$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa File: 0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa (raw, json) Hash identifier: sF85yUUvJzHStADZOKzEJT6xxxMlqkBkrH/G0ALRr9E= Subject key identifier: D2:50:45:B6:F3:C6:D7:02:98:8D:1F:D0:07:00:45:64:5B:7F:88:D5 Certificate issuer: /CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Certificate serial: 010D0C9F4328584F85784713D8142486A2B8F700 Authority key identifier: 14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa Signing time: Fri 16 Oct 2026 13:00:12 +0000 ROA not before: Fri 16 Oct 2026 13:00:12 +0000 ROA not after: Thu 14 Jan 2027 14:00:12 +0000 asID: 2581 IP address blocks: 161.203.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:85:78:47:13:d8:14:24:86:a2:b8:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83 Validity Not Before: Oct 16 13:00:12 2026 GMT Not After : Jan 14 14:00:12 2027 GMT Subject: CN=dfb5dfcc-d724-448d-b050-565f2425eac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:63:f8:a4:be:6b:50:67:f1:16:0e:88:74:5a: cf:f4:5d:e0:7d:3f:74:7c:bc:c4:77:0a:df:54:80: 2f:1f:89:81:99:fd:0c:7e:fb:d8:f6:2a:61:5b:d2: 13:12:b5:9c:92:3f:66:75:30:fa:9b:cc:ad:00:9c: 7f:4c:eb:d3:c6:84:0f:82:03:be:be:9c:f3:e8:b2: 70:db:94:fb:76:2b:8d:5f:86:68:42:ee:99:b5:83: 93:10:7e:86:d4:49:ac:01:f5:00:a6:a6:d2:3f:4f: 92:cd:7f:17:3c:03:54:e0:d2:c0:52:7a:00:65:d8: 38:16:33:1b:30:a8:1c:4b:01:23:20:5a:e1:e7:50: 59:a2:a2:86:0c:62:51:73:24:f6:70:18:64:8e:e1: b4:35:b6:ef:60:7e:5f:9b:80:f9:9b:61:7a:69:25: 9d:89:1c:79:b0:11:66:82:a0:c3:c3:a6:e6:6a:74: 4b:e8:74:c6:91:be:3e:36:07:fd:59:61:df:19:a3: 47:57:6f:67:10:ee:48:4c:50:4d:a3:7f:df:7b:b3: f3:e3:94:e5:ec:37:a2:94:6f:07:6e:06:6f:eb:a8: c4:33:0d:ca:18:ad:22:53:68:fc:6a:64:02:8a:5d: 6d:59:5f:7c:0d:63:d0:27:da:ae:59:a9:a9:7a:e8: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:50:45:B6:F3:C6:D7:02:98:8D:1F:D0:07:00:45:64:5B:7F:88:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/0c4a6200-5ffa-3a2b-8b7a-9dd3431f8c06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.crl X509v3 Authority Key Identifier: keyid:14:0F:EA:26:21:E9:BF:C7:EC:76:3A:20:0A:0E:4C:14:78:6B:6A:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d0f9bf41-39cd-4fc5-967c-d2a4ab0d9c83.cer sbgp-ipAddrBlock: critical IPv4: 161.203.