$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/aeb65c44-26a0-3fa7-96ff-2eaa9e697ce1.roa File: aeb65c44-26a0-3fa7-96ff-2eaa9e697ce1.roa (raw, json) Hash identifier: pn88ZutXLXfG9S2GueB9b7JrlOn9Ir4POH540WG2amY= Subject key identifier: 4C:6F:3C:74:CA:44:6B:1B:79:A2:14:1F:79:E2:F3:3B:71:6B:69:1A Certificate issuer: /CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Certificate serial: 010D0C9F4328584E7E95063AB93E1A3B693902D0 Authority key identifier: B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/aeb65c44-26a0-3fa7-96ff-2eaa9e697ce1.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 22616 IP address blocks: 161.107.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:95:06:3a:b9:3e:1a:3b:69:39:02:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c04df04-2c9d-47f7-9c5f-383c0718b395 Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=d4855b75-8f11-4686-bb18-33580486d007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:85:cf:22:91:8c:56:98:93:91:cf:29:7b: b1:91:fa:9b:be:f0:d1:51:85:88:94:5e:c7:cc:4e: 3a:cc:80:9a:2f:79:a3:4e:74:4f:10:a6:88:db:6f: 66:ea:72:19:6a:dc:06:48:16:5e:c6:50:16:ff:31: bd:cf:24:5e:24:74:2e:d4:1c:62:e0:54:74:4f:5b: cb:ad:f4:b7:99:d3:d5:28:82:64:23:2c:e1:ad:c1: e6:3e:8a:8e:a0:17:3c:d2:2b:29:88:64:39:1d:c3: c1:39:af:ad:3a:ca:1e:41:38:cc:1b:cc:e1:f7:9c: 20:aa:57:f2:be:5b:a9:21:81:30:3e:dd:ab:71:1a: 3f:f3:e1:30:7d:6c:6e:c5:80:b6:c4:90:6c:be:ac: f2:65:f5:f6:9d:76:52:b7:6f:97:8d:80:2b:25:40: d7:eb:10:86:21:51:5d:de:f2:2f:b1:8a:18:f2:1f: 8f:8f:f7:90:65:da:b1:fe:22:9f:bc:23:be:20:59: 1d:58:d1:f4:92:2b:36:58:87:6a:21:0a:99:0d:21: ee:9e:25:48:83:e9:09:92:ee:a8:ab:db:69:23:77: 2a:59:8b:e2:b0:fa:5e:13:b5:4e:5e:2d:5f:47:fd: 26:d4:4d:4f:5e:86:a1:44:b9:87:98:a6:67:11:12: e9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:6F:3C:74:CA:44:6B:1B:79:A2:14:1F:79:E2:F3:3B:71:6B:69:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/aeb65c44-26a0-3fa7-96ff-2eaa9e697ce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395/0c04df04-2c9d-47f7-9c5f-383c0718b395.crl X509v3 Authority Key Identifier: keyid:B8:D6:39:8D:41:1E:EF:47:00:2C:78:C8:89:56:A2:2C:D4:BE:90:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0c04df04-2c9d-47f7-9c5f-383c0718b395.cer sbgp-ipAddrBlock: critical IPv4: 161.107.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:c8:85:ba:46:d1:77:61:c6:73:57:c5:c6:81:b5:75:41:de: ae:02:ec:3f:1b:6d:04:19:f6:58:14:17:d5:e3:03:d9:0d:54: 24:3c:db:0a:b4:4e:56:93:cd:c8:0c:18:41:cc:fc:15:d1:36: e9:a4:a8:04:54:3e:66:31:78:ee:79:8f:31:48:88:da:3e:e4: 76:cd:1b:17:93:87:88:b0:cb:e8:e4:f3:a5:e7:4b:8f:12:0a: 26:4e:8c:9f:02:11:07:0e:05:2f:41:5c:15:75:85:86:f7:8a: 00:b7:0e:bc:10:52:3d:e4:e6:97:5e:86:2b:be:50:1d:9c:3f: dd:8e:c6:7a:af:bc:0b:d3:d2:c8:33:e4:fe:b3:21:52:92:91: ec:20:dd:d9:86:de:ef:e9:f8:6a:54:59:01:97:55:08:5f:7a: 37:a4:4c:f4:34:5f:08:ae:63:f9:e0:96:47:fc:3b:6d:eb:02: f9:83:fe:d2:50:39:ed:fd:b7:20:73:66:46:99:79:a6:1e:82: 0e:d7:57:44:b5:72:4d:7a:5d:18:48:e0:48:a2:0d:f5:58:b8: ac:87:e3:8b:c2:98:5b:12:b5:1c:3b:3a:09:c4:43:7b:4b:35: fc:27:06:26:b7:ca:cb:05:0b:7d:8d:59:fb:bc:db:7d:1c:88: 78:3f:b3:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lQY6uT4aO2k5AtAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMwNGRmMDQtMmM5ZC00N2Y3LTljNWYtMzgzYzA3MThi Mzk1MB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk ZDQ4NTViNzUtOGYxMS00Njg2LWJiMTgtMzM1ODA0ODZkMDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjqFzyKRjFaYk5HPKXuxkfqbvvDRUYWIlF7H zE46zICaL3mjTnRPEKaI229m6nIZatwGSBZexlAW/zG9zyReJHQu1Bxi4FR0T1vL rfS3mdPVKIJkIyzhrcHmPoqOoBc80ispiGQ5HcPBOa+tOsoeQTjMG8zh95wgqlfy vlupIYEwPt2rcRo/8+EwfWxuxYC2xJBsvqzyZfX2nXZSt2+XjYArJUDX6xCGIVFd 3vIvsYoY8h+Pj/eQZdqx/iKfvCO+IFkdWNH0kis2WIdqIQqZDSHuniVIg+kJku6o q9tpI3cqWYvisPpeE7VOXi1fR/0m1E1PXoahRLmHmKZnERLpPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExvPHTKRGsbeaIUH3ni8ztxa2kaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0 ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNjMDcxOGIzOTUvYWViNjVjNDQtMjZhMC0z ZmE3LTk2ZmYtMmVhYTllNjk3Y2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGMwNGRmMDQtMmM5ZC00N2Y3LTlj NWYtMzgzYzA3MThiMzk1LzBjMDRkZjA0LTJjOWQtNDdmNy05YzVmLTM4M2MwNzE4 YjM5NS5jcmwwHwYDVR0jBBgwFoAUuNY5jUEe70cALHjIiVaiLNS+kBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYzA0ZGYwNC0yYzlkLTQ3ZjctOWM1Zi0zODNj MDcxOGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCoWtcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjIhbpG0XdhxnNXxcaBtXVB3q4C7D8bbQQZ9lgUF9XjA9kNVCQ82wq0 TlaTzcgMGEHM/BXRNumkqARUPmYxeO55jzFIiNo+5HbNGxeTh4iwy+jk86XnS48S CiZOjJ8CEQcOBS9BXBV1hYb3igC3DrwQUj3k5pdehiu+UB2cP92OxnqvvAvT0sgz 5P6zIVKSkewg3dmG3u/p+GpUWQGXVQhfejekTPQ0XwiuY/nglkf8O23rAvmD/tJQ Oe39tyBzZkaZeaYegg7XV0S1ck16XRhI4EiiDfVYuKyH44vCmFsStRw7OgnEQ3tL NfwnBia3yssFC32NWfu8230ciHg/s6w= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:36 2026 by rpki-client