$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa File: d1f459e0-e649-32e0-847d-1f51c79740a5.roa (raw, json) Hash identifier: tYGFWy55inUEgQOV5P6onCcMYiBXmSBr41qhWBvumXE= Subject key identifier: D2:F8:A6:C3:96:63:FC:71:25:93:1A:89:8E:57:E1:F4:BA:0E:8A:5C Certificate issuer: /CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Certificate serial: 010D0C9F4328584E86F4ED46C8DB1D29CEB06C80 Authority key identifier: 8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 19905 IP address blocks: 208.71.176.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f4:ed:46:c8:db:1d:29:ce:b0:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5161da6e-b7c6-48c9-a8c0-935b5c591083 Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=d4de6620-8bbc-49be-a421-124cfcd9f443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:81:3b:84:21:0a:ed:27:3c:d6:14:e3:e7:e2: f3:a8:78:0e:d1:12:a1:89:63:de:0d:c1:ed:af:4d: 3c:51:34:69:39:2c:f5:dd:e7:da:3d:a8:5e:f2:d0: f3:ef:9b:dc:a8:4b:41:37:4f:8c:92:8e:26:db:30: 9c:7b:e7:56:db:83:ae:e5:c4:07:46:cd:8a:75:e0: 94:18:1a:bf:ab:c1:c1:d9:c2:b1:0d:54:f6:54:04: 06:e0:3d:96:8e:17:69:35:58:65:ee:09:3b:bb:f2: fb:56:ea:a4:07:31:b1:24:71:18:43:a6:f8:a4:5d: eb:7d:d8:79:dc:64:a1:14:b7:78:85:a5:03:5d:1d: cd:c0:72:93:34:51:d7:dd:b3:7e:06:72:a4:08:3c: 60:2a:3b:dc:9b:06:46:a3:08:40:fd:1e:e6:f3:fc: d0:f1:f6:3c:1a:d6:97:4d:c0:42:98:50:70:1b:f9: 7f:db:cb:e2:de:8b:1a:e2:30:5b:78:00:25:d1:81: 1f:03:8f:a3:e4:86:2a:73:f6:7d:b2:9e:8c:4b:db: 57:bf:f8:65:26:3c:ad:2e:ef:3b:43:a4:a8:e0:d0: f3:2c:6e:27:32:23:78:94:8c:22:28:01:9f:b8:c3: 3d:6c:14:a0:41:7e:03:56:ce:da:62:ad:83:2d:a2: 14:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:A6:C3:96:63:FC:71:25:93:1A:89:8E:57:E1:F4:BA:0E:8A:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/d1f459e0-e649-32e0-847d-1f51c79740a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083/5161da6e-b7c6-48c9-a8c0-935b5c591083.crl X509v3 Authority Key Identifier: keyid:8B:50:F6:E6:66:35:AE:7A:90:FE:2B:07:D5:15:F7:CB:FA:39:35:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5161da6e-b7c6-48c9-a8c0-935b5c591083.cer sbgp-ipAddrBlock: critical IPv4: 208.71.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:6a:36:c7:a2:1a:f0:1c:42:3f:27:f1:15:d4:9d:41:b0:a2: c5:58:94:7a:82:8d:32:cb:98:f5:c3:f5:0c:c2:cd:c5:f2:65: 54:99:5c:0e:15:43:74:c0:a4:45:f7:37:b9:93:fc:41:04:9b: 81:83:cc:c9:ef:8c:c5:a3:85:56:e9:50:72:c9:fc:c4:2a:20: cd:d6:52:f5:0b:0e:21:7b:82:c9:b2:56:e4:19:11:3b:c7:0c: 8a:39:2d:30:5b:81:0c:53:6c:17:94:74:dc:1f:29:c3:26:c3: cd:a1:4c:2b:8c:83:14:61:c1:30:60:91:11:5b:d9:3f:13:d0: 1c:15:11:ed:9c:70:dd:03:b4:79:79:1a:b8:d4:a0:b0:76:99: 84:80:b9:81:23:f4:26:83:3d:81:6b:5f:70:09:f9:ef:f4:28: 9a:d9:68:8f:e7:85:30:20:7c:0b:d0:47:4e:25:3b:85:38:a2: 4b:e6:7b:66:60:26:21:63:0e:7f:f7:11:a7:ba:48:2b:9f:c7: ba:3a:1a:ca:46:9f:29:78:5f:bc:c6:83:07:ca:a1:98:69:8f: 77:cf:94:07:d6:41:20:47:23:35:e9:8d:25:37:2e:27:32:18: d2:e7:b9:37:ed:4f:bf:c2:d8:93:8d:cd:d8:e1:6e:df:52:2c: 64:cb:d1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9O1GyNsdKc6wbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE2MWRhNmUtYjdjNi00OGM5LWE4YzAtOTM1YjVjNTkx MDgzMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk ZDRkZTY2MjAtOGJiYy00OWJlLWE0MjEtMTI0Y2ZjZDlmNDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYE7hCEK7Sc81hTj5+LzqHgO0RKhiWPeDcHt r008UTRpOSz13efaPahe8tDz75vcqEtBN0+Mko4m2zCce+dW24Ou5cQHRs2KdeCU GBq/q8HB2cKxDVT2VAQG4D2WjhdpNVhl7gk7u/L7VuqkBzGxJHEYQ6b4pF3rfdh5 3GShFLd4haUDXR3NwHKTNFHX3bN+BnKkCDxgKjvcmwZGowhA/R7m8/zQ8fY8GtaX TcBCmFBwG/l/28vi3osa4jBbeAAl0YEfA4+j5IYqc/Z9sp6MS9tXv/hlJjytLu87 Q6So4NDzLG4nMiN4lIwiKAGfuMM9bBSgQX4DVs7aYq2DLaIUBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNL4psOWY/xxJZMaiY5X4fS6DopcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MTYx ZGE2ZS1iN2M2LTQ4YzktYThjMC05MzViNWM1OTEwODMvZDFmNDU5ZTAtZTY0OS0z MmUwLTg0N2QtMWY1MWM3OTc0MGE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTE2MWRhNmUtYjdjNi00OGM5LWE4 YzAtOTM1YjVjNTkxMDgzLzUxNjFkYTZlLWI3YzYtNDhjOS1hOGMwLTkzNWI1YzU5 MTA4My5jcmwwHwYDVR0jBBgwFoAUi1D25mY1rnqQ/isH1RX3y/o5NQMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MTYxZGE2ZS1iN2M2LTQ4YzktYThjMC05MzVi NWM1OTEwODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9qNseiGvAcQj8n8RXUnUGwosVYlHqCjTLLmPXD9QzCzcXyZVSZXA4V Q3TApEX3N7mT/EEEm4GDzMnvjMWjhVbpUHLJ/MQqIM3WUvULDiF7gsmyVuQZETvH DIo5LTBbgQxTbBeUdNwfKcMmw82hTCuMgxRhwTBgkRFb2T8T0BwVEe2ccN0DtHl5 GrjUoLB2mYSAuYEj9CaDPYFrX3AJ+e/0KJrZaI/nhTAgfAvQR04lO4U4okvme2Zg JiFjDn/3Eae6SCufx7o6GspGnyl4X7zGgwfKoZhpj3fPlAfWQSBHIzXpjSU3Licy GNLnuTftT7/C2JONzdjhbt9SLGTL0W0= -----END CERTIFICATE-----Generated at Fri Jul 24 14:49:03 2026 by rpki-client