59:e9:61:7a:66: e7:36:91:fe:1c:c7:72:cb:a7:a5:58:ea:c6:a6:17: 20:4b:78:6e:18:c7:4f:9e:9b:63:d6:b1:f8:05:c5: c9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4A:BA:54:D8:4D:A0:1A:D4:FB:18:33:C2:B3:1A:26:25:BE:00:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/877bb72a-1046-36d5-83c0-cdb3fd3ba091.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:7c:4c:da:77:1e:84:d6:76:cc:fa:cb:b3:a4:e5:2a:68:08: 7e:0a:6e:36:30:6a:24:f9:4e:28:70:35:ce:f8:b8:36:02:f5: fc:b1:8f:65:5d:a3:a2:6e:70:5d:54:61:0e:eb:0a:24:74:d4: dc:48:8b:6c:57:8a:40:50:9e:53:36:7b:ab:f1:69:16:88:43: cb:f3:10:8c:9a:67:b0:78:11:f6:12:7e:07:b7:63:29:c2:9d: 12:c1:dc:98:4a:9c:b4:80:61:fc:ec:b2:79:06:15:5e:e8:14: 60:38:fe:18:1a:2b:37:e4:e4:86:01:b0:3f:c6:ee:0b:c1:b6: 4d:7a:23:0b:20:09:b7:62:46:54:7c:d5:1b:29:18:ee:63:cd: b1:7e:46:de:ac:a2:e1:78:a8:22:02:b5:81:24:96:8b:22:dc: 96:d2:b1:3e:d1:9a:32:0c:fd:bd:cb:89:fa:3e:27:7a:a4:81: 67:35:67:48:24:36:9b:5e:00:a8:1f:0f:8f:e9:0f:5d:4c:f3: fe:12:24:a6:49:2b:4f:c8:59:ef:4f:b3:32:48:14:67:52:fa: 34:df:9d:80:10:b1:33:31:3c:b4:3e:6f:35:65:53:61:4a:39: de:57:c3:14:71:16:40:33:26:97:cf:a3:e1:22:1e:78:82:25: 5b:7a:53:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxnWBoW4NQI6dRt4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE1MTEwOFoXDTI2MDEwNTE2MTEwOFowLzEtMCsGA1UEAxMk ZDg3YzQyNDctMzVkYS00NmU3LWI0OGEtZmYyNWMzNmUxNjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzdayrVnbcFXSwg239fQahfIIENtrJyvUu86 oH/2sOgwIq7FS4d5pJcrlEMhmV/jOUsRQ8qEkznCd4sMkkeQKefci9l/aiG4Hzxo n0zyftefNjwOKltxpeQtXm1qAvR7sWtdclnhiCf2boXirgghIDElLelrpUZgCX51 NuK0OeJPtO4fWZkiPGTo6WMWrJntdbWq8MQRV/I6LjiYUrLIF+gklHViXzAr5rjt xNJjfKstEEcXgbMnD61zZ3dCXBCYAjTOSx8FIznYzwGMf48N9f+8TLf9GSWQIWvt WelhembnNpH+HMdyy6elWOrGphcgS3huGMdPnptj1rH4BcXJ/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhKulTYTaAa1PsYM8KzGiYlvgCHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvODc3YmI3MmEtMTA0Ni0z NmQ1LTgzYzAtY2RiM2ZkM2JhMDkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACh8TNp3HoTWdsz6y7Ok5SpoCH4KbjYwaiT5TihwNc74uDYC9fyxj2Vd o6JucF1UYQ7rCiR01NxIi2xXikBQnlM2e6vxaRaIQ8vzEIyaZ7B4EfYSfge3YynC nRLB3JhKnLSAYfzssnkGFV7oFGA4/hgaKzfk5IYBsD/G7gvBtk16IwsgCbdiRlR8 1RspGO5jzbF+Rt6souF4qCICtYEklosi3JbSsT7RmjIM/b3Lifo+J3qkgWc1Z0gk NpteAKgfD4/pD11M8/4SJKZJK0/IWe9PszJIFGdS+jTfnYAQsTMxPLQ+bzVlU2FK Od5XwxRxFkAzJpfPo+EiHniCJVt6U5I= -----END CERTIFICATE-----Generated at Wed Oct 8 21:12:37 2025 by rpki-client