$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa File: c06b68a3-2e52-3ef4-a048-29fac226c21c.roa (raw, json) Hash identifier: tITqYm0glV0i5nVsBCJBgdcmccapqEgYAdLLX8O4+/M= Subject key identifier: 21:A0:EE:63:5E:ED:31:76:67:5E:79:F4:85:A7:1C:56:F5:B8:55:26 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584F2957B50EAFDE60ECCA14CA40 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 11626 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b5:0e:af:de:60:ec:ca:14:ca:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=51829457-3999-4bc7-9acd-bb4e89942cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:5f:a5:77:42:0b:28:4c:f8:08:cc:73:20:c8: de:52:b3:2c:34:4e:35:c5:cb:e5:a9:d3:a7:71:87: ea:fa:d1:b4:09:bc:59:5e:3c:11:84:67:50:0c:07: 79:03:a1:e1:48:36:70:c3:10:70:b4:41:53:db:4f: 0d:fb:07:4e:be:8f:c8:eb:a1:1f:f0:66:a1:a3:45: 94:a2:9d:84:2b:de:18:7e:1c:4d:03:91:15:26:64: 27:18:ce:7d:42:0f:c3:ea:93:c5:c6:c8:19:61:3e: a6:fd:3e:93:ad:bb:27:8f:03:95:b8:97:5f:af:63: e5:4b:47:87:67:5c:91:27:e2:50:c5:21:65:ca:55: 6d:65:ab:2c:0a:6a:14:97:70:d4:c1:04:7f:03:8c: 0f:fe:94:f7:2d:c9:77:22:31:e5:f1:2b:80:fa:4d: bc:ca:ec:5e:74:19:cd:40:3a:58:27:1f:e0:66:3f: 30:72:54:47:b9:39:69:7c:ea:07:dc:82:23:47:4e: 68:f0:ac:38:65:1b:5a:96:ef:eb:08:71:34:c1:28: ed:55:8d:27:ec:b3:5d:d7:7c:79:4f:d0:3f:f3:21: 79:d6:95:eb:54:78:51:0a:db:62:65:ae:fa:b3:70: 7d:c4:04:ec:cf:17:26:5d:12:8a:f0:d1:d0:b9:32: b6:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A0:EE:63:5E:ED:31:76:67:5E:79:F4:85:A7:1C:56:F5:B8:55:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/c06b68a3-2e52-3ef4-a048-29fac226c21c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:81:b4:fd:1c:ab:04:c0:f1:f8:26:82:68:5b:8d:bc:6f:c9: e4:8e:cd:e5:85:be:a7:ea:65:a2:9b:8c:ec:61:22:92:4f:6d: ab:03:b5:d3:df:81:00:14:ac:71:c7:bb:f2:eb:57:5e:15:dd: ee:6d:15:95:c1:82:38:c6:01:aa:d0:6a:7d:15:af:d0:07:22: 2f:6e:b3:73:b5:09:12:00:3a:77:b1:9b:49:de:59:43:20:f8: d5:15:ac:a2:e3:ba:97:48:b0:e6:44:63:7d:9a:5f:e0:04:1d: f8:9d:2f:60:94:a0:58:f9:50:6c:d8:eb:58:7b:27:95:e7:76: d2:2c:46:1e:ac:8d:5e:80:04:84:a9:fd:55:80:be:14:30:3d: ba:20:f6:f0:b9:73:34:cf:99:ad:6f:9f:e0:6e:5e:75:b7:6b: d3:be:bf:cb:7c:fd:36:97:26:1d:8d:ab:5a:73:ad:69:95:48: d1:af:c3:9a:ed:20:7d:fe:d1:fc:86:87:c4:0d:43:af:9c:d9: f6:f5:c2:e3:91:51:10:f3:f4:38:0a:cc:c3:66:79:da:3d:98: 42:42:5f:6c:66:8d:82:7f:1a:b7:3c:0d:2b:a2:3f:56:06:6b: fc:3a:6a:42:08:ed:ca:90:d9:7a:dc:c4:a3:c6:cc:aa:11:4e: 0e:66:6d:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7UOr95g7MoUykAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NTE4Mjk0NTctMzk5OS00YmM3LTlhY2QtYmI0ZTg5OTQyY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF+ld0ILKEz4CMxzIMjeUrMsNE41xcvlqdOn cYfq+tG0CbxZXjwRhGdQDAd5A6HhSDZwwxBwtEFT208N+wdOvo/I66Ef8Gaho0WU op2EK94YfhxNA5EVJmQnGM59Qg/D6pPFxsgZYT6m/T6TrbsnjwOVuJdfr2PlS0eH Z1yRJ+JQxSFlylVtZassCmoUl3DUwQR/A4wP/pT3Lcl3IjHl8SuA+k28yuxedBnN QDpYJx/gZj8wclRHuTlpfOoH3IIjR05o8Kw4ZRtalu/rCHE0wSjtVY0n7LNd13x5 T9A/8yF51pXrVHhRCttiZa76s3B9xATszxcmXRKK8NHQuTK2dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGg7mNe7TF2Z1559IWnHFb1uFUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYzA2YjY4YTMtMmU1Mi0z ZWY0LWEwNDgtMjlmYWMyMjZjMjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqBtP0cqwTA8fgmgmhbjbxvyeSOzeWFvqfqZaKbjOxhIpJPbasDtdPf gQAUrHHHu/LrV14V3e5tFZXBgjjGAarQan0Vr9AHIi9us3O1CRIAOnexm0neWUMg +NUVrKLjupdIsOZEY32aX+AEHfidL2CUoFj5UGzY61h7J5XndtIsRh6sjV6ABISp /VWAvhQwPbog9vC5czTPma1vn+BuXnW3a9O+v8t8/TaXJh2Nq1pzrWmVSNGvw5rt IH3+0fyGh8QNQ6+c2fb1wuORURDz9DgKzMNmedo9mEJCX2xmjYJ/Grc8DSuiP1YG a/w6akII7cqQ2XrcxKPGzKoRTg5mbcA= -----END CERTIFICATE-----Generated at Tue Oct 13 22:55:47 2026 by rpki-client