$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa File: ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa (raw, json) Hash identifier: hj2nX1FSYdz32pPcpacaKmeR7cYLX+YkulEvDzSZ3dg= Subject key identifier: 76:E2:DF:50:FB:69:66:AA:61:4B:82:3F:A6:21:08:AD:24:7D:10:8A Certificate issuer: /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Certificate serial: 010D0C9F4328584F2957B055C6D720557AC94508 Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 14061 IP address blocks: 134.199.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b0:55:c6:d7:20:55:7a:c9:45:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=937aea9c-98ed-49d1-9d89-5ee8fc8124eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:aa:6f:c7:00:b5:bd:8b:5c:80:06:a1:98:d0: 3f:7b:31:70:6c:75:ce:2e:e7:13:db:db:25:80:e2: 86:0d:ca:9c:88:69:5e:c0:69:1e:fa:92:c2:0a:9c: e2:17:87:be:bb:e8:7a:08:b0:4f:99:48:82:29:fc: dd:3e:85:ac:02:6b:90:1c:e3:98:07:03:ef:b5:a0: e2:63:e3:01:45:75:74:5f:f1:ee:bf:5d:c9:b1:97: d0:0d:cb:ba:0e:d1:9c:7a:d0:9c:c1:e3:d6:92:ea: 1b:86:c4:20:bc:d4:a6:4d:07:96:6d:7b:4f:66:00: e7:ea:89:b6:37:fb:c5:1c:2a:3c:a0:00:53:d5:60: c8:95:be:2c:37:e5:64:ac:a2:9b:6e:bf:18:e0:b5: fb:ba:fe:4d:42:75:59:ac:10:77:08:9b:75:c3:a1: fe:19:9e:84:63:a8:aa:dc:3f:10:7e:a6:5d:18:da: 8f:4b:67:8f:c8:a8:dd:c8:56:35:06:a0:6e:e9:4d: 64:18:81:90:9b:a1:81:55:13:85:e0:6b:d5:a3:16: a4:e4:a2:f1:70:ff:4d:a4:39:a7:80:41:ec:75:64: 5c:0a:3c:f7:eb:fc:74:14:b8:4c:94:88:83:dc:72: 02:d4:e2:e2:2e:8f:91:bd:e0:88:bc:47:9e:6a:a2: 7c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:E2:DF:50:FB:69:66:AA:61:4B:82:3F:A6:21:08:AD:24:7D:10:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/ae29e1c3-8e87-3b60-ab8f-c1f6564e5e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl X509v3 Authority Key Identifier: keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer sbgp-ipAddrBlock: critical IPv4: 134.199.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b2:95:ae:72:b9:aa:ad:81:5f:f0:50:2a:9b:5d:3e:44:64: f1:5f:07:13:81:33:05:e3:9c:12:bc:34:5f:bc:d4:93:b3:c7: 9d:ec:71:b9:8d:e3:2c:e3:7b:4a:99:2a:31:ba:fb:4a:61:49: 07:b8:38:66:93:cd:59:1c:91:3f:8e:ed:3c:9e:ba:de:3c:f7: 91:6d:d2:9c:2c:55:ed:00:6c:21:64:38:2b:47:58:20:03:37: 4d:6a:f4:86:b0:a4:32:06:3e:42:63:73:0e:c4:69:03:74:ce: f5:9e:e7:a6:f9:26:2f:79:52:48:f3:2f:43:ca:16:87:2f:6e: 38:7c:8d:2b:a5:0f:45:a6:bb:22:d0:14:3e:e8:a6:60:5d:88: 4e:43:15:05:49:2f:88:b2:44:6d:7b:51:1f:08:22:a7:4c:62: 68:06:63:d7:75:28:77:4e:ca:39:ac:bb:5d:dc:e5:23:8f:63: b2:91:fb:f2:80:ae:f8:c5:39:5d:9c:98:27:83:bc:2e:32:6b: 3f:97:63:c0:17:5d:77:ae:77:62:3e:a7:d8:97:29:a9:3d:83: c9:2a:ff:9c:70:83:a7:ef:a4:97:b8:4a:50:76:ec:44:ac:33: 7b:53:70:1e:a8:45:32:1c:40:c6:dd:d5:c1:20:36:62:4b:43: 14:fe:ef:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7BVxtcgVXrJRQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy Njk4MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OTM3YWVhOWMtOThlZC00OWQxLTlkODktNWVlOGZjODEyNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6pvxwC1vYtcgAahmNA/ezFwbHXOLucT29sl gOKGDcqciGlewGke+pLCCpziF4e+u+h6CLBPmUiCKfzdPoWsAmuQHOOYBwPvtaDi Y+MBRXV0X/Huv13JsZfQDcu6DtGcetCcwePWkuobhsQgvNSmTQeWbXtPZgDn6om2 N/vFHCo8oABT1WDIlb4sN+VkrKKbbr8Y4LX7uv5NQnVZrBB3CJt1w6H+GZ6EY6iq 3D8QfqZdGNqPS2ePyKjdyFY1BqBu6U1kGIGQm6GBVROF4GvVoxak5KLxcP9NpDmn gEHsdWRcCjz36/x0FLhMlIiD3HIC1OLiLo+RveCIvEeeaqJ81wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHbi31D7aWaqYUuCP6YhCK0kfRCKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4 ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYWUyOWUxYzMtOGU4Ny0z YjYwLWFiOGYtYzFmNjU2NGU1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3 ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHhseAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiyla5yuaqtgV/wUCqbXT5EZPFfBxOBMwXjnBK8NF+81JOzx53scbmN 4yzje0qZKjG6+0phSQe4OGaTzVkckT+O7Tyeut4895Ft0pwsVe0AbCFkOCtHWCAD N01q9IawpDIGPkJjcw7EaQN0zvWe56b5Ji95UkjzL0PKFocvbjh8jSulD0WmuyLQ FD7opmBdiE5DFQVJL4iyRG17UR8IIqdMYmgGY9d1KHdOyjmsu13c5SOPY7KR+/KA rvjFOV2cmCeDvC4yaz+XY8AXXXeud2I+p9iXKak9g8kq/5xwg6fvpJe4SlB27ESs M3tTcB6oRTIcQMbd1cEgNmJLQxT+7zk= -----END CERTIFICATE-----Generated at Tue Sep 22 09:41:33 2026 by rpki-client