$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa File: ae285376-dfc4-32db-9a1c-cfac9e961d90.roa (raw, json) Hash identifier: yoNEEA1ovq6Hb8g9ZUjdYuI1VExktpg0SqUBQYVwe+I= Subject key identifier: 4B:CA:0B:56:16:64:DB:B6:FC:37:84:FE:C0:F8:70:F1:3D:94:B0:62 Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584DA6B0152A7125A4D1DEA36E00 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 11702 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:15:2a:71:25:a4:d1:de:a3:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=aaa325f6-7b64-4bf2-a15e-cf694a5d5727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:52:ca:98:93:cb:1c:ab:df:de:97:86:a8:36: e6:5c:17:40:dc:8f:f7:e4:96:c2:23:8a:73:75:76: 4a:3a:ac:00:64:14:66:43:30:9b:8f:ae:34:34:2e: 09:2e:3e:f9:de:84:ba:f8:8b:88:51:46:45:35:a0: 9d:12:52:77:27:a8:3c:40:86:c8:1b:85:c3:2d:30: e0:f0:a8:a3:dc:ea:86:a7:67:a0:04:af:59:21:07: 56:b5:bd:a6:44:ca:ab:0b:03:f9:5b:d7:cb:18:0f: f3:28:ce:19:1e:ba:4e:c1:70:ba:2b:f0:8e:17:01: 95:1e:86:07:66:08:a0:5a:d4:ab:51:cd:e2:58:a0: a3:ba:e6:52:3b:dc:82:ee:c6:a7:f3:52:a8:d6:28: 0e:a4:50:8b:91:25:2b:9f:61:2c:b8:7d:0f:f8:ef: 3e:4e:7e:31:6f:9d:96:ec:86:d8:3f:fa:e0:63:1f: cb:57:15:49:b9:13:43:fd:26:c3:d3:5e:7e:fe:d2: 83:4c:0e:c1:19:32:e0:1c:de:24:f7:f0:70:e8:14: f3:00:7d:7e:ad:d2:37:da:61:d8:06:37:28:44:ea: d3:6a:1c:3e:2a:61:2d:d2:2a:17:20:77:dd:9b:2b: 67:e2:d4:5d:db:a0:e4:74:51:f8:fb:87:86:da:0e: 0a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:0B:56:16:64:DB:B6:FC:37:84:FE:C0:F8:70:F1:3D:94:B0:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/ae285376-dfc4-32db-9a1c-cfac9e961d90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7e:cf:b5:5b:ef:34:c8:ec:00:86:1d:b4:ae:06:35:9d:4f: 47:ab:d7:1a:e8:08:95:da:12:35:7a:73:1e:57:64:e7:ca:bd: 13:4b:97:d9:a1:f5:40:a9:61:fb:0d:d8:e3:b1:7d:4d:d8:b6: 98:f5:13:70:54:fa:c0:fa:aa:a7:38:11:5e:47:6c:43:66:df: 2f:99:32:cc:0c:eb:38:5f:35:59:c7:ff:a1:c0:76:7b:f6:bd: 0e:21:ed:a5:54:55:a8:71:0a:e3:15:b1:6c:e7:d3:75:c6:a6: f3:02:94:ee:43:62:59:df:27:a6:b9:41:56:ce:3a:0a:a3:8f: ce:f6:e6:59:98:b0:af:dc:7e:3f:ca:52:c6:c1:47:c5:22:f3: bd:67:6a:80:73:f4:f3:34:7b:0b:88:01:93:e1:90:5f:09:e6: e8:70:dd:1a:b9:bf:5c:7b:26:98:1c:84:c4:21:55:ca:83:24: eb:2a:3f:2b:ba:23:ee:14:be:0b:c1:0f:96:18:32:64:d1:7a: 69:b4:5a:f7:64:68:09:0b:e8:c9:ca:67:fa:8e:58:80:9b:b8: 6e:32:17:a1:94:8a:43:85:f3:ef:e9:5c:e5:57:f4:a5:f1:2f: e1:37:82:4d:8d:c4:16:e3:6f:36:8e:26:83:94:61:8f:78:f7: 8f:48:de:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2msBUqcSWk0d6jbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YWFhMzI1ZjYtN2I2NC00YmYyLWExNWUtY2Y2OTRhNWQ1NzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlLKmJPLHKvf3peGqDbmXBdA3I/35JbCI4pz dXZKOqwAZBRmQzCbj640NC4JLj753oS6+IuIUUZFNaCdElJ3J6g8QIbIG4XDLTDg 8Kij3OqGp2egBK9ZIQdWtb2mRMqrCwP5W9fLGA/zKM4ZHrpOwXC6K/COFwGVHoYH ZgigWtSrUc3iWKCjuuZSO9yC7san81Ko1igOpFCLkSUrn2EsuH0P+O8+Tn4xb52W 7IbYP/rgYx/LVxVJuRND/SbD015+/tKDTA7BGTLgHN4k9/Bw6BTzAH1+rdI32mHY BjcoROrTahw+KmEt0ioXIHfdmytn4tRd26DkdFH4+4eG2g4KRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvKC1YWZNu2/DeE/sD4cPE9lLBiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvYWUyODUzNzYtZGZjNC0z MmRiLTlhMWMtY2ZhYzllOTYxZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF+z7Vb7zTI7ACGHbSuBjWdT0er1xroCJXaEjV6cx5XZOfKvRNLl9mh 9UCpYfsN2OOxfU3Ytpj1E3BU+sD6qqc4EV5HbENm3y+ZMswM6zhfNVnH/6HAdnv2 vQ4h7aVUVahxCuMVsWzn03XGpvMClO5DYlnfJ6a5QVbOOgqjj8725lmYsK/cfj/K UsbBR8Ui871naoBz9PM0ewuIAZPhkF8J5uhw3Rq5v1x7JpgchMQhVcqDJOsqPyu6 I+4UvgvBD5YYMmTRemm0WvdkaAkL6MnKZ/qOWICbuG4yF6GUikOF8+/pXOVX9KXx L+E3gk2NxBbjbzaOJoOUYY94949I3mA= -----END CERTIFICATE-----Generated at Wed May 13 18:41:00 2026 by rpki-client