$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa File: dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa (raw, json) Hash identifier: LMrMqjc4i9A98PNJwIqYrLYwn8tqssMWnfGBI6ozC6w= Subject key identifier: 83:1B:D3:FD:67:D4:37:E3:13:ED:46:21:36:33:5B:E7:E1:2D:E2:F2 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B719CD2E43C5A4BADDF6ABCC8 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa Signing time: Tue 07 Oct 2025 15:10:01 +0000 ROA not before: Tue 07 Oct 2025 15:10:01 +0000 ROA not after: Mon 05 Jan 2026 16:10:01 +0000 asID: 17275 IP address blocks: 161.107.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:9c:d2:e4:3c:5a:4b:ad:df:6a:bc:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 15:10:01 2025 GMT Not After : Jan 5 16:10:01 2026 GMT Subject: CN=5c6b7ab1-8ae3-4815-9e16-eaa667825f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4b:f6:50:a5:9a:4a:de:f7:59:9e:54:4a:0b: 99:b4:b3:1d:ad:a1:7d:c4:a5:bb:fb:87:d2:72:25: 33:d3:27:4a:3c:83:2a:8c:f2:2d:79:d4:45:35:80: e7:c6:0e:e8:19:3d:98:6a:5a:d5:92:91:48:6e:bb: 4d:79:a7:61:3a:91:46:d3:c3:b9:91:81:5f:bd:81: ad:8e:42:ca:66:8a:ee:3f:b5:51:11:bc:6f:36:d3: 80:2e:0c:5e:e3:7f:e8:ce:82:a5:ef:36:e8:97:80: 41:f8:4e:d0:86:f9:23:44:5e:4c:f4:78:7b:88:7d: e6:ae:e0:fd:42:27:fe:dd:31:ab:7b:7b:97:98:91: 2d:30:da:c4:fb:a8:61:ef:f9:49:c6:c4:e3:dd:9f: b7:e5:10:46:c0:c0:a9:6e:e2:d2:f5:d7:60:d1:ca: ba:90:9d:25:99:74:9b:37:6c:8a:3d:fe:3f:d5:05: 6c:7f:5f:65:5a:b1:68:8d:44:7d:89:11:cc:ad:4b: 80:7b:2b:b3:0b:d5:85:f7:28:71:1d:03:98:14:e3: 37:97:e8:3b:f1:ac:3f:66:d5:d6:a7:37:3b:f4:ba: 64:6f:17:7d:32:66:1e:78:35:4f:11:8e:8c:76:21: 4e:2d:14:2c:fe:e3:df:cc:66:00:03:39:0a:ed:bf: fa:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:1B:D3:FD:67:D4:37:E3:13:ED:46:21:36:33:5B:E7:E1:2D:E2:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/dbdbafcf-58d8-31df-8ecf-e16afb45d1da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:40:2d:fc:4e:c9:25:7f:5e:98:93:82:d9:e9:d6:e9:27:da: 40:9c:57:50:7d:52:43:d1:e7:05:38:8f:8b:a6:48:d8:bc:07: 9e:6d:ff:7b:46:b2:d2:7a:53:2c:06:22:b1:01:ef:4b:d9:47: 74:de:82:89:ea:80:2e:6c:90:a4:b2:ae:ed:1f:8e:0a:25:7b: 47:28:a7:c2:4a:8d:61:80:45:29:3b:d2:1b:de:f6:2b:be:88: 76:96:4e:33:ae:3e:59:2b:03:3b:04:51:be:c6:4d:51:3e:0f: 65:82:e4:17:de:9e:2a:9e:f3:4f:97:1b:31:fd:02:a5:7d:61: 1e:83:4f:71:a6:c9:e8:b1:4a:1e:7a:e4:d4:1f:3d:6e:00:66: 14:cf:ef:94:70:a8:78:c6:82:b3:a9:35:fd:11:ef:6e:63:07: 96:9f:9c:98:81:05:4a:b5:32:e0:40:58:e7:ae:7b:7e:3e:94: ce:46:29:e2:d5:2b:dd:78:fa:12:c4:c5:96:d4:69:aa:82:81: df:9f:ac:51:1f:69:5b:54:e5:75:10:7c:0b:d9:68:5b:28:2e: 11:4b:9a:e0:19:c4:76:e6:9a:91:21:b4:60:2c:e7:f0:d9:38: aa:63:1f:29:1d:ae:84:c1:de:ad:99:9b:c0:3a:f4:80:9a:37: ea:11:67:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxnNLkPFpLrd9qvMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE1MTAwMVoXDTI2MDEwNTE2MTAwMVowLzEtMCsGA1UEAxMk NWM2YjdhYjEtOGFlMy00ODE1LTllMTYtZWFhNjY3ODI1ZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0v2UKWaSt73WZ5USguZtLMdraF9xKW7+4fS ciUz0ydKPIMqjPItedRFNYDnxg7oGT2YalrVkpFIbrtNeadhOpFG08O5kYFfvYGt jkLKZoruP7VREbxvNtOALgxe43/ozoKl7zbol4BB+E7QhvkjRF5M9Hh7iH3mruD9 Qif+3TGre3uXmJEtMNrE+6hh7/lJxsTj3Z+35RBGwMCpbuLS9ddg0cq6kJ0lmXSb N2yKPf4/1QVsf19lWrFojUR9iRHMrUuAeyuzC9WF9yhxHQOYFOM3l+g78aw/ZtXW pzc79Lpkbxd9MmYeeDVPEY6MdiFOLRQs/uPfzGYAAzkK7b/6uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMb0/1n1DfjE+1GITYzW+fhLeLyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZGJkYmFmY2YtNThkOC0z MWRmLThlY2YtZTE2YWZiNDVkMWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNALfxOySV/XpiTgtnp1ukn2kCcV1B9UkPR5wU4j4umSNi8B55t/3tG stJ6UywGIrEB70vZR3TegonqgC5skKSyru0fjgole0cop8JKjWGARSk70hve9iu+ iHaWTjOuPlkrAzsEUb7GTVE+D2WC5Bfeniqe80+XGzH9AqV9YR6DT3GmyeixSh56 5NQfPW4AZhTP75RwqHjGgrOpNf0R725jB5afnJiBBUq1MuBAWOeue34+lM5GKeLV K914+hLExZbUaaqCgd+frFEfaVtU5XUQfAvZaFsoLhFLmuAZxHbmmpEhtGAs5/DZ OKpjHykdroTB3q2Zm8A69ICaN+oRZ98= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:22 2025 by rpki-client