$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa File: 2cf2825c-6372-3688-bd45-d02fb09144f4.roa (raw, json) Hash identifier: yANmJY0Nh1wZKaNHIgzBcIBfybggNSACsEgPbnY/OpA= Subject key identifier: 1F:F4:FA:67:9C:A6:AA:81:30:EA:4A:41:0D:E0:18:1D:7A:54:20:E2 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584EB2B1B40891D26680BBDBF5C0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa Signing time: Sun 02 Aug 2026 01:00:11 +0000 ROA not before: Sun 02 Aug 2026 01:00:11 +0000 ROA not after: Sat 31 Oct 2026 01:00:11 +0000 asID: 13335 IP address blocks: 161.107.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:b2:b1:b4:08:91:d2:66:80:bb:db:f5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Aug 2 01:00:11 2026 GMT Not After : Oct 31 01:00:11 2026 GMT Subject: CN=26012808-6ad7-495e-b8b3-207e8d2afe35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:65:39:87:d8:29:1a:d4:76:75:38:7a:82:13: 5f:02:7b:eb:d8:44:45:30:8a:db:0e:83:da:ed:8e: 36:bd:60:03:61:b3:6d:3c:a9:ae:0c:b4:ea:b9:f7: 2a:96:b4:5c:7e:31:a5:78:75:ec:0e:d4:b2:e0:a5: 45:da:cc:ee:f5:01:c6:07:2e:9b:de:9f:86:6d:ce: 0c:ec:46:14:d9:eb:14:25:f4:d6:82:03:02:6f:c8: c8:69:bb:00:61:20:72:bf:2c:6d:58:1c:d0:c7:29: 88:71:fc:98:bf:c1:f5:9a:b3:a9:d0:4c:48:85:2d: e2:5d:28:32:4f:d0:59:df:27:1f:b4:8a:7e:27:2b: 6f:42:a0:0c:43:06:8e:51:4f:c3:11:85:7b:23:74: e5:b1:68:3c:f2:bd:c0:8d:49:9d:8e:4e:67:f9:57: a9:19:2d:1d:eb:d8:bc:3f:93:ae:0a:2a:fb:44:c4: cd:a9:ff:95:f3:40:cc:23:29:c1:15:78:1c:c9:c7: 52:93:b4:c6:e8:2f:b5:bc:25:a6:ad:fa:1d:0b:aa: 89:96:64:b4:42:37:80:ff:ef:5b:26:2d:ea:c0:b0: a9:a3:8d:ef:94:71:50:2d:16:73:c2:98:f1:3a:31: 60:ae:25:d0:77:6c:d3:15:ef:52:a5:73:88:0b:d1: 08:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:F4:FA:67:9C:A6:AA:81:30:EA:4A:41:0D:E0:18:1D:7A:54:20:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/2cf2825c-6372-3688-bd45-d02fb09144f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:84:64:4c:3d:3e:9e:9c:94:fd:7f:f2:e1:ad:53:62:14:37: 26:bb:20:1e:56:5d:62:bc:c2:56:8d:92:f4:c9:ab:be:3d:8b: 01:e9:98:41:1c:79:f5:a8:c4:04:44:68:4b:4c:19:f3:90:97: 01:ac:50:71:04:f6:8b:7e:34:48:d1:a7:02:8a:a2:4d:aa:ad: e7:2b:eb:e6:02:7a:49:d2:3a:b4:1d:f5:23:b2:78:07:7d:c2: 09:b3:30:32:8d:fb:71:f3:c5:6a:97:6b:99:ac:4e:00:05:73: bd:9c:4e:42:4a:a8:a4:b6:b1:fb:da:36:2d:b1:76:04:5e:5f: b1:df:0d:67:5d:59:32:b3:b7:ad:34:5e:32:17:2d:31:c8:f1: 5a:09:87:93:12:b9:bf:e2:93:a2:c6:7d:bd:b4:88:2e:7f:90: c8:7d:aa:37:26:a7:24:45:df:58:a4:75:24:51:cc:3e:ac:c3: f1:31:83:00:08:0f:a2:55:dc:44:a3:04:64:f7:7b:21:e1:68: e3:e4:94:90:60:f6:a6:52:b4:b3:ac:03:0e:26:41:32:ac:d0: 75:69:cf:41:17:fb:40:7a:bf:c5:f6:f8:5b:cf:5f:0f:16:80: 8a:42:55:0d:53:6b:c0:92:b0:52:fd:db:92:8a:83:6a:61:39: 28:ab:cb:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ysbQIkdJmgLvb9cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDgwMjAxMDAxMVoXDTI2MTAzMTAxMDAxMVowLzEtMCsGA1UEAxMk MjYwMTI4MDgtNmFkNy00OTVlLWI4YjMtMjA3ZThkMmFmZTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWU5h9gpGtR2dTh6ghNfAnvr2ERFMIrbDoPa 7Y42vWADYbNtPKmuDLTqufcqlrRcfjGleHXsDtSy4KVF2szu9QHGBy6b3p+Gbc4M 7EYU2esUJfTWggMCb8jIabsAYSByvyxtWBzQxymIcfyYv8H1mrOp0ExIhS3iXSgy T9BZ3ycftIp+JytvQqAMQwaOUU/DEYV7I3TlsWg88r3AjUmdjk5n+VepGS0d69i8 P5OuCir7RMTNqf+V80DMIynBFXgcycdSk7TG6C+1vCWmrfodC6qJlmS0QjeA/+9b Ji3qwLCpo43vlHFQLRZzwpjxOjFgriXQd2zTFe9SpXOIC9EIUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/0+mecpqqBMOpKQQ3gGB16VCDiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvMmNmMjgyNWMtNjM3Mi0z Njg4LWJkNDUtZDAyZmIwOTE0NGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWEZEw9Pp6clP1/8uGtU2IUNya7IB5WXWK8wlaNkvTJq749iwHpmEEc efWoxAREaEtMGfOQlwGsUHEE9ot+NEjRpwKKok2qrecr6+YCeknSOrQd9SOyeAd9 wgmzMDKN+3HzxWqXa5msTgAFc72cTkJKqKS2sfvaNi2xdgReX7HfDWddWTKzt600 XjIXLTHI8VoJh5MSub/ik6LGfb20iC5/kMh9qjcmpyRF31ikdSRRzD6sw/ExgwAI D6JV3ESjBGT3eyHhaOPklJBg9qZStLOsAw4mQTKs0HVpz0EX+0B6v8X2+FvPXw8W gIpCVQ1Ta8CSsFL925KKg2phOSiry80= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:13 2026 by rpki-client