$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa File: 9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa (raw, json) Hash identifier: uIJ3vy1x7pHYnTzMTc+8c43ibJAtsOIFHrB0aZqReRs= Subject key identifier: 69:77:5F:1A:B3:09:95:E9:93:AB:BD:C3:10:BC:3C:AC:50:A6:46:70 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B6F48049349077F30B94FA200 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa Signing time: Mon 06 Oct 2025 19:07:32 +0000 ROA not before: Mon 06 Oct 2025 19:07:32 +0000 ROA not after: Sun 04 Jan 2026 20:07:32 +0000 asID: 17275 IP address blocks: 161.107.72.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6f:48:04:93:49:07:7f:30:b9:4f:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 6 19:07:32 2025 GMT Not After : Jan 4 20:07:32 2026 GMT Subject: CN=be050cff-bc5f-459b-a767-fab783a13124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:e4:4d:80:6c:d8:7e:70:9f:39:58:37:4a: 38:1a:43:aa:1d:2a:ac:09:c6:71:94:50:ad:c2:f8: 5e:1a:41:c9:a9:1b:38:e6:a4:08:af:a7:78:58:85: 4d:3d:55:ea:0c:7c:a9:98:d6:ff:67:de:a8:be:5a: 4c:12:26:e0:6f:9c:f5:bc:e1:c5:a6:1d:ad:cc:b7: 39:00:79:1d:f4:bf:54:8a:a2:fe:88:83:3c:ab:c2: 4b:9e:94:e6:d1:63:72:63:54:88:de:9c:4f:34:ad: e5:a3:4b:5d:0e:4b:35:4c:fe:42:44:d6:b7:60:33: 7d:55:e5:d6:55:b4:5f:ca:df:c1:30:72:a3:dc:6e: ef:29:1d:44:8e:ac:02:3a:9a:bd:f7:9b:9e:95:4b: 7c:87:06:79:10:cb:f8:35:1f:1d:44:e2:0a:b8:3a: d3:cc:c3:7c:08:39:84:36:fe:de:6e:f3:7b:99:32: a1:fb:a4:08:0e:79:87:b8:5b:8a:84:34:9f:22:1e: cc:67:e8:a1:8b:ac:3d:7e:18:51:9f:1a:54:66:dc: fe:1a:2f:55:3f:30:21:56:4d:d1:7d:4e:42:01:6b: e7:68:64:77:e1:b2:d8:47:2f:14:df:b0:ca:6a:a5: b2:6d:ea:7a:20:08:1e:cd:64:05:fd:24:4c:5d:29: 4a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:77:5F:1A:B3:09:95:E9:93:AB:BD:C3:10:BC:3C:AC:50:A6:46:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/9ebcdc41-fa4a-35d6-86b2-19977c26cb65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.72.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d9:62:ee:74:8c:6a:57:f9:9f:db:94:0d:db:fd:33:3d:53: af:6c:68:da:8d:f3:f1:c4:b2:f0:be:da:fe:65:d1:68:a4:0d: 67:59:cc:79:37:24:a5:14:e2:43:7f:82:9e:63:3f:73:e1:6a: 77:52:87:20:51:19:5d:cc:1e:04:0a:1e:05:28:9e:4c:ef:07: 68:48:5a:bd:17:6f:9b:c1:d3:7e:0f:ac:6d:91:25:80:e6:09: b1:cd:f4:0e:cb:9b:56:57:25:ab:d4:c6:bf:80:f3:32:18:ed: f9:b7:84:1e:30:d1:e0:c0:61:95:fb:42:32:64:fe:22:fd:c3: d3:7c:61:c9:e5:c4:7e:6f:0a:d9:c7:ba:46:df:e4:8f:29:5f: 59:98:7d:aa:47:3f:40:ff:6a:af:ca:c1:dc:3b:be:4e:0f:3f: a0:71:f6:79:73:a6:d1:43:a8:56:86:f5:31:70:29:da:fa:46: 34:4e:e0:f1:91:49:c1:6a:09:46:4d:85:2f:c1:18:2c:6a:1f: 3d:84:67:8e:0e:49:11:50:d6:02:2a:ec:f0:8c:f6:90:16:8b: d2:a6:bf:87:d7:90:8f:0d:b2:1e:41:d2:c0:42:f6:7d:d4:c4: 0e:a7:06:57:2e:e6:91:12:07:ef:2c:bb:fd:12:7c:cc:e7:5a: 35:a9:df:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtvSASTSQd/MLlPogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNjE5MDczMloXDTI2MDEwNDIwMDczMlowLzEtMCsGA1UEAxMk YmUwNTBjZmYtYmM1Zi00NTliLWE3NjctZmFiNzgzYTEzMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELkTYBs2H5wnzlYN0o4GkOqHSqsCcZxlFCt wvheGkHJqRs45qQIr6d4WIVNPVXqDHypmNb/Z96ovlpMEibgb5z1vOHFph2tzLc5 AHkd9L9UiqL+iIM8q8JLnpTm0WNyY1SI3pxPNK3lo0tdDks1TP5CRNa3YDN9VeXW VbRfyt/BMHKj3G7vKR1EjqwCOpq995uelUt8hwZ5EMv4NR8dROIKuDrTzMN8CDmE Nv7ebvN7mTKh+6QIDnmHuFuKhDSfIh7MZ+ihi6w9fhhRnxpUZtz+Gi9VPzAhVk3R fU5CAWvnaGR34bLYRy8U37DKaqWybep6IAgezWQF/SRMXSlKtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl3XxqzCZXpk6u9wxC8PKxQpkZwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOWViY2RjNDEtZmE0YS0z NWQ2LTg2YjItMTk5NzdjMjZjYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDoWtIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzZYu50jGpX+Z/blA3b/TM9U69saNqN8/HEsvC+2v5l0WikDWdZzHk3 JKUU4kN/gp5jP3PhandShyBRGV3MHgQKHgUonkzvB2hIWr0Xb5vB034PrG2RJYDm CbHN9A7Lm1ZXJavUxr+A8zIY7fm3hB4w0eDAYZX7QjJk/iL9w9N8YcnlxH5vCtnH ukbf5I8pX1mYfapHP0D/aq/Kwdw7vk4PP6Bx9nlzptFDqFaG9TFwKdr6RjRO4PGR ScFqCUZNhS/BGCxqHz2EZ44OSRFQ1gIq7PCM9pAWi9Kmv4fXkI8Nsh5B0sBC9n3U xA6nBlcu5pESB+8su/0SfMznWjWp3wk= -----END CERTIFICATE-----Generated at Wed Oct 8 22:54:06 2025 by rpki-client