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:b6:b1:a1:63:08:bf:a1:73:29:9a:4a:1f:b3:54:10:ea:48: 64:8e:77:f5:94:1e:cf:9f:9c:ac:3c:86:13:8d:23:45:5d:3a: 63:cc:2e:0d:54:48:00:bd:43:fb:b3:88:77:49:df:ec:ba:17: 69:41:f4:34:29:bb:d0:7f:cc:e4:53:4c:13:b4:3a:55:ce:5e: d9:60:d8:bd:5b:59:c0:ce:73:4b:84:a2:27:4a:a0:5a:0e:de: 81:21:cb:4c:f4:0c:3d:48:18:5a:f3:5d:7e:02:75:71:77:db: 37:8a:30:04:e0:d0:b6:86:ed:73:47:31:70:61:c9:4a:53:9b: d3:24:86:4a:35:b7:6b:57:07:99:26:2a:49:e3:6a:57:82:09: 23:d9:c7:59:bb:a6:d0:62:bd:45:f3:08:5b:2a:e9:71:bb:5c: 8f:ad:44:ea:f3:07:6c:85:61:0d:30:1a:8d:4e:0d:50:37:d6: ad:3c:86:67:19:fd:68:d6:28:c3:a9:73:3c:c5:5c:c6:18:3c: 47:52:77:ba:eb:73:39:2d:64:6b:cb:c0:79:6d:53:d8:af:7c: cd:12:18:85:18:a8:73:13:cc:9b:13:6d:0e:67:5d:a0:e5:2d: 55:3d:12:9d:47:79:bf:48:bb:ae:63:bb:8d:46:29:92:66:ce: 8c:50:b3:2e -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+FeEcT2BQkhqK49wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmOWJmNDEtMzljZC00ZmM1LTk2N2MtZDJhNGFiMGQ5 YzgzMB4XDTI2MTAxNjEzMDAxMloXDTI3MDExNDE0MDAxMlowLzEtMCsGA1UEAxMk ZGZiNWRmY2MtZDcyNC00NDhkLWIwNTAtNTY1ZjI0MjVlYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmP4pL5rUGfxFg6IdFrP9F3gfT90fLzEdwrf VIAvH4mBmf0MfvvY9iphW9ITErWckj9mdTD6m8ytAJx/TOvTxoQPggO+vpzz6LJw 25T7diuNX4ZoQu6ZtYOTEH6G1EmsAfUApqbSP0+SzX8XPANU4NLAUnoAZdg4FjMb MKgcSwEjIFrh51BZoqKGDGJRcyT2cBhkjuG0NbbvYH5fm4D5m2F6aSWdiRx5sBFm gqDDw6bmanRL6HTGkb4+Ngf9WWHfGaNHV29nEO5ITFBNo3/fe7Pz45Tl7DeilG8H bgZv66jEMw3KGK0iU2j8amQCil1tWV98DWPQJ9quWampeuj+uwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNJQRbbzxtcCmI0f0AcARWRbf4jVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5 YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0YWIwZDljODMvMGM0YTYyMDAtNWZmYS0z YTJiLThiN2EtOWRkMzQzMWY4YzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDBmOWJmNDEtMzljZC00ZmM1LTk2 N2MtZDJhNGFiMGQ5YzgzL2QwZjliZjQxLTM5Y2QtNGZjNS05NjdjLWQyYTRhYjBk OWM4My5jcmwwHwYDVR0jBBgwFoAUFA/qJiHpv8fsdjogCg5MFHhraggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMGY5YmY0MS0zOWNkLTRmYzUtOTY3Yy1kMmE0 YWIwZDljODMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAocswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMLaxoWMIv6FzKZpKH7NUEOpIZI539ZQez5+crDyGE40jRV06Y8wuDVRI AL1D+7OId0nf7LoXaUH0NCm70H/M5FNME7Q6Vc5e2WDYvVtZwM5zS4SiJ0qgWg7e gSHLTPQMPUgYWvNdfgJ1cXfbN4owBODQtobtc0cxcGHJSlOb0ySGSjW3a1cHmSYq SeNqV4IJI9nHWbum0GK9RfMIWyrpcbtcj61E6vMHbIVhDTAajU4NUDfWrTyGZxn9 aNYow6lzPMVcxhg8R1J3uutzOS1ka8vAeW1T2K98zRIYhRiocxPMmxNtDmddoOUt VT0SnUd5v0i7rmO7jUYpkmbOjFCzLg== -----END CERTIFICATE-----Generated at Sun Nov 15 14:53:57 2026 by rpki-client