$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/c72b175f-a562-3b4c-870b-f46c42b33e58.roa File: c72b175f-a562-3b4c-870b-f46c42b33e58.roa (raw, json) Hash identifier: IMhqAJKtb6NYJbZgA1gVd3HoHUG3FyPNXcYhNs1+R2A= Subject key identifier: 29:20:38:54:43:95:DD:0C:63:21:0D:20:C9:22:92:A1:EA:A2:A5:76 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B719E5211F92548AC963A73E0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/c72b175f-a562-3b4c-870b-f46c42b33e58.roa Signing time: Tue 07 Oct 2025 15:13:02 +0000 ROA not before: Tue 07 Oct 2025 15:13:02 +0000 ROA not after: Mon 05 Jan 2026 16:13:02 +0000 asID: 16509 IP address blocks: 161.107.106.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:9e:52:11:f9:25:48:ac:96:3a:73:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 15:13:02 2025 GMT Not After : Jan 5 16:13:02 2026 GMT Subject: CN=55aa2e89-8407-4e6b-95a1-99f8e9efa422 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:91:b4:97:98:49:6f:ed:41:e0:ad:41:c5:27: 12:95:6a:16:e8:88:7a:ed:15:6d:b3:82:45:3c:e7: a0:dd:3c:db:2e:1e:2d:ca:3a:2b:73:8d:ca:fa:da: 42:eb:57:32:5e:ad:50:70:ea:5a:bf:e9:90:5e:cd: c6:4e:c6:f2:c5:49:c0:5a:cd:03:94:3a:16:fb:c3: cc:ea:be:cf:b2:4b:23:be:4f:86:f1:8a:b5:1e:0e: d9:30:ce:61:34:9f:85:1f:82:13:6f:a9:62:fb:47: 6c:ff:7e:ee:ac:59:4c:b6:0f:06:17:a5:9c:39:4a: 3f:f7:d9:92:b8:aa:90:53:bd:9d:c4:c2:14:d1:14: c5:bc:83:01:bd:d0:10:b0:c8:c1:f6:cb:a6:49:00: fa:09:12:52:3a:65:81:c7:9b:62:c1:07:a7:e2:02: 48:47:89:b4:4e:9a:57:60:32:95:97:9e:72:7d:1f: 7b:e2:11:6e:df:5e:13:78:83:0b:bb:0b:ec:84:bf: 57:18:1a:15:e2:3a:c2:61:65:e1:16:4d:06:17:98: a6:37:9a:a8:4a:c4:14:08:4c:e4:2b:42:a8:af:7e: a3:55:58:7d:b3:3d:33:6a:bd:02:75:cd:57:76:0e: 87:78:d0:e9:ca:dd:84:67:55:84:16:1e:80:b0:5f: 15:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:20:38:54:43:95:DD:0C:63:21:0D:20:C9:22:92:A1:EA:A2:A5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/c72b175f-a562-3b4c-870b-f46c42b33e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:41:ab:ce:fb:26:40:6b:8a:07:15:77:57:b3:84:4e:7d:cf: 50:b6:e7:49:77:42:1e:99:b0:13:31:b0:5e:28:42:2b:ad:e4: 10:b1:eb:50:57:b5:69:b6:ed:47:5e:48:fc:08:e7:66:de:7f: d9:db:43:94:f3:97:39:96:6e:63:f2:06:69:84:70:ef:d7:68: fb:bd:80:d2:45:f5:f7:a5:11:bf:5d:ad:f1:df:8a:ab:dc:4a: 6b:89:af:f3:12:c1:29:a4:4a:52:28:5a:9b:f0:af:a1:5f:26: e4:4b:9b:8f:80:ce:d1:60:39:35:4c:fb:0e:c2:28:73:b4:94: b2:80:65:28:cf:55:e8:85:73:ee:43:2e:a2:e0:8c:5f:eb:ab: 48:d9:55:c1:62:12:a1:9b:29:2f:91:da:86:54:78:1e:24:86: 24:3f:0b:44:d9:66:76:fa:53:a7:7b:09:77:cb:3f:45:2a:77: 3f:0c:1d:4c:b7:6f:cf:39:98:3e:c9:d3:91:d5:96:d5:3c:31: 03:b8:28:23:06:4b:02:72:78:03:19:3e:64:fb:b5:e4:ff:38: 16:4d:6c:88:41:65:05:e6:a8:b7:55:7c:9c:f9:08:5c:bf:ab: 4f:6b:c1:e9:25:a0:c9:a1:bd:6e:38:41:09:da:a9:8d:4f:f3: 40:51:05:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxnlIR+SVIrJY6c+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE1MTMwMloXDTI2MDEwNTE2MTMwMlowLzEtMCsGA1UEAxMk NTVhYTJlODktODQwNy00ZTZiLTk1YTEtOTlmOGU5ZWZhNDIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZG0l5hJb+1B4K1BxScSlWoW6Ih67RVts4JF POeg3TzbLh4tyjorc43K+tpC61cyXq1QcOpav+mQXs3GTsbyxUnAWs0DlDoW+8PM 6r7Psksjvk+G8Yq1Hg7ZMM5hNJ+FH4ITb6li+0ds/37urFlMtg8GF6WcOUo/99mS uKqQU72dxMIU0RTFvIMBvdAQsMjB9sumSQD6CRJSOmWBx5tiwQen4gJIR4m0TppX YDKVl55yfR974hFu314TeIMLuwvshL9XGBoV4jrCYWXhFk0GF5imN5qoSsQUCEzk K0Kor36jVVh9sz0zar0Cdc1Xdg6HeNDpyt2EZ1WEFh6AsF8VTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkgOFRDld0MYyENIMkikqHqoqV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvYzcyYjE3NWYtYTU2Mi0z YjRjLTg3MGItZjQ2YzQyYjMzZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRBq877JkBrigcVd1ezhE59z1C250l3Qh6ZsBMxsF4oQiut5BCx61BX tWm27UdeSPwI52bef9nbQ5TzlzmWbmPyBmmEcO/XaPu9gNJF9felEb9drfHfiqvc SmuJr/MSwSmkSlIoWpvwr6FfJuRLm4+AztFgOTVM+w7CKHO0lLKAZSjPVeiFc+5D LqLgjF/rq0jZVcFiEqGbKS+R2oZUeB4khiQ/C0TZZnb6U6d7CXfLP0Uqdz8MHUy3 b885mD7J05HVltU8MQO4KCMGSwJyeAMZPmT7teT/OBZNbIhBZQXmqLdVfJz5CFy/ q09rwekloMmhvW44QQnaqY1P80BRBU0= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:31 2025 by rpki-client