$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/ae45c4b7-79cf-3df1-a339-6a03f2e6d5cc.roa File: ae45c4b7-79cf-3df1-a339-6a03f2e6d5cc.roa (raw, json) Hash identifier: bciEqUvCDlLz2csfM742ybzM9Am8Gsbff7ZhhdjAP10= Subject key identifier: 5E:CE:07:21:7D:C8:DA:FD:17:E2:7E:00:AE:14:E0:A5:D7:AC:1D:66 Certificate issuer: /CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Certificate serial: 010D0C9F4328584F2ABD2DB3F3196DBA2AC87700 Authority key identifier: 2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/ae45c4b7-79cf-3df1-a339-6a03f2e6d5cc.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 393669 IP address blocks: 192.234.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:2d:b3:f3:19:6d:ba:2a:c8:77:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d58ab4c9-6933-49bf-b6b4-e4d3935eda22 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=421c3900-e8d8-4856-942c-fa4e00f22927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f5:ed:dd:c0:ba:e3:38:99:43:33:22:88:2a: e5:60:f0:39:8b:e0:3b:26:2a:03:61:86:8d:ec:13: 1a:41:59:52:90:a6:d4:89:3d:a0:82:34:89:93:00: 07:b7:d5:7b:93:b9:97:0b:13:53:91:c0:0f:7e:e5: 60:7a:e5:da:ce:a0:a1:d3:5d:37:86:1e:f7:70:bc: d6:ce:01:8e:ac:d2:c2:82:5c:5f:7d:6c:2c:a5:14: 3d:f5:4f:41:99:89:dd:ea:78:ee:01:ef:fe:7c:cb: 10:9f:d4:50:df:49:28:0a:5a:18:67:da:66:65:a1: dd:f3:4e:4c:47:ab:b3:bf:0e:8c:e6:66:2a:32:5f: f4:40:4b:99:e1:a1:6a:a9:bb:f0:10:58:7c:2f:d7: a8:55:6a:22:8a:1f:0b:e3:66:bc:ab:91:af:e8:46: ab:26:5c:df:77:0f:a7:56:9a:a6:b9:1b:e6:94:3c: c5:21:8d:2c:2b:bf:54:69:4f:58:63:6e:49:d2:e1: 2e:da:04:8e:6a:cf:94:2c:9d:7c:e1:1f:52:1a:f7: 58:95:13:29:e0:b0:6e:f7:2b:9a:fd:11:9f:d3:aa: 5f:42:9e:41:7f:96:11:8f:d6:35:05:14:50:4d:8b: ae:b1:b4:7f:52:f0:ba:e9:00:91:0c:70:f0:f8:17: 20:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CE:07:21:7D:C8:DA:FD:17:E2:7E:00:AE:14:E0:A5:D7:AC:1D:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/ae45c4b7-79cf-3df1-a339-6a03f2e6d5cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.crl X509v3 Authority Key Identifier: keyid:2D:73:7F:53:E8:59:77:9D:04:98:F4:22:CD:FB:1A:73:64:84:6C:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d58ab4c9-6933-49bf-b6b4-e4d3935eda22.cer sbgp-ipAddrBlock: critical IPv4: 192.234.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:62:1a:ec:fa:13:a2:25:5b:94:f2:a7:df:f9:27:d5:57:7e: 52:1f:10:70:a3:24:05:65:79:49:12:b4:f5:ab:77:ca:14:0b: fd:8b:a5:cc:84:3c:bb:20:33:52:af:93:64:13:ac:a7:9a:37: 97:4f:4a:13:9a:4b:51:e0:20:1a:0b:c3:74:46:20:a0:5a:93: 6f:e8:66:0e:47:2a:34:c0:6d:99:21:cd:d4:5b:c6:90:93:87: 50:3f:e8:74:af:8b:ab:e7:e1:dd:0e:5e:e0:3b:63:d3:1f:5c: c3:58:af:07:b7:59:11:24:51:b1:e6:36:46:3a:0a:87:d1:da: 89:b7:a6:b4:ff:7f:7f:fc:0b:8d:e7:24:71:60:b9:15:fc:68: a0:6b:b3:ab:39:90:d4:1c:00:70:14:b7:0c:7c:63:51:12:88: 01:32:cb:95:52:64:8b:af:da:8a:6a:65:25:64:1d:1c:36:ca: 39:06:89:96:89:e5:6e:f7:fa:ba:c6:a7:e2:28:e9:1c:19:06: 63:43:20:2f:a9:1e:7f:49:da:d8:0f:15:1c:86:36:49:da:fb: 82:74:68:08:45:a1:9c:a4:47:8f:dd:6d:4e:1f:d9:e1:de:86: ad:ba:50:63:99:6b:8c:21:64:60:53:09:da:d5:94:06:29:0b: f6:f6:a5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvS2z8xltuirIdwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU4YWI0YzktNjkzMy00OWJmLWI2YjQtZTRkMzkzNWVk YTIyMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk NDIxYzM5MDAtZThkOC00ODU2LTk0MmMtZmE0ZTAwZjIyOTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPXt3cC64ziZQzMiiCrlYPA5i+A7JioDYYaN 7BMaQVlSkKbUiT2ggjSJkwAHt9V7k7mXCxNTkcAPfuVgeuXazqCh0103hh73cLzW zgGOrNLCglxffWwspRQ99U9BmYnd6njuAe/+fMsQn9RQ30koCloYZ9pmZaHd805M R6uzvw6M5mYqMl/0QEuZ4aFqqbvwEFh8L9eoVWoiih8L42a8q5Gv6EarJlzfdw+n VpqmuRvmlDzFIY0sK79UaU9YY25J0uEu2gSOas+ULJ184R9SGvdYlRMp4LBu9yua /RGf06pfQp5Bf5YRj9Y1BRRQTYuusbR/UvC66QCRDHDw+BcgRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7OByF9yNr9F+J+AK4U4KXXrB1mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThh YjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQzOTM1ZWRhMjIvYWU0NWM0YjctNzljZi0z ZGYxLWEzMzktNmEwM2YyZTZkNWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDU4YWI0YzktNjkzMy00OWJmLWI2 YjQtZTRkMzkzNWVkYTIyL2Q1OGFiNGM5LTY5MzMtNDliZi1iNmI0LWU0ZDM5MzVl ZGEyMi5jcmwwHwYDVR0jBBgwFoAULXN/U+hZd50EmPQizfsac2SEbJ8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNThhYjRjOS02OTMzLTQ5YmYtYjZiNC1lNGQz OTM1ZWRhMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwOqGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxiGuz6E6IlW5Typ9/5J9VXflIfEHCjJAVleUkStPWrd8oUC/2LpcyE PLsgM1Kvk2QTrKeaN5dPShOaS1HgIBoLw3RGIKBak2/oZg5HKjTAbZkhzdRbxpCT h1A/6HSvi6vn4d0OXuA7Y9MfXMNYrwe3WREkUbHmNkY6CofR2om3prT/f3/8C43n JHFguRX8aKBrs6s5kNQcAHAUtwx8Y1ESiAEyy5VSZIuv2opqZSVkHRw2yjkGiZaJ 5W73+rrGp+Io6RwZBmNDIC+pHn9J2tgPFRyGNkna+4J0aAhFoZykR4/dbU4f2eHe hq26UGOZa4whZGBTCdrVlAYpC/b2pe8= -----END CERTIFICATE-----Generated at Thu Sep 24 14:51:31 2026 by rpki-client