$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa File: 372a2f54-16cb-3168-b82d-50a9c389b093.roa (raw, json) Hash identifier: gnMEMYRUq8ghid72f6kYbnpMovJz0wdzuo45sYzc6vE= Subject key identifier: A0:F8:A2:E3:34:D6:35:C7:B5:44:2B:A5:09:04:C6:C3:DD:27:4E:82 Certificate issuer: /CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Certificate serial: 010D0C9F4328584F0672A4923F8B3C82E1BEC980 Authority key identifier: 2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 14298 IP address blocks: 134.67.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:a4:92:3f:8b:3c:82:e1:be:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae21b62b-7bfc-4a0d-81bc-77f998df2cbe Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=b2db27cf-4b1c-42ba-84bf-b4397e175dee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:0b:29:fc:47:16:74:f8:a3:4f:1d:54:22: 76:43:d1:a3:3f:5b:0f:5f:84:c3:8d:a0:90:22:c5: 70:58:4b:9c:cf:b9:84:25:e2:e7:07:32:48:05:5d: 71:dd:95:03:8d:ba:66:dc:05:04:e0:e4:65:63:4d: bf:e4:30:39:61:a0:14:05:94:49:94:58:c9:5f:c9: 93:18:f1:c9:26:39:ce:fe:20:ea:1a:ac:4e:01:f6: f8:e1:f1:cc:24:6b:20:88:e1:eb:b0:16:dc:7b:b7: 05:9b:94:19:f9:4c:29:10:7a:aa:f2:70:31:d1:d8: 8c:36:46:7a:ac:cf:4c:cf:57:1b:97:00:7d:89:9e: 82:b1:ff:c6:8c:95:1b:4d:8c:bd:31:fd:c8:30:8b: 92:73:0d:8e:6f:f6:89:bf:ed:12:b5:5b:12:ac:f7: e6:e3:89:0e:0f:79:d4:d9:e2:c2:a2:4b:c4:fa:05: f1:e2:b8:8c:00:b8:3d:4e:a3:df:4d:68:23:96:bd: 35:f1:e6:c7:25:6e:43:c4:e4:bf:b0:14:c9:13:bc: 18:2d:dc:bf:22:3c:4a:da:60:87:14:5b:06:fb:65: 4c:36:48:f9:73:a7:92:5f:db:21:37:ad:33:ca:cf: 61:e6:1a:65:74:1b:10:2e:6e:55:e4:c1:c8:c6:b8: 87:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:F8:A2:E3:34:D6:35:C7:B5:44:2B:A5:09:04:C6:C3:DD:27:4E:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/372a2f54-16cb-3168-b82d-50a9c389b093.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.crl X509v3 Authority Key Identifier: keyid:2C:80:E9:A3:91:5A:A2:9A:27:C4:41:A7:85:55:97:93:D6:6D:BC:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ae21b62b-7bfc-4a0d-81bc-77f998df2cbe.cer sbgp-ipAddrBlock: critical IPv4: 134.67.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:c9:72:d6:c5:d6:39:0a:44:6a:e3:f0:44:83:96:48:c7:23: 2a:65:bd:0d:3a:3e:3d:95:57:b2:f9:22:0a:63:81:56:63:99: 59:11:be:9c:5d:27:a7:74:f7:df:ac:64:ca:54:2a:6b:32:3c: d6:de:52:ab:b7:2c:05:8c:e0:83:7e:27:03:c7:e7:72:ab:57: 9a:42:3e:28:07:d9:a1:7f:3b:4b:0a:16:68:24:6d:6c:46:1c: 63:24:09:82:c4:4c:ba:79:cc:24:37:d3:ef:de:41:8c:1d:ef: d2:cc:db:eb:b4:66:89:52:bc:7c:02:98:85:ea:fa:cd:85:ad: 39:25:e1:86:31:b6:20:9a:d7:cc:36:20:f4:47:eb:8d:98:24: 33:de:82:f6:bd:ad:3b:de:4f:64:ea:36:9e:cd:11:6c:58:da: 28:1c:97:ff:d0:23:9f:be:26:da:e6:d5:98:74:f2:97:1f:cd: e6:32:c9:ba:ab:78:96:e7:90:8e:e9:09:89:c9:da:3b:bd:87: 05:9d:78:d0:98:07:88:c0:77:23:aa:55:e4:ac:dd:c1:c5:c6: cd:e2:90:a2:d2:f0:70:aa:a8:5d:88:1f:bb:70:37:a1:24:23: 49:cb:da:b6:4e:9e:f4:f5:cc:a0:f0:4b:e8:6c:72:c6:d8:36: 0a:79:72:41 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE8GcqSSP4s8guG+yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWUyMWI2MmItN2JmYy00YTBkLTgxYmMtNzdmOTk4ZGYy Y2JlMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk YjJkYjI3Y2YtNGIxYy00MmJhLTg0YmYtYjQzOTdlMTc1ZGVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofELKfxHFnT4o08dVCJ2Q9GjP1sPX4TDjaCQ IsVwWEucz7mEJeLnBzJIBV1x3ZUDjbpm3AUE4ORlY02/5DA5YaAUBZRJlFjJX8mT GPHJJjnO/iDqGqxOAfb44fHMJGsgiOHrsBbce7cFm5QZ+UwpEHqq8nAx0diMNkZ6 rM9Mz1cblwB9iZ6Csf/GjJUbTYy9Mf3IMIuScw2Ob/aJv+0StVsSrPfm44kOD3nU 2eLCokvE+gXx4riMALg9TqPfTWgjlr018ebHJW5DxOS/sBTJE7wYLdy/IjxK2mCH FFsG+2VMNkj5c6eSX9shN60zys9h5hpldBsQLm5V5MHIxriHKQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFKD4ouM01jXHtUQrpQkExsPdJ06CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIx YjYyYi03YmZjLTRhMGQtODFiYy03N2Y5OThkZjJjYmUvMzcyYTJmNTQtMTZjYi0z MTY4LWI4MmQtNTBhOWMzODliMDkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWUyMWI2MmItN2JmYy00YTBkLTgx YmMtNzdmOTk4ZGYyY2JlL2FlMjFiNjJiLTdiZmMtNGEwZC04MWJjLTc3Zjk5OGRm MmNiZS5jcmwwHwYDVR0jBBgwFoAULIDpo5FaoponxEGnhVWXk9ZtvFAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZTIxYjYyYi03YmZjLTRhMGQtODFiYy03N2Y5 OThkZjJjYmUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhkMwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAH8ly1sXWOQpEauPwRIOWSMcjKmW9DTo+PZVXsvkiCmOBVmOZWRG+nF0n p3T336xkylQqazI81t5Sq7csBYzgg34nA8fncqtXmkI+KAfZoX87SwoWaCRtbEYc YyQJgsRMunnMJDfT795BjB3v0szb67RmiVK8fAKYher6zYWtOSXhhjG2IJrXzDYg 9EfrjZgkM96C9r2tO95PZOo2ns0RbFjaKByX/9Ajn74m2ubVmHTylx/N5jLJuqt4 lueQjukJicnaO72HBZ140JgHiMB3I6pV5KzdwcXGzeKQotLwcKqoXYgfu3A3oSQj Scvatk6e9PXMoPBL6Gxyxtg2CnlyQQ== -----END CERTIFICATE-----Generated at Tue Sep 22 13:00:16 2026 by rpki-client