$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa File: a04e273c-0bad-30e9-9712-71862e0e0c75.roa (raw, json) Hash identifier: gaz0J34F8D+yDQ6WdlvB1syc4z0hm1SSwbcZFH503V4= Subject key identifier: 62:56:7B:8F:E8:8D:BE:CA:3F:61:74:12:37:19:5D:4D:E6:16:3A:48 Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584F2957D2B4197C89912788B200 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 399300 IP address blocks: 167.88.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d2:b4:19:7c:89:91:27:88:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=5e77f64a-c79b-4baa-beba-d38941ed64d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a8:d1:5a:11:20:08:5e:a7:b7:0a:ad:d0:36: 57:ce:0d:8c:7e:4f:4c:f4:04:55:15:17:a6:a5:2d: 0a:2c:3f:c1:cf:1f:f1:35:c2:11:21:40:43:5a:95: 5e:d4:61:a1:b0:a8:4a:ac:b9:47:00:a0:54:1c:07: 9e:cb:5f:25:45:ee:79:08:e7:b5:12:a4:95:75:47: 2c:c8:28:3a:dd:47:67:0c:f0:06:6a:5a:f2:26:e2: 0e:d9:aa:70:f0:5f:a2:2b:db:a9:34:b3:63:d7:4e: 34:16:aa:cf:9f:7d:90:1c:43:56:b5:dc:b3:ab:5d: 53:35:60:a8:1d:8b:0e:ed:a7:45:6b:9e:9c:06:4b: 8e:e2:e5:df:ad:37:c1:f4:76:58:8a:eb:61:13:a8: 75:63:24:5f:ce:4f:49:09:43:3a:bb:67:49:5f:4f: cb:0b:65:e3:43:bc:b6:be:74:ca:91:b7:00:1d:c7: 00:08:96:66:6d:fb:7c:6a:68:ae:18:8c:71:ae:4b: b7:15:38:1d:e3:2c:23:76:05:04:a0:65:04:50:df: 04:df:49:25:4f:63:f3:bf:c6:90:3c:cb:15:ea:c5: c3:d8:17:6a:35:7f:86:78:73:f1:b3:3e:d1:c4:16: 92:f6:fa:e4:99:d7:d1:05:01:7c:fe:ff:99:78:0c: 90:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:56:7B:8F:E8:8D:BE:CA:3F:61:74:12:37:19:5D:4D:E6:16:3A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:95:f5:8d:7e:df:80:95:4f:21:fc:c6:1e:cd:bb:a7:3b:e8: 78:58:b2:b6:49:0b:d9:90:87:b4:8c:79:a4:96:8e:d4:e2:2a: 6c:35:ac:96:d4:0c:dd:9c:b1:06:8c:8c:b3:97:f1:d8:60:99: 06:bc:0e:ee:65:bf:b1:ac:93:cc:f1:2b:fc:f8:89:33:ed:9f: b1:de:cf:d8:65:8e:0c:e1:b3:4c:cb:d5:a2:2f:1e:1e:61:30: b1:60:16:df:eb:98:44:30:c1:92:1e:c8:fb:0c:bb:3d:7b:89: 88:06:7b:13:29:b1:77:7d:b2:8c:81:19:c6:63:60:07:6c:a9: 39:7f:9a:d5:be:aa:e3:ee:69:81:a6:38:f0:df:9d:c4:82:fd: 94:b1:bf:db:3c:ca:e5:82:3c:7c:47:ef:e5:17:76:3e:a4:e7: 59:94:51:62:e1:41:4e:fe:c7:84:ee:ae:e7:85:10:54:c9:dd: ae:b9:ef:ec:bf:eb:b5:ff:13:11:9b:d8:4d:db:a8:fb:f2:73: d4:af:9c:f4:aa:db:3b:1a:35:58:b4:d6:dd:a0:7f:14:63:86: 77:82:b9:5e:4f:af:ba:dc:92:56:84:aa:1a:ac:e0:90:41:f8: ba:86:95:51:6c:b6:df:c4:86:fb:4c:93:26:d5:55:e9:ce:c5: ba:57:26:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV9K0GXyJkSeIsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk NWU3N2Y2NGEtYzc5Yi00YmFhLWJlYmEtZDM4OTQxZWQ2NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqjRWhEgCF6ntwqt0DZXzg2Mfk9M9ARVFRem pS0KLD/Bzx/xNcIRIUBDWpVe1GGhsKhKrLlHAKBUHAeey18lRe55COe1EqSVdUcs yCg63UdnDPAGalryJuIO2apw8F+iK9upNLNj1040FqrPn32QHENWtdyzq11TNWCo HYsO7adFa56cBkuO4uXfrTfB9HZYiuthE6h1YyRfzk9JCUM6u2dJX0/LC2XjQ7y2 vnTKkbcAHccACJZmbft8amiuGIxxrku3FTgd4ywjdgUEoGUEUN8E30klT2Pzv8aQ PMsV6sXD2BdqNX+GeHPxsz7RxBaS9vrkmdfRBQF8/v+ZeAyQhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJWe4/ojb7KP2F0EjcZXU3mFjpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvYTA0ZTI3M2MtMGJhZC0z MGU5LTk3MTItNzE4NjJlMGUwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWV9Y1+34CVTyH8xh7Nu6c76HhYsrZJC9mQh7SMeaSWjtTiKmw1rJbU DN2csQaMjLOX8dhgmQa8Du5lv7Gsk8zxK/z4iTPtn7Hez9hljgzhs0zL1aIvHh5h MLFgFt/rmEQwwZIeyPsMuz17iYgGexMpsXd9soyBGcZjYAdsqTl/mtW+quPuaYGm OPDfncSC/ZSxv9s8yuWCPHxH7+UXdj6k51mUUWLhQU7+x4TurueFEFTJ3a657+y/ 67X/ExGb2E3bqPvyc9SvnPSq2zsaNVi01t2gfxRjhneCuV5Pr7rcklaEqhqs4JBB +LqGlVFstt/EhvtMkybVVenOxbpXJhQ= -----END CERTIFICATE-----Generated at Tue Sep 22 19:49:38 2026 by rpki-client