$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa File: d1f459e0-e649-32e0-847d-1f51c79740a5.roa (raw, json) Hash identifier: mYofQLFv6ptWqQkGnmnSF415SWVWXdBvtSqR3vsct+Q= Subject key identifier: 1A:20:4D:2E:B9:CD:32:D7:6C:75:85:48:7C:DA:1F:15:8D:00:36:0B Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584B047BFDCCFEC98445FC19FF80 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 19905 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7b:fd:cc:fe:c9:84:45:fc:19:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=0c986220-83a6-4da6-bcd3-eccc0fc38083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c3:79:63:d1:0f:fc:99:01:24:b1:a5:64:5c: 98:36:c4:35:4f:43:ee:bb:b5:4e:31:d0:19:93:a4: b0:d8:35:8e:0d:6c:7a:cf:5c:8b:e0:17:3f:42:8a: cc:fb:c0:eb:ae:89:a2:29:75:11:9c:08:5c:8b:e0: 2c:96:ba:8b:91:6a:9c:e1:43:95:07:45:a8:b7:18: c5:35:d3:13:0f:a0:e2:34:e3:e3:2b:02:9c:13:16: 5d:41:14:03:7d:ae:a2:b9:b5:20:9b:97:6a:dc:21: 46:89:89:78:b6:d3:e7:29:da:84:f4:60:2f:7a:68: cb:e7:7a:80:d0:ee:04:3a:55:30:89:b6:e6:c9:00: 84:bf:ce:39:a6:d8:ae:98:ef:5a:92:7e:f8:e6:9c: f8:bf:03:18:1f:59:fe:69:85:c9:f1:2f:75:5e:0a: ed:8e:c3:8c:83:72:ac:39:b4:5f:f3:48:cc:09:ab: 39:03:89:5c:2c:a9:3b:7a:ab:43:4c:d7:1e:18:22: fe:ca:fd:f4:94:db:10:8d:1b:72:7e:c0:dc:23:fa: a8:ba:7d:82:51:2a:99:ef:2d:28:ff:ce:7f:01:e5: f5:06:ef:64:81:c5:47:56:6a:e2:d8:ca:7b:32:38: c4:03:37:64:6f:bd:b8:29:86:13:14:39:06:13:4f: 48:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:20:4D:2E:B9:CD:32:D7:6C:75:85:48:7C:DA:1F:15:8D:00:36:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:7d:3a:53:55:03:4f:6d:3b:32:8e:b8:dc:26:97:7a:8a:02: c4:19:b2:6f:c2:24:0e:25:15:8f:47:6d:8f:02:4d:0c:f7:23: 34:31:5e:bf:cc:c7:37:8d:76:af:c5:c4:72:09:5c:6c:0d:03: a0:bc:29:90:2f:f8:60:6e:a4:3a:57:e2:22:42:d9:32:2d:bc: 7c:ef:b6:f3:e3:33:75:38:83:1a:57:0d:c8:f3:10:4b:1a:52: a9:ca:1a:a6:c7:10:97:b2:6b:23:be:d4:8e:e3:93:60:12:f9: fa:75:01:6c:db:07:ca:56:2c:c0:fa:59:49:05:e2:f0:ff:c1: 21:68:ad:c0:26:37:16:90:de:b9:1f:cf:b6:5b:6f:3d:9a:bf: 73:05:30:6b:89:f1:4f:8d:df:c8:d4:1b:1e:ff:32:17:87:70: 07:bc:bf:1a:ed:63:06:f9:ea:3e:47:2f:b1:cf:84:83:ce:de: aa:6d:be:d9:a2:c8:8a:80:8b:cd:4c:d4:dc:21:e5:e8:38:84: c5:fb:34:b3:05:d5:ca:4a:67:01:14:b0:b1:f9:e5:b9:98:ae: e6:1b:b4:0a:96:6f:78:4f:07:d6:50:da:6c:9f:1b:6e:ad:db: 87:17:a5:eb:ca:7c:36:b4:58:f6:7f:2a:a7:21:91:fb:0e:39: 3a:51:bb:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEe/3M/smERfwZ/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk MGM5ODYyMjAtODNhNi00ZGE2LWJjZDMtZWNjYzBmYzM4MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sN5Y9EP/JkBJLGlZFyYNsQ1T0Puu7VOMdAZ k6Sw2DWODWx6z1yL4Bc/QorM+8DrromiKXURnAhci+AslrqLkWqc4UOVB0WotxjF NdMTD6DiNOPjKwKcExZdQRQDfa6iubUgm5dq3CFGiYl4ttPnKdqE9GAvemjL53qA 0O4EOlUwibbmyQCEv845ptiumO9akn745pz4vwMYH1n+aYXJ8S91XgrtjsOMg3Ks ObRf80jMCas5A4lcLKk7eqtDTNceGCL+yv30lNsQjRtyfsDcI/qoun2CUSqZ7y0o /85/AeX1Bu9kgcVHVmri2Mp7MjjEAzdkb724KYYTFDkGE09IjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBogTS65zTLXbHWFSHzaHxWNADYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvZDFmNDU5ZTAtZTY0OS0z MmUwLTg0N2QtMWY1MWM3OTc0MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFB9OlNVA09tOzKOuNwml3qKAsQZsm/CJA4lFY9HbY8CTQz3IzQxXr/M xzeNdq/FxHIJXGwNA6C8KZAv+GBupDpX4iJC2TItvHzvtvPjM3U4gxpXDcjzEEsa UqnKGqbHEJeyayO+1I7jk2AS+fp1AWzbB8pWLMD6WUkF4vD/wSForcAmNxaQ3rkf z7Zbbz2av3MFMGuJ8U+N38jUGx7/MheHcAe8vxrtYwb56j5HL7HPhIPO3qptvtmi yIqAi81M1Nwh5eg4hMX7NLMF1cpKZwEUsLH55bmYruYbtAqWb3hPB9ZQ2myfG26t 24cXpevKfDa0WPZ/KqchkfsOOTpRu1E= -----END CERTIFICATE-----Generated at Sat Oct 11 11:12:54 2025 by rpki-client