$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa File: ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa (raw, json) Hash identifier: vgY0ZCIL19L6fuYcwmJbEVLH9wYBqWLUTEhRRSxPuUQ= Subject key identifier: 33:98:E8:BB:C8:E0:3A:B4:4B:84:FC:4D:36:38:47:38:D2:19:CA:D8 Certificate issuer: /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Certificate serial: 010D0C9F4328584F23C25E30EFA0DADD725A9500 Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 33392 IP address blocks: 137.83.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5e:30:ef:a0:da:dd:72:5a:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=4c1b89e8-43de-4ffb-ae1d-2e5a94f4299f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:c5:f0:62:de:d4:3a:3b:c8:e8:80:3e:71:02: 07:53:4c:7c:02:4c:6d:99:1f:82:71:b2:16:4f:c5: c5:32:4c:42:52:6b:ed:28:7a:0f:84:04:57:f0:13: a7:3d:98:85:a6:fb:21:0c:c5:27:88:d3:43:b2:42: 01:bd:e6:1a:ba:59:67:8b:ab:64:95:0d:d1:9b:e0: 84:98:7f:30:90:40:6d:58:f3:01:1c:99:f3:d8:63: 36:56:b8:82:7e:09:49:52:78:67:c3:5b:1b:57:fc: 2f:5a:b0:fa:e2:b6:7d:8f:61:c7:b6:4f:86:1c:e5: 75:37:55:35:68:b0:98:68:ab:3c:f0:43:51:b8:9f: c9:65:86:00:7b:21:2b:dc:ab:fb:4e:66:91:9b:cf: ef:99:ac:e1:2c:dc:44:4e:f6:43:7d:31:0c:47:3a: 9b:cf:7a:61:81:5a:91:42:1a:75:9b:62:2d:3a:cc: 2c:71:ea:ef:66:ad:a5:66:2c:57:af:00:0d:9c:ee: 86:9c:a5:44:0d:13:8e:fc:0d:42:91:7c:ab:b6:83: 79:8c:60:22:af:8e:ea:99:34:5c:cf:61:b4:af:3d: 8e:98:0b:2b:29:3d:5b:ab:d2:72:cd:9c:ba:7f:65: f6:43:37:73:5a:1d:44:9f:4a:86:bb:05:c4:92:12: b5:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:98:E8:BB:C8:E0:3A:B4:4B:84:FC:4D:36:38:47:38:D2:19:CA:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ae158e8b-9bf3-373e-8e12-aa952bd4a686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl X509v3 Authority Key Identifier: keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer sbgp-ipAddrBlock: critical IPv4: 137.83.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:88:59:ce:8f:f2:ff:89:93:5c:2f:f7:79:36:fd:c9:e7:6d: 28:bf:18:7b:2b:10:4a:f5:ff:95:ba:69:44:ca:45:3b:2a:fa: 56:5e:a5:06:18:33:fe:b8:60:8c:16:dc:6c:86:f4:7c:57:e8: 10:e8:aa:79:a9:63:76:58:09:71:55:71:1b:f9:5c:e9:49:28: 03:86:4d:5d:f1:7a:42:65:db:d8:1a:47:79:46:7d:20:f8:1e: 87:f6:93:0f:b5:ca:f2:94:60:de:fe:ed:d7:cd:e6:97:1d:cb: f7:38:01:4e:a2:e7:d9:49:c9:bc:84:0a:55:d4:85:48:14:9a: 1f:09:77:0c:25:56:c3:a8:37:0b:17:b4:a2:fc:f9:9f:5a:67: 4c:1d:bf:ca:ed:dd:83:4f:8a:10:c1:1d:08:c3:db:11:26:4b: 90:1d:8d:f6:7b:60:f4:90:69:ba:fa:a2:eb:d5:1f:2e:30:ea: ef:d7:a3:61:1c:9c:58:4d:70:38:5f:9c:80:0f:7b:f5:a6:0b: 46:ce:9d:43:9f:17:23:79:98:5a:2c:ea:51:bb:d9:a3:e5:97: b3:74:3b:d4:01:36:e4:2a:22:d0:ec:4f:77:b7:db:ac:ea:ad: 74:5c:c6:81:0e:45:d5:4a:e6:38:90:a9:5b:b6:d1:7c:6f:35: 65:30:a9:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl4w76Da3XJalQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5 Y2ZjMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NGMxYjg5ZTgtNDNkZS00ZmZiLWFlMWQtMmU1YTk0ZjQyOTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28XwYt7UOjvI6IA+cQIHU0x8AkxtmR+CcbIW T8XFMkxCUmvtKHoPhARX8BOnPZiFpvshDMUniNNDskIBveYaullni6tklQ3Rm+CE mH8wkEBtWPMBHJnz2GM2VriCfglJUnhnw1sbV/wvWrD64rZ9j2HHtk+GHOV1N1U1 aLCYaKs88ENRuJ/JZYYAeyEr3Kv7TmaRm8/vmazhLNxETvZDfTEMRzqbz3phgVqR Qhp1m2ItOswscervZq2lZixXrwANnO6GnKVEDROO/A1CkXyrtoN5jGAir47qmTRc z2G0rz2OmAsrKT1bq9JyzZy6f2X2QzdzWh1En0qGuwXEkhK1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOY6LvI4Dq0S4T8TTY4RzjSGcrYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvYWUxNThlOGItOWJmMy0z NzNlLThlMTItYWE5NTJiZDRhNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1 ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiVNMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2IWc6P8v+Jk1wv93k2/cnnbSi/GHsrEEr1/5W6aUTKRTsq+lZepQYY M/64YIwW3GyG9HxX6BDoqnmpY3ZYCXFVcRv5XOlJKAOGTV3xekJl29gaR3lGfSD4 Hof2kw+1yvKUYN7+7dfN5pcdy/c4AU6i59lJybyEClXUhUgUmh8JdwwlVsOoNwsX tKL8+Z9aZ0wdv8rt3YNPihDBHQjD2xEmS5AdjfZ7YPSQabr6ouvVHy4w6u/Xo2Ec nFhNcDhfnIAPe/WmC0bOnUOfFyN5mFos6lG72aPll7N0O9QBNuQqItDsT3e326zq rXRcxoEORdVK5jiQqVu20XxvNWUwqSc= -----END CERTIFICATE-----Generated at Wed Sep 23 01:36:12 2026 by rpki-client