$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa File: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json) Hash identifier: UQm4jaJUgIT79EdCoG6j97qb82bi1y6JTZb+R1DbJbc= Subject key identifier: 48:53:31:8D:67:92:CE:96:1C:1A:B1:D4:55:EA:24:D6:79:F2:BD:FA Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584F2957B502C5CF5D4C3CBFC900 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 11702 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b5:02:c5:cf:5d:4c:3c:bf:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=d1068237-9f8b-4e0a-9ffd-46e706d94977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:cf:b6:cd:ed:f4:86:50:9a:89:ec:9c:49:c1: de:ff:3b:f4:15:08:dc:a3:b7:cf:aa:f1:26:06:75: 16:dd:09:00:96:7d:5b:23:79:c2:36:5a:b4:22:63: 23:30:3a:bb:b2:7a:f0:04:f8:0d:f5:99:dc:7f:a9: 2c:fc:47:ef:93:af:cf:5e:ce:39:ce:b5:34:16:e1: e2:f9:c0:99:cf:10:a0:25:40:96:6a:83:d2:63:c3: 67:7c:c1:73:d3:3e:93:85:5a:aa:bc:e7:88:12:59: 47:51:cc:68:1d:80:a0:f5:44:c3:a1:db:f8:f9:35: 79:25:5b:9d:11:12:83:5b:fe:ee:f8:e6:67:61:1b: db:02:45:64:ab:a6:c4:8b:a3:14:c1:42:cf:e8:4b: 25:f2:12:69:9c:a5:21:4e:02:e6:c1:28:a2:86:bb: 11:be:ea:76:09:8f:c9:d3:cd:fe:ce:e7:81:38:71: 3d:ea:36:70:6d:a6:32:d8:1d:c0:94:26:d1:77:b9: b0:d8:54:45:1f:47:fb:b7:78:23:61:ae:63:82:5a: 0e:0a:06:0e:88:6d:ee:1f:96:88:6c:a8:0d:c2:63: dd:a8:7e:92:80:58:f0:ea:7e:a1:db:b2:ae:1c:2f: b9:2e:99:ec:7b:13:b2:b7:c1:75:eb:2a:e2:ac:94: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:53:31:8D:67:92:CE:96:1C:1A:B1:D4:55:EA:24:D6:79:F2:BD:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c9:72:c7:90:1c:07:66:9a:60:3c:cd:8a:50:77:3d:96:d8: c1:c2:b5:06:ec:43:22:e6:70:f7:df:91:8e:2c:22:c6:53:93: 92:63:1c:42:45:33:db:d2:a9:12:bf:05:b4:b8:5a:15:73:11: aa:61:af:4d:b8:4b:74:92:bf:eb:e0:49:8e:0a:2a:f3:57:5f: bc:f4:ec:f2:68:db:7d:68:e5:93:43:31:72:14:d3:6a:28:42: ab:e5:7c:76:5e:4c:45:7f:82:03:ec:54:c1:02:72:b3:9c:da: 6f:b1:d4:af:9b:8a:18:95:50:33:69:59:43:0d:7f:2f:b9:fc: a9:ce:31:5c:7d:e4:8a:7c:4a:2a:a7:30:b4:df:db:f6:2a:ec: 94:d5:eb:fe:50:0d:55:cb:70:92:21:d7:3b:0a:36:b5:b5:f6: f7:ea:25:d5:d1:cd:00:31:e9:f3:56:1e:0b:b3:82:c3:a8:a4: f4:05:7f:94:cd:61:7f:ee:b9:ee:47:ec:8e:85:0e:15:4c:63: 1e:13:eb:d4:2a:d3:50:2b:61:d4:52:51:77:3d:72:55:b2:de: 88:5b:cc:d4:29:1e:06:49:79:cb:a5:08:41:00:c8:c5:84:e6: 60:9f:23:2c:c0:51:64:f5:59:8f:06:ae:0f:43:74:0d:46:3c: d9:40:ca:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7UCxc9dTDy/yQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZDEwNjgyMzctOWY4Yi00ZTBhLTlmZmQtNDZlNzA2ZDk0OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8+2ze30hlCaieycScHe/zv0FQjco7fPqvEm BnUW3QkAln1bI3nCNlq0ImMjMDq7snrwBPgN9Zncf6ks/Efvk6/PXs45zrU0FuHi +cCZzxCgJUCWaoPSY8NnfMFz0z6ThVqqvOeIEllHUcxoHYCg9UTDodv4+TV5JVud ERKDW/7u+OZnYRvbAkVkq6bEi6MUwULP6Esl8hJpnKUhTgLmwSiihrsRvup2CY/J 083+zueBOHE96jZwbaYy2B3AlCbRd7mw2FRFH0f7t3gjYa5jgloOCgYOiG3uH5aI bKgNwmPdqH6SgFjw6n6h27KuHC+5LpnsexOyt8F16yrirJSX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhTMY1nks6WHBqx1FXqJNZ58r36MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWUyODUzNzYtZGZjNC0z MmRiLTlhMWMtY2ZhYzllOTYxZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITJcseQHAdmmmA8zYpQdz2W2MHCtQbsQyLmcPffkY4sIsZTk5JjHEJF M9vSqRK/BbS4WhVzEaphr024S3SSv+vgSY4KKvNXX7z07PJo231o5ZNDMXIU02oo QqvlfHZeTEV/ggPsVMECcrOc2m+x1K+bihiVUDNpWUMNfy+5/KnOMVx95Ip8Siqn MLTf2/Yq7JTV6/5QDVXLcJIh1zsKNrW19vfqJdXRzQAx6fNWHguzgsOopPQFf5TN YX/uue5H7I6FDhVMYx4T69Qq01ArYdRSUXc9clWy3ohbzNQpHgZJeculCEEAyMWE 5mCfIyzAUWT1WY8Grg9DdA1GPNlAyls= -----END CERTIFICATE-----Generated at Wed Oct 14 12:34:41 2026 by rpki-client