$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa File: efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa (raw, json) Hash identifier: iFTCWl4Q48nEHpWuynqnBRYYWFQssUsZjaLQWGm20b8= Subject key identifier: 15:19:31:01:9B:E6:39:35:05:A9:86:B0:23:16:79:EC:28:CD:27:6C Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584B7192C30E592AC69C3039A800 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa Signing time: Tue 07 Oct 2025 14:49:45 +0000 ROA not before: Tue 07 Oct 2025 14:49:45 +0000 ROA not after: Mon 05 Jan 2026 15:49:45 +0000 asID: 17275 IP address blocks: 161.107.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:71:92:c3:0e:59:2a:c6:9c:30:39:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Oct 7 14:49:45 2025 GMT Not After : Jan 5 15:49:45 2026 GMT Subject: CN=f891c4ba-da51-4b91-9f0e-92da56556c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:48:8a:d1:60:78:b8:8b:32:e4:f0:f8:0e:2d: d3:45:0f:06:bf:a8:3a:f3:b4:e0:fd:77:3e:68:ed: 0f:fc:ed:13:0a:52:5e:64:4e:ea:68:4f:a8:ae:26: bc:f8:6e:54:2a:42:24:5f:eb:b0:e0:73:de:f6:ef: dc:86:fb:e2:5e:18:f0:d5:68:c5:66:25:51:b0:b6: 84:55:ac:e0:bf:fb:d9:79:b0:5d:82:8f:0c:c0:1b: f1:7d:98:79:be:61:4f:3b:72:3e:00:70:8d:07:51: b6:ba:c3:0c:37:26:7d:da:59:71:8a:98:21:32:6c: 12:e8:70:27:50:28:bc:95:ae:c3:19:6c:b5:c3:84: 72:48:ed:62:0b:56:95:33:d4:95:9a:a4:8a:b3:ab: da:94:6b:f7:b6:14:12:17:f1:52:d7:36:fe:1a:f1: c3:6a:ef:1f:d4:59:e0:43:cb:33:ce:86:ab:84:39: 6c:8a:33:32:fa:77:03:59:0c:dd:ae:68:6c:dd:e1: e7:98:2e:51:9b:78:26:54:75:b8:51:6e:f9:60:91: a8:35:8a:5e:de:51:5f:58:c5:0d:cd:81:58:0d:0f: 04:d3:dd:ab:8d:5c:4d:1c:79:81:52:ce:c6:a9:d8: cf:5b:bc:28:83:04:af:85:3d:5c:07:c7:50:4b:14: 1c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:19:31:01:9B:E6:39:35:05:A9:86:B0:23:16:79:EC:28:CD:27:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/efcc87f2-f89d-30a2-9b5b-fcfa68f7f1cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:03:ff:1c:bf:ee:2d:6b:f5:21:d8:6d:78:64:c9:aa:98:84: 99:53:9b:5b:c5:32:bd:75:9f:f9:28:dc:42:fe:cd:ee:a3:12: 65:93:be:13:4d:a1:18:4b:6f:b5:90:d7:cb:18:99:ac:7c:56: 3d:55:17:bb:62:e8:c5:88:84:04:20:2d:1d:15:67:0a:5e:8f: 11:ea:c4:32:6b:44:98:a5:ca:7f:ab:fa:67:b4:c6:45:6f:35: fc:97:77:12:a3:a5:80:f9:cc:1d:40:74:6e:12:3a:fd:54:e8: ab:da:6e:6c:f8:fa:c8:f5:f8:df:5d:d5:cf:b0:39:94:2e:a7: ed:31:56:1f:03:bd:af:1d:34:ae:71:f8:bd:9e:18:2a:c7:16: f9:ce:7c:b4:71:3f:25:50:d3:33:09:cf:00:86:fb:fe:28:ec: e5:15:e0:ad:fd:7e:21:09:c8:e0:98:c2:77:27:d6:cb:d6:f2: f4:79:f3:80:86:e1:71:75:01:75:dc:8d:cd:43:2a:97:92:e4: d0:99:53:ce:a5:65:aa:50:09:c4:cb:2f:e0:00:f0:cf:d9:56: 11:66:0e:14:cb:13:d9:fe:57:75:87:fc:79:59:50:e8:86:6b: 39:5c:84:74:e1:e4:b1:e1:ad:fc:45:4b:14:3f:57:ef:29:f7: d1:73:ec:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtxksMOWSrGnDA5qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI1MTAwNzE0NDk0NVoXDTI2MDEwNTE1NDk0NVowLzEtMCsGA1UEAxMk Zjg5MWM0YmEtZGE1MS00YjkxLTlmMGUtOTJkYTU2NTU2YzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUiK0WB4uIsy5PD4Di3TRQ8Gv6g687Tg/Xc+ aO0P/O0TClJeZE7qaE+oria8+G5UKkIkX+uw4HPe9u/chvviXhjw1WjFZiVRsLaE Vazgv/vZebBdgo8MwBvxfZh5vmFPO3I+AHCNB1G2usMMNyZ92llxipghMmwS6HAn UCi8la7DGWy1w4RySO1iC1aVM9SVmqSKs6valGv3thQSF/FS1zb+GvHDau8f1Fng Q8szzoarhDlsijMy+ncDWQzdrmhs3eHnmC5Rm3gmVHW4UW75YJGoNYpe3lFfWMUN zYFYDQ8E092rjVxNHHmBUs7GqdjPW7wogwSvhT1cB8dQSxQcLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUZMQGb5jk1BamGsCMWeewozSdsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvZWZjYzg3ZjItZjg5ZC0z MGEyLTliNWItZmNmYTY4ZjdmMWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUD/xy/7i1r9SHYbXhkyaqYhJlTm1vFMr11n/ko3EL+ze6jEmWTvhNN oRhLb7WQ18sYmax8Vj1VF7ti6MWIhAQgLR0VZwpejxHqxDJrRJilyn+r+me0xkVv NfyXdxKjpYD5zB1AdG4SOv1U6Kvabmz4+sj1+N9d1c+wOZQup+0xVh8Dva8dNK5x +L2eGCrHFvnOfLRxPyVQ0zMJzwCG+/4o7OUV4K39fiEJyOCYwncn1svW8vR584CG 4XF1AXXcjc1DKpeS5NCZU86lZapQCcTLL+AA8M/ZVhFmDhTLE9n+V3WH/HlZUOiG azlchHTh5LHhrfxFSxQ/V+8p99Fz7PQ= -----END CERTIFICATE-----Generated at Wed Oct 8 19:39:14 2025 by rpki-client