$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa File: 963103b6-8a88-31d3-81bd-cdbe5585fb06.roa (raw, json) Hash identifier: 2L79m58CTUv79xjQWDzEI0N7JTJZzoOjrmSM7lurUMU= Subject key identifier: BC:D5:6A:FF:B9:EB:37:D2:84:17:C1:01:5D:CC:0B:AB:3D:A9:00:59 Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584F57680B06A7739080ADFE7200 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 161.107.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:68:0b:06:a7:73:90:80:ad:fe:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=9df0995d-e385-4f23-8fff-538c5da01e52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:72:c6:2d:68:37:aa:db:bf:36:fc:fe:8f:9f: 89:fe:54:3a:41:39:d4:ff:48:42:f4:fd:f7:09:7c: f9:3a:f7:2c:61:04:c7:c1:8c:af:bd:9b:3d:06:ec: 55:00:fc:ab:d8:ae:27:4c:4e:1d:31:f2:00:58:d8: a4:87:49:60:c9:11:76:77:71:90:ab:3b:f2:01:75: 5a:f3:b8:a6:21:00:00:38:b3:31:bd:ad:40:3f:fa: 4f:c8:ee:1f:6b:4f:e2:2f:7d:0a:b6:08:ec:1f:47: 3d:a8:e9:d3:b4:59:73:1b:20:af:a2:36:54:18:11: a1:a8:32:d3:3b:43:eb:94:04:db:0b:9a:20:7b:aa: 6b:2f:30:2b:89:7e:2b:e7:1b:b2:6f:d4:40:a3:0c: 11:35:e6:0c:bc:dc:ee:9f:aa:36:d5:d4:f5:d6:23: 32:89:9f:a7:11:b5:0c:cb:c3:96:96:80:73:ec:83: fa:e9:34:c5:d3:b8:8c:6a:d9:12:71:5a:84:c0:09: 2d:58:26:60:26:7e:d7:68:9b:4a:8a:ee:4c:26:13: f1:79:83:a8:3c:7f:ae:d9:4b:44:71:d4:26:79:f2: c6:29:5d:13:a6:b7:9e:7d:7e:75:46:e1:4c:43:e8: 15:38:e8:b8:41:74:b6:07:0d:e9:0d:eb:83:50:38: aa:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:D5:6A:FF:B9:EB:37:D2:84:17:C1:01:5D:CC:0B:AB:3D:A9:00:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/963103b6-8a88-31d3-81bd-cdbe5585fb06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:db:c2:b9:59:69:35:67:c3:3c:c4:d9:48:ef:b0:c1:54:6a: a7:eb:f4:cb:1f:ba:e3:ec:69:ae:ce:fd:21:38:8c:3e:96:85: a2:6a:f2:24:ec:7b:af:41:c0:94:f9:a1:4b:dc:d1:0e:48:e2: f4:94:71:e8:7a:60:04:51:79:48:8d:ae:f7:4e:0c:9d:e6:b1: e2:cc:f2:8c:19:91:eb:12:33:69:44:ad:37:17:52:65:c6:f6: ca:14:92:66:62:ad:bd:1a:47:8f:de:cc:32:00:37:93:fe:80: bb:3c:5f:c6:a1:a5:04:94:16:80:6a:40:d9:1f:91:e0:1b:82: 1b:e4:d8:66:36:a1:74:a2:6f:e5:99:02:1d:82:9b:00:8f:92: 40:dc:e0:68:ae:2e:11:b1:c3:b9:27:e7:ff:a5:82:12:19:79: 55:be:97:ff:03:8e:12:9f:91:92:53:97:e6:ea:ed:45:b5:c5: fe:99:cb:dc:f9:d5:bb:5c:da:18:4e:66:42:a7:e5:49:1f:70: af:e2:3d:67:75:51:8d:32:e4:ed:b6:ae:b8:6f:16:68:c5:84: f0:4d:91:ab:75:0e:1e:3d:08:15:f8:ab:88:b1:4b:d4:21:0f: a6:1a:8a:fa:fd:b8:91:31:30:5b:0a:ad:2a:30:53:c5:fb:db: 0d:3f:c9:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9XaAsGp3OQgK3+cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk OWRmMDk5NWQtZTM4NS00ZjIzLThmZmYtNTM4YzVkYTAxZTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3LGLWg3qtu/Nvz+j5+J/lQ6QTnU/0hC9P33 CXz5OvcsYQTHwYyvvZs9BuxVAPyr2K4nTE4dMfIAWNikh0lgyRF2d3GQqzvyAXVa 87imIQAAOLMxva1AP/pPyO4fa0/iL30KtgjsH0c9qOnTtFlzGyCvojZUGBGhqDLT O0PrlATbC5oge6prLzAriX4r5xuyb9RAowwRNeYMvNzun6o21dT11iMyiZ+nEbUM y8OWloBz7IP66TTF07iMatkScVqEwAktWCZgJn7XaJtKiu5MJhPxeYOoPH+u2UtE cdQmefLGKV0TpreefX51RuFMQ+gVOOi4QXS2Bw3pDeuDUDiqawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzVav+56zfShBfBAV3MC6s9qQBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvOTYzMTAzYjYtOGE4OC0z MWQzLTgxYmQtY2RiZTU1ODVmYjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoWtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjbwrlZaTVnwzzE2UjvsMFUaqfr9MsfuuPsaa7O/SE4jD6WhaJq8iTs e69BwJT5oUvc0Q5I4vSUceh6YARReUiNrvdODJ3mseLM8owZkesSM2lErTcXUmXG 9soUkmZirb0aR4/ezDIAN5P+gLs8X8ahpQSUFoBqQNkfkeAbghvk2GY2oXSib+WZ Ah2CmwCPkkDc4GiuLhGxw7kn5/+lghIZeVW+l/8DjhKfkZJTl+bq7UW1xf6Zy9z5 1btc2hhOZkKn5UkfcK/iPWd1UY0y5O22rrhvFmjFhPBNkat1Dh49CBX4q4ixS9Qh D6Yaivr9uJExMFsKrSowU8X72w0/yYE= -----END CERTIFICATE-----Generated at Thu Oct 8 10:09:43 2026 by rpki-client