$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa File: baa267c2-c777-355e-9ac0-05859b6805bc.roa (raw, json) Hash identifier: QMAOvnMMOXKECmFOmxUUXwxvZXckyuA2RLPf+EYpRMk= Subject key identifier: F1:AA:44:73:EE:1D:5A:00:DB:B1:AC:C2:32:55:94:29:29:BB:19:3F Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584F1CC7A15A3AB73A75AF058500 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 399300 IP address blocks: 167.88.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a1:5a:3a:b7:3a:75:af:05:85:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=bac27e10-ec16-4567-b6d4-d722e1613dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:47:85:58:04:7c:ba:61:e8:3e:4a:d9:04:9d: 8c:a9:f3:84:92:2f:73:98:c7:0f:dd:60:54:36:ce: 24:03:21:5e:c4:ca:c6:2a:6a:db:d6:1a:be:ea:cc: 03:98:03:21:83:3f:9f:fa:5d:c5:66:93:22:e5:25: 68:c4:0e:e3:09:68:78:52:6e:46:2e:10:94:b9:24: 50:12:f2:1c:0b:6b:a4:09:bb:ab:ee:66:68:ef:5d: 0d:e0:fe:ef:02:43:00:93:8e:1e:fc:ac:23:1a:a3: b9:17:97:5f:6c:01:55:06:9d:57:3b:e7:e3:ae:c0: 9a:8b:47:a9:80:80:94:c7:d1:06:71:f2:99:a1:f9: 66:73:d8:f0:a4:f3:a3:0b:3c:48:c2:c0:28:16:49: 96:a5:b7:a5:bd:60:86:88:73:50:e3:32:0c:aa:32: 69:5b:20:2f:8f:53:8d:3d:56:63:15:84:10:cc:a7: 6e:18:de:d1:f0:40:e9:c0:12:d0:f8:38:ee:31:ec: 79:30:ab:23:66:e8:d8:5a:0d:c6:02:7a:81:89:ca: 8d:ff:ec:f2:99:a1:e6:3a:5a:90:ff:ba:7a:de:82: e5:2c:42:a5:cf:7d:b4:ed:01:17:f3:fd:24:83:0e: 35:9b:f4:23:1b:14:d8:05:cb:a8:e6:a1:fa:51:fe: 92:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:AA:44:73:EE:1D:5A:00:DB:B1:AC:C2:32:55:94:29:29:BB:19:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/baa267c2-c777-355e-9ac0-05859b6805bc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:66:f8:1c:65:e0:5c:1e:26:84:3b:77:0a:89:8d:3d:ca:cb: 12:c3:83:e9:ca:24:5c:c1:f9:40:e6:a0:9a:61:16:9a:6e:3a: 3a:1a:57:9d:37:a9:02:40:6b:11:46:a9:37:21:03:d1:7a:36: 69:9f:f5:08:d3:bb:af:54:6d:51:0d:78:0c:cd:6e:57:56:7e: bc:f1:fb:e6:88:c2:b9:7e:cb:ec:eb:2e:77:7c:a0:c1:5d:27: c8:43:db:32:2c:7b:21:47:20:ea:62:06:fe:bb:20:01:f7:cd: fc:69:67:0e:00:24:fb:be:b6:65:45:87:2c:ea:7d:53:2f:4b: 59:c3:20:f4:e9:74:a7:db:c2:d9:5d:a4:14:b1:a4:ce:a4:0b: 40:d7:49:5e:0e:99:4d:c0:a6:87:1e:dc:4f:9a:13:98:c6:1e: d9:f7:f0:a8:86:d2:e3:c0:2a:c1:d4:d1:c5:16:bc:40:ae:c6: 9a:78:62:7f:5a:f5:6b:2e:d3:10:80:4e:55:5d:cd:81:54:1e: f0:30:11:ed:90:36:e9:fc:1e:19:fb:9b:a4:9c:19:42:96:76: 88:f8:90:fa:c1:da:ff:4c:93:86:9d:8d:c3:fc:c5:26:fe:1b: 61:3b:b2:a6:11:c9:6b:8a:06:80:c7:90:6f:99:02:3a:f8:62: d0:16:4e:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8cx6FaOrc6da8FhQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk YmFjMjdlMTAtZWMxNi00NTY3LWI2ZDQtZDcyMmUxNjEzZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEeFWAR8umHoPkrZBJ2MqfOEki9zmMcP3WBU Ns4kAyFexMrGKmrb1hq+6swDmAMhgz+f+l3FZpMi5SVoxA7jCWh4Um5GLhCUuSRQ EvIcC2ukCbur7mZo710N4P7vAkMAk44e/KwjGqO5F5dfbAFVBp1XO+fjrsCai0ep gICUx9EGcfKZoflmc9jwpPOjCzxIwsAoFkmWpbelvWCGiHNQ4zIMqjJpWyAvj1ON PVZjFYQQzKduGN7R8EDpwBLQ+DjuMex5MKsjZujYWg3GAnqBicqN/+zymaHmOlqQ /7p63oLlLEKlz3207QEX8/0kgw41m/QjGxTYBcuo5qH6Uf6S/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGqRHPuHVoA27GswjJVlCkpuxk/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvYmFhMjY3YzItYzc3Ny0z NTVlLTlhYzAtMDU4NTliNjgwNWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZm+Bxl4FweJoQ7dwqJjT3KyxLDg+nKJFzB+UDmoJphFppuOjoaV503 qQJAaxFGqTchA9F6Nmmf9QjTu69UbVENeAzNbldWfrzx++aIwrl+y+zrLnd8oMFd J8hD2zIseyFHIOpiBv67IAH3zfxpZw4AJPu+tmVFhyzqfVMvS1nDIPTpdKfbwtld pBSxpM6kC0DXSV4OmU3Apoce3E+aE5jGHtn38KiG0uPAKsHU0cUWvECuxpp4Yn9a 9Wsu0xCATlVdzYFUHvAwEe2QNun8Hhn7m6ScGUKWdoj4kPrB2v9Mk4adjcP8xSb+ G2E7sqYRyWuKBoDHkG+ZAjr4YtAWTpU= -----END CERTIFICATE-----Generated at Tue Sep 22 00:01:16 2026 by rpki-client