$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa File: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json) Hash identifier: okSA4wZGYk/dgnUN//wp47h2EwUGsIKmUdROUozLMtY= Subject key identifier: 8E:1E:FC:EB:61:F1:E5:7A:67:B7:83:AB:4C:8B:A6:AC:7E:7B:59:B0 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584B047C03CCC3FA2DD91C7324C0 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 11702 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:03:cc:c3:fa:2d:d9:1c:73:24:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=2f2bd656-e712-4040-af11-859839000930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:b7:cb:dd:6a:e5:bb:18:5c:62:66:ac:d4: a9:78:dd:6b:b9:a4:e6:1b:a7:b7:c1:34:be:47:e3: dc:2b:8e:04:9b:51:01:43:52:cc:73:26:8c:52:3c: 35:e3:b4:3e:81:a7:07:55:e9:c9:bb:44:7a:55:8a: dd:6d:aa:ec:ff:21:02:88:17:5f:39:3b:83:2a:d0: 4f:6b:84:3d:01:1b:c1:15:bc:e3:13:7e:28:b0:a8: 5e:28:7f:1f:73:0e:6b:87:ed:94:6e:8e:fc:65:4e: 88:cc:8c:ad:2c:cb:bb:78:32:b5:87:a2:65:f8:b4: e4:95:0d:29:c6:fd:b9:7c:90:d5:0f:60:91:a7:fe: a2:94:23:40:19:29:71:02:b0:45:95:91:6a:f5:cc: 2a:40:33:01:d7:d9:2d:82:72:e1:0c:9f:de:a3:5b: 05:5f:26:4e:d8:49:8b:bb:a2:f3:08:e8:7a:69:e5: ee:6b:7f:e3:ea:9b:26:fd:59:af:25:e7:d3:7d:59: 2b:3b:a1:62:d4:8b:64:7e:c5:e6:23:f8:b2:28:ff: f5:ba:0b:61:22:4d:62:0b:cc:1e:36:61:e6:40:a2: 1a:05:52:38:76:58:b4:7f:c1:48:d5:71:78:56:4f: b1:17:65:0a:db:25:da:6e:35:04:12:ff:e2:5e:db: 1b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1E:FC:EB:61:F1:E5:7A:67:B7:83:AB:4C:8B:A6:AC:7E:7B:59:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:43:a2:82:96:de:45:02:62:25:5c:16:b7:6c:4b:5e:a8:a3: d4:7f:e8:52:c4:1c:3f:7f:53:80:d8:bb:76:ea:2a:ee:a1:c1: a2:bd:8c:48:ec:28:f5:75:b9:8c:e0:73:90:b4:65:ee:af:35: 7e:df:e1:eb:c1:05:27:ab:69:3d:21:8a:f8:2c:6e:ae:d8:52: 1e:01:c0:3a:07:fe:b3:a0:fa:e0:f6:ac:99:d1:8d:a4:bd:b5: 6f:96:8c:2d:b9:a7:48:39:7a:bf:f1:53:b5:5a:44:71:e1:95: 04:39:6e:ed:57:5c:ff:40:a3:57:e9:e1:98:d5:25:d9:f8:a4: a7:62:c0:8d:1a:11:c7:14:7e:b2:87:cc:bc:b5:82:76:2f:cb: fa:f0:de:44:4b:7b:35:f9:0e:95:54:8e:4c:80:75:ff:6e:a3: 10:96:c1:c5:e1:84:5d:24:37:2c:b5:e2:01:c9:cc:e6:77:c3: e0:63:e9:31:3f:5a:bf:56:96:38:2e:64:a6:3a:2b:87:cf:9f: d5:4d:97:02:09:2c:bf:4b:35:e4:0a:22:f6:42:39:eb:14:dc: ba:04:e9:de:ac:49:6e:a1:78:2b:41:a2:b3:1c:cf:63:99:73: 54:2e:57:9e:33:b0:f3:9c:d3:9a:da:cb:4d:78:db:42:ff:98: f3:70:16:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAPMw/ot2RxzJMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MmYyYmQ2NTYtZTcxMi00MDQwLWFmMTEtODU5ODM5MDAwOTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqi3y91q5bsYXGJmrNSpeN1ruaTmG6e3wTS+ R+PcK44Em1EBQ1LMcyaMUjw147Q+gacHVenJu0R6VYrdbars/yECiBdfOTuDKtBP a4Q9ARvBFbzjE34osKheKH8fcw5rh+2Ubo78ZU6IzIytLMu7eDK1h6Jl+LTklQ0p xv25fJDVD2CRp/6ilCNAGSlxArBFlZFq9cwqQDMB19ktgnLhDJ/eo1sFXyZO2EmL u6LzCOh6aeXua3/j6psm/VmvJefTfVkrO6Fi1ItkfsXmI/iyKP/1ugthIk1iC8we NmHmQKIaBVI4dli0f8FI1XF4Vk+xF2UK2yXabjUEEv/iXtsbtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI4e/Oth8eV6Z7eDq0yLpqx+e1mwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWUyODUzNzYtZGZjNC0z MmRiLTlhMWMtY2ZhYzllOTYxZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRDooKW3kUCYiVcFrdsS16oo9R/6FLEHD9/U4DYu3bqKu6hwaK9jEjs KPV1uYzgc5C0Ze6vNX7f4evBBSeraT0hivgsbq7YUh4BwDoH/rOg+uD2rJnRjaS9 tW+WjC25p0g5er/xU7VaRHHhlQQ5bu1XXP9Ao1fp4ZjVJdn4pKdiwI0aEccUfrKH zLy1gnYvy/rw3kRLezX5DpVUjkyAdf9uoxCWwcXhhF0kNyy14gHJzOZ3w+Bj6TE/ Wr9WljguZKY6K4fPn9VNlwIJLL9LNeQKIvZCOesU3LoE6d6sSW6heCtBorMcz2OZ c1QuV54zsPOc05ray01420L/mPNwFmE= -----END CERTIFICATE-----Generated at Sat Oct 11 11:17:59 2025 by rpki-client