$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa File: af0f2f5c-7f07-33be-bd01-a7960233392f.roa (raw, json) Hash identifier: Gf3Doivg+eDBzUKhMfTvPsPtdo3wrRd/4WjTWw9aUGQ= Subject key identifier: 76:84:39:9B:71:63:93:F9:53:61:D2:2B:67:0C:B6:49:9B:31:BB:63 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584F2957B4F6CF993C01A2294D40 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 36329 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b4:f6:cf:99:3c:01:a2:29:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=9aa9acfa-c4bf-4d42-a453-ea40d0d78ea5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a3:f8:8f:98:42:79:95:40:b6:84:1c:71:69: 7c:9b:f3:3f:98:96:dc:de:bc:5e:23:6b:cc:46:58: 18:30:6e:d1:67:6f:37:0c:00:c7:4d:4e:2a:fa:58: 22:6d:15:e0:a5:62:46:4d:a1:e2:39:24:68:16:bb: 51:49:d0:95:ad:58:da:c4:9c:ef:e6:9b:c2:ca:90: ae:d9:2a:25:c3:25:37:ca:5a:77:a9:64:bc:50:2d: 8d:c6:be:41:dc:02:8d:05:16:71:7f:5d:74:7e:8e: cf:16:28:b4:18:35:60:11:4d:c2:49:c6:75:3c:e2: b7:77:ef:ce:00:4d:9c:25:0c:3e:e3:4b:ba:fd:6e: 9e:71:33:be:27:8b:e1:28:d5:aa:22:c1:44:e8:90: 66:2a:38:db:4a:dc:de:61:de:46:31:4a:6e:64:19: 60:50:de:ca:12:11:ba:dc:c1:96:3f:0c:21:51:0e: 1d:5c:f0:7b:ed:81:97:97:c5:5b:e5:c7:f5:cc:85: f7:ac:7f:b0:63:bb:f6:0b:77:d4:44:48:2a:23:64: 02:0c:c1:d5:04:24:0b:8b:7b:61:75:16:bc:3c:b1: 91:61:cf:12:7a:e3:cf:f3:da:04:58:18:4e:40:18: e1:f1:4e:62:68:5e:c9:4b:32:c0:b0:2f:f5:7f:de: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:84:39:9B:71:63:93:F9:53:61:D2:2B:67:0C:B6:49:9B:31:BB:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/af0f2f5c-7f07-33be-bd01-a7960233392f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:63:03:d9:58:7c:12:87:ab:75:a3:22:5e:83:20:30:5f:8f: 99:71:6a:4e:3d:8c:ef:9b:11:d1:77:70:96:72:75:c0:33:9f: 9d:f1:7d:4b:d2:1c:f7:80:9f:b5:92:92:82:26:68:84:76:e1: 94:63:91:84:6e:0d:ac:74:02:c3:93:5c:64:75:6b:29:3d:6a: 67:ad:9a:9d:ca:d3:f1:78:c4:85:13:8b:0a:94:15:c0:ae:43: 04:a0:8d:f0:7a:ee:cf:b9:65:49:13:7d:87:b7:1b:72:19:91: 49:0f:08:5f:73:45:2e:97:27:09:2d:13:58:6e:4a:0e:5d:3e: cf:00:b3:58:3a:79:bb:4c:43:fd:29:eb:73:d2:a7:41:fe:22: 20:de:92:02:68:d4:72:20:d7:e8:a0:c4:cc:67:1b:f6:fd:fb: dc:fc:34:32:5a:67:ea:79:60:d6:a2:41:22:d8:26:51:1c:bb: 28:46:87:4c:16:de:4c:40:ac:85:79:9f:6d:59:6a:9d:5f:36: f2:15:a3:e1:8d:93:71:ea:9b:14:61:26:56:f2:25:94:84:fa: 42:b8:74:d1:06:57:6e:e6:22:1f:8e:f4:10:b3:9b:fa:32:0d: af:72:82:0a:67:67:c0:d5:2e:41:44:1b:fc:a7:33:fd:2f:e0: e6:88:a6:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7T2z5k8AaIpTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OWFhOWFjZmEtYzRiZi00ZDQyLWE0NTMtZWE0MGQwZDc4ZWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKP4j5hCeZVAtoQccWl8m/M/mJbc3rxeI2vM RlgYMG7RZ283DADHTU4q+lgibRXgpWJGTaHiOSRoFrtRSdCVrVjaxJzv5pvCypCu 2SolwyU3ylp3qWS8UC2Nxr5B3AKNBRZxf110fo7PFii0GDVgEU3CScZ1POK3d+/O AE2cJQw+40u6/W6ecTO+J4vhKNWqIsFE6JBmKjjbStzeYd5GMUpuZBlgUN7KEhG6 3MGWPwwhUQ4dXPB77YGXl8Vb5cf1zIX3rH+wY7v2C3fUREgqI2QCDMHVBCQLi3th dRa8PLGRYc8SeuPP89oEWBhOQBjh8U5iaF7JSzLAsC/1f97cGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaEOZtxY5P5U2HSK2cMtkmbMbtjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWYwZjJmNWMtN2YwNy0z M2JlLWJkMDEtYTc5NjAyMzMzOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZjA9lYfBKHq3WjIl6DIDBfj5lxak49jO+bEdF3cJZydcAzn53xfUvS HPeAn7WSkoImaIR24ZRjkYRuDax0AsOTXGR1ayk9ametmp3K0/F4xIUTiwqUFcCu QwSgjfB67s+5ZUkTfYe3G3IZkUkPCF9zRS6XJwktE1huSg5dPs8As1g6ebtMQ/0p 63PSp0H+IiDekgJo1HIg1+igxMxnG/b9+9z8NDJaZ+p5YNaiQSLYJlEcuyhGh0wW 3kxArIV5n21Zap1fNvIVo+GNk3HqmxRhJlbyJZSE+kK4dNEGV27mIh+O9BCzm/oy Da9yggpnZ8DVLkFEG/ynM/0v4OaIpgk= -----END CERTIFICATE-----Generated at Tue Oct 13 04:37:25 2026 by rpki-client