$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa File: 963103b6-8a88-31d3-81bd-cdbe5585fb06.roa (raw, json) Hash identifier: QIkFpQb8BDiF3Cp60Cuvwx4EnNrKGMjanTJa7lFQhMQ= Subject key identifier: E5:51:51:C7:E4:D8:E1:9C:95:53:41:B8:35:F2:21:17:C2:C3:4C:90 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B71952BBD86C3F224594F75A0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa Signing time: Tue 07 Oct 2025 14:54:36 +0000 ROA not before: Tue 07 Oct 2025 14:54:36 +0000 ROA not after: Mon 05 Jan 2026 15:54:36 +0000 asID: 14618 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:95:2b:bd:86:c3:f2:24:59:4f:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 14:54:36 2025 GMT Not After : Jan 5 15:54:36 2026 GMT Subject: CN=f76c193e-7eb0-4c12-9b5b-1a72eb9c88f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:72:d5:20:45:a1:f9:b5:22:a5:bd:72:1b:89: b8:e3:2b:18:00:c8:c6:52:d4:e4:d8:e8:60:15:aa: 1d:37:ef:8e:7f:25:15:e5:43:00:f2:05:9a:3a:78: 59:59:c7:38:c2:ee:a7:0c:df:d3:ff:08:6c:a2:ec: e9:0d:b8:d7:7e:3f:88:c0:2b:35:48:cb:14:4d:e4: 05:01:e5:22:24:50:d5:22:fa:5f:4f:0f:aa:08:7c: ba:43:7b:81:34:00:3d:f3:c1:5f:9a:08:47:62:88: 16:de:b8:fb:e2:dc:0c:18:e2:c4:30:a5:62:cb:7d: ae:97:89:d7:17:20:85:68:1a:9e:ba:b5:11:48:2d: ab:26:a5:94:c6:d0:b7:4d:2f:55:ae:7c:95:19:bb: 44:7f:f7:f9:2f:ab:1a:a8:83:52:3c:8a:2b:d7:af: f8:e2:ec:9f:92:e9:3b:0a:f8:d5:a4:4f:06:6c:73: ce:88:c9:52:1d:ef:f8:39:9d:71:75:d1:fa:9b:04: 5f:9a:12:2a:15:39:c1:9c:6e:0d:84:3b:7f:65:61: 91:36:ac:a3:5e:e0:e8:35:95:05:4a:5e:12:86:79: f1:2c:65:d2:3d:e2:2e:e0:b9:27:3e:84:89:2d:aa: 4d:af:97:d3:1c:74:92:57:0c:79:57:f1:d2:6a:b2: 97:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:51:51:C7:E4:D8:E1:9C:95:53:41:B8:35:F2:21:17:C2:C3:4C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:33:60:f8:11:17:5d:82:93:3d:ed:97:3c:01:68:fb:b7:e0: 80:fd:da:e4:e4:33:1a:af:ee:96:b4:69:29:78:d8:75:c8:1e: 7a:98:2b:f1:61:a1:ae:39:31:a3:c1:0d:35:55:07:78:dc:83: 93:0c:4c:c6:8e:ba:4d:a0:b6:43:d9:e3:fa:af:a0:a8:dc:b4: 75:48:1a:d7:c8:fc:33:08:c0:ae:c6:1e:66:5c:85:c4:12:dc: 07:55:ba:41:35:62:13:bf:98:52:9a:7f:a4:77:d3:db:e1:3e: 53:d7:e3:97:5d:95:1c:a7:51:3d:bb:17:6c:13:d2:3d:10:24: 42:c6:bc:da:ec:a3:25:86:70:07:8b:97:ec:02:42:32:2e:c7: 2a:d5:d1:c0:b5:e4:07:87:3f:2c:71:86:d8:bb:cf:98:53:ab: f5:f5:a0:02:85:26:03:21:91:53:25:09:7d:a0:1b:89:10:45: 83:08:fa:04:6d:9d:c4:a4:c7:41:27:3e:ff:e5:c9:0d:32:15: 0c:39:b9:5a:ac:05:c1:e6:d5:ed:3e:7b:bd:f9:16:63:5f:9e: 95:39:ee:9f:84:ae:7e:18:91:5f:1b:26:07:38:98:b8:ff:72: 7a:ac:ce:1b:22:68:dc:2b:4f:c4:ad:fe:c9:f7:41:ee:49:ca: c9:cb:9e:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxlSu9hsPyJFlPdaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE0NTQzNloXDTI2MDEwNTE1NTQzNlowLzEtMCsGA1UEAxMk Zjc2YzE5M2UtN2ViMC00YzEyLTliNWItMWE3MmViOWM4OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XLVIEWh+bUipb1yG4m44ysYAMjGUtTk2Ohg FaodN++OfyUV5UMA8gWaOnhZWcc4wu6nDN/T/whsouzpDbjXfj+IwCs1SMsUTeQF AeUiJFDVIvpfTw+qCHy6Q3uBNAA988FfmghHYogW3rj74twMGOLEMKViy32ul4nX FyCFaBqeurURSC2rJqWUxtC3TS9VrnyVGbtEf/f5L6saqINSPIor16/44uyfkuk7 CvjVpE8GbHPOiMlSHe/4OZ1xddH6mwRfmhIqFTnBnG4NhDt/ZWGRNqyjXuDoNZUF Sl4ShnnxLGXSPeIu4LknPoSJLapNr5fTHHSSVwx5V/HSarKXxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVRUcfk2OGclVNBuDXyIRfCw0yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTYzMTAzYjYtOGE4OC0z MWQzLTgxYmQtY2RiZTU1ODVmYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAzYPgRF12Ckz3tlzwBaPu34ID92uTkMxqv7pa0aSl42HXIHnqYK/Fh oa45MaPBDTVVB3jcg5MMTMaOuk2gtkPZ4/qvoKjctHVIGtfI/DMIwK7GHmZchcQS 3AdVukE1YhO/mFKaf6R309vhPlPX45ddlRynUT27F2wT0j0QJELGvNrsoyWGcAeL l+wCQjIuxyrV0cC15AeHPyxxhti7z5hTq/X1oAKFJgMhkVMlCX2gG4kQRYMI+gRt ncSkx0EnPv/lyQ0yFQw5uVqsBcHm1e0+e735FmNfnpU57p+Ern4YkV8bJgc4mLj/ cnqszhsiaNwrT8St/sn3Qe5JysnLnoI= -----END CERTIFICATE-----Generated at Wed Oct 8 19:32:28 2025 by rpki-client