$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa File: 4427a838-ef7a-315d-9336-e75e68d4876e.roa (raw, json) Hash identifier: Dezbj7aupef/Bj82ciESsAlxRGgWw3tawlzFVITqusE= Subject key identifier: 9D:21:C0:67:46:8D:D9:F9:A2:0B:99:2D:09:1D:21:98:0B:C4:9B:5F Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584FB67121E6AE288E84CA32BF80 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa Signing time: Tue 03 Nov 2026 02:00:13 +0000 ROA not before: Tue 03 Nov 2026 02:00:13 +0000 ROA not after: Mon 01 Feb 2027 02:00:13 +0000 asID: 1097 IP address blocks: 167.88.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b6:71:21:e6:ae:28:8e:84:ca:32:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Nov 3 02:00:13 2026 GMT Not After : Feb 1 02:00:13 2027 GMT Subject: CN=95c512c6-beb7-4427-901e-966192018fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:26:82:9b:ed:fe:d0:c1:7c:93:ac:54:5f:07: 4f:3e:c2:91:4a:27:05:24:ee:95:59:ba:49:30:54: 5c:4c:b7:b1:e3:b8:45:3b:3f:de:77:0c:51:a7:34: 5d:30:2d:d0:dc:7c:56:38:fc:c1:40:2a:91:50:9d: fb:20:c6:b8:f2:2a:13:76:23:1c:d7:a9:63:fc:ce: 9d:20:8e:02:f0:0c:53:9f:e9:07:19:13:6b:8e:8d: a9:e6:d1:b2:93:48:2c:52:0a:89:eb:8a:b7:68:4a: cd:cf:b5:b5:83:48:c7:71:1f:b5:47:54:c0:f4:e4: 62:9a:d5:6a:9e:88:7f:db:26:34:39:44:1e:d9:99: 56:ba:5d:7d:b4:41:92:d9:3a:06:75:28:a8:e4:a3: 4a:7a:b3:79:a5:6d:60:62:f5:f2:c3:a8:89:3a:cb: e2:f8:fa:01:77:ff:f7:89:cb:c3:0b:dc:71:b1:4b: 28:b3:e2:ff:98:38:60:05:bb:9c:b9:04:70:21:a7: 37:f1:2c:d0:58:1b:3d:5a:7a:c6:ad:2a:95:55:85: 7b:26:09:44:e7:72:1a:39:59:f0:1c:f1:64:f9:58: 82:fa:80:d5:3a:08:35:7e:01:96:85:a9:9d:88:b0: cf:c8:f9:c8:1b:12:82:ed:b0:5a:d6:48:b0:49:4c: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:21:C0:67:46:8D:D9:F9:A2:0B:99:2D:09:1D:21:98:0B:C4:9B:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:9f:b0:94:c6:dc:45:09:62:78:6c:05:7e:07:93:3e:31:f7: 7e:23:b6:71:e0:2c:d7:37:fc:b7:ec:1a:70:a3:ec:d2:48:3f: 53:cc:a8:a4:56:5b:1b:59:60:cf:65:67:5f:c7:2b:c4:56:89: 51:51:24:ae:ee:ee:c5:af:57:16:df:30:51:4a:c7:66:d4:26: 51:ee:fe:c9:1a:07:12:df:50:a6:bf:84:22:9a:7d:69:5c:5a: 49:9c:f0:46:1c:58:ee:17:1c:bb:82:26:73:f7:9c:fd:0f:70: 4d:f9:0e:8c:ca:0a:da:07:17:8d:09:ba:78:cf:83:63:ef:18: 46:e3:0f:e4:68:2f:b2:37:a2:90:0a:af:20:36:22:6e:1f:87: 9c:bc:24:56:56:74:59:75:ed:66:ab:e5:32:fc:5f:81:e5:56: 99:25:15:d5:2b:04:32:6f:d3:0f:8d:e1:4d:7d:f6:66:41:1e: 0c:1e:18:03:b3:13:da:96:fb:71:27:13:c1:27:1d:d0:e2:3a: 10:8e:55:8e:2f:c3:cc:f4:dc:9c:00:3d:19:b5:75:a7:48:d6: f0:62:92:a5:00:01:60:95:bb:c3:c0:5f:30:88:dd:83:93:a1: 91:a7:d8:2b:95:09:2f:10:f6:e4:89:ab:70:97:bc:3d:65:99: 5f:7e:dd:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+2cSHmriiOhMoyv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MTEwMzAyMDAxM1oXDTI3MDIwMTAyMDAxM1owLzEtMCsGA1UEAxMk OTVjNTEyYzYtYmViNy00NDI3LTkwMWUtOTY2MTkyMDE4ZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCaCm+3+0MF8k6xUXwdPPsKRSicFJO6VWbpJ MFRcTLex47hFOz/edwxRpzRdMC3Q3HxWOPzBQCqRUJ37IMa48ioTdiMc16lj/M6d II4C8AxTn+kHGRNrjo2p5tGyk0gsUgqJ64q3aErNz7W1g0jHcR+1R1TA9ORimtVq noh/2yY0OUQe2ZlWul19tEGS2ToGdSio5KNKerN5pW1gYvXyw6iJOsvi+PoBd//3 icvDC9xxsUsos+L/mDhgBbucuQRwIac38SzQWBs9WnrGrSqVVYV7JglE53IaOVnw HPFk+ViC+oDVOgg1fgGWhamdiLDPyPnIGxKC7bBa1kiwSUwZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0hwGdGjdn5oguZLQkdIZgLxJtfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvNDQyN2E4MzgtZWY3YS0z MTVkLTkzMzYtZTc1ZTY4ZDQ4NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6fsJTG3EUJYnhsBX4Hkz4x934jtnHgLNc3/LfsGnCj7NJIP1PMqKRW WxtZYM9lZ1/HK8RWiVFRJK7u7sWvVxbfMFFKx2bUJlHu/skaBxLfUKa/hCKafWlc Wkmc8EYcWO4XHLuCJnP3nP0PcE35DozKCtoHF40JunjPg2PvGEbjD+RoL7I3opAK ryA2Im4fh5y8JFZWdFl17War5TL8X4HlVpklFdUrBDJv0w+N4U199mZBHgweGAOz E9qW+3EnE8EnHdDiOhCOVY4vw8z03JwAPRm1dadI1vBikqUAAWCVu8PAXzCI3YOT oZGn2CuVCS8Q9uSJq3CXvD1lmV9+3Wg= -----END CERTIFICATE-----Generated at Thu Nov 5 16:56:16 2026 by rpki-client