$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa File: af0f2f5c-7f07-33be-bd01-a7960233392f.roa (raw, json) Hash identifier: hiYL+jtpFmYW40P5sHJNsjppZKhBr2vC/hhXGaBKcKY= Subject key identifier: C8:A7:CB:C9:E0:E7:43:E2:A2:7F:D9:28:C2:FE:90:3B:DC:42:ED:B6 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584B047C03B8287B92DA787CD4C0 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 36329 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:03:b8:28:7b:92:da:78:7c:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=076b5f88-4b08-4940-84ab-4d9f40a0c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:65:1b:e0:4b:12:b6:73:92:5f:d2:3a:cb:81: 19:f1:a8:cd:c2:03:2d:fd:b5:30:bd:3c:96:e9:5e: cf:4c:ce:bf:65:aa:08:99:91:1b:bc:b6:9d:e7:42: a5:bd:22:74:9f:67:3d:4b:65:d7:95:e9:78:9b:65: 8b:df:f2:e2:68:78:0f:c1:8f:63:e1:0e:a4:3c:a0: 4d:67:63:b8:84:80:d4:92:a5:67:72:c7:89:52:5a: 64:57:95:cb:90:24:a0:51:48:60:7b:cd:c1:62:e9: 76:b8:66:6f:ec:18:3b:69:fd:eb:9a:65:23:ca:ff: 2e:69:fb:ca:30:42:9b:93:9b:cc:a2:45:f6:97:55: aa:27:b3:fd:bb:16:79:f4:e9:63:90:e5:9e:ac:08: 46:6c:34:5d:44:b3:bb:0d:91:2f:57:87:ce:18:f6: 14:22:b5:bc:31:a3:3a:64:7e:9f:ca:90:b8:43:50: 06:90:ca:f7:a9:3d:79:f6:d9:19:87:71:ff:f1:c6: d8:ee:0d:0d:9d:5b:64:7c:ed:ba:5b:49:4a:a3:f0: af:db:1b:36:74:88:e7:24:6c:7a:62:8b:2e:d7:ef: 56:cc:b1:0c:a0:d3:ab:40:cf:89:79:f1:1e:07:8d: 6a:11:a8:72:1a:85:57:60:e2:e5:fd:78:2d:da:1b: d6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:A7:CB:C9:E0:E7:43:E2:A2:7F:D9:28:C2:FE:90:3B:DC:42:ED:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1d:13:13:99:94:b9:55:15:ec:68:15:e3:3b:37:1e:50:99: d7:59:1e:44:6c:98:33:62:ee:00:19:94:e0:e5:e1:00:0f:e9: 57:e4:8b:5b:6c:e5:9f:34:0e:47:c0:f9:22:f2:ea:e0:d6:fa: 90:75:72:8f:1a:ef:2c:35:47:6a:a6:eb:ac:22:fb:fc:8d:67: 97:00:0f:0a:26:0e:b2:96:99:f2:25:ef:b4:78:de:0d:f1:e4: d3:41:27:c5:26:6b:42:0e:8a:a0:61:2d:1d:a9:61:cc:4c:3c: 11:97:d0:7d:0e:15:e9:15:14:5f:77:4e:fd:12:6f:f3:50:1e: 6c:48:41:81:f2:f9:5d:5d:78:2d:dc:77:5c:08:65:ef:80:23: 42:b2:1d:80:aa:10:3c:c4:37:df:69:47:f4:3c:9c:1e:98:b3: 92:72:35:23:15:52:5e:db:45:38:ca:ea:5f:f0:eb:29:fc:97: 1b:b1:d6:3c:29:9a:20:fd:62:ea:2d:2e:b4:71:7e:9d:84:3a: a7:2c:b4:38:7c:79:9c:e9:23:45:1a:f2:c0:9c:61:dd:0f:69: a0:2c:07:08:44:e7:87:9c:8b:9c:2d:76:f6:78:a2:ab:ef:16: 8f:04:48:cb:f2:49:e3:a2:eb:65:da:3f:fb:f7:f1:ad:1b:24: 88:a4:18:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfAO4KHuS2nh81MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MDc2YjVmODgtNGIwOC00OTQwLTg0YWItNGQ5ZjQwYTBjNzkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGUb4EsStnOSX9I6y4EZ8ajNwgMt/bUwvTyW 6V7PTM6/ZaoImZEbvLad50KlvSJ0n2c9S2XXlel4m2WL3/LiaHgPwY9j4Q6kPKBN Z2O4hIDUkqVncseJUlpkV5XLkCSgUUhge83BYul2uGZv7Bg7af3rmmUjyv8uafvK MEKbk5vMokX2l1WqJ7P9uxZ59OljkOWerAhGbDRdRLO7DZEvV4fOGPYUIrW8MaM6 ZH6fypC4Q1AGkMr3qT159tkZh3H/8cbY7g0NnVtkfO26W0lKo/Cv2xs2dIjnJGx6 Yosu1+9WzLEMoNOrQM+JefEeB41qEahyGoVXYOLl/Xgt2hvWmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiny8ng50Pion/ZKML+kDvcQu22MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWYwZjJmNWMtN2YwNy0z M2JlLWJkMDEtYTc5NjAyMzMzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIdExOZlLlVFexoFeM7Nx5QmddZHkRsmDNi7gAZlODl4QAP6Vfki1ts 5Z80DkfA+SLy6uDW+pB1co8a7yw1R2qm66wi+/yNZ5cADwomDrKWmfIl77R43g3x 5NNBJ8Uma0IOiqBhLR2pYcxMPBGX0H0OFekVFF93Tv0Sb/NQHmxIQYHy+V1deC3c d1wIZe+AI0KyHYCqEDzEN99pR/Q8nB6Ys5JyNSMVUl7bRTjK6l/w6yn8lxux1jwp miD9YuotLrRxfp2EOqcstDh8eZzpI0Ua8sCcYd0PaaAsBwhE54eci5wtdvZ4oqvv Fo8ESMvySeOi62XaP/v38a0bJIikGCk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:31 2025 by rpki-client