$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa File: a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa (raw, json) Hash identifier: CbD2yXpiJERxmoHZAoQ25H2u3NXJ91SWHTyriYwvvZ8= Subject key identifier: F2:2E:A7:CB:79:86:67:5C:3B:9B:B3:3B:A8:A5:ED:14:84:87:B9:C7 Certificate issuer: /CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Certificate serial: 010D0C9F4328584F46A7F692C10F0679737B8D80 Authority key identifier: E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 63448 IP address blocks: 167.17.88.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f6:92:c1:0f:06:79:73:7b:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d4f6e46-d9c5-4221-a1e5-0f8722afef21 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=af822583-4dc3-4266-bbea-e5eda6a33971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f8:8b:cb:0f:d6:a6:fa:4f:95:67:77:dc:a6: c6:aa:18:2b:5a:0e:80:6e:d8:e5:12:ba:9d:38:98: 1f:73:64:3a:3a:13:e3:cd:a3:a1:17:bd:57:ca:93: 44:19:90:ef:13:be:80:3e:fc:6d:f2:ec:73:a1:e3: 6a:56:f1:4a:93:d0:7b:cb:92:09:93:8e:72:80:cf: db:e7:2a:db:be:fb:79:0c:c9:be:ae:2b:4d:fb:d0: e0:38:15:8e:0c:e8:d7:f9:22:e6:06:3a:ad:56:dd: 9d:cd:73:3a:66:50:70:6c:b0:d4:b4:a8:f3:96:15: eb:60:5e:8e:3d:20:43:c5:68:b8:c9:27:c5:a1:75: 14:43:42:7f:28:da:a1:d8:85:e5:d3:9d:39:f9:66: 89:4a:2c:d2:0d:dd:27:21:3b:32:e0:59:f9:19:eb: 77:00:42:9f:12:b8:b9:8c:7b:24:81:8c:ad:05:2a: 6a:54:89:4d:fe:64:f1:eb:6f:d6:c7:60:20:e9:b2: e8:0e:15:7a:3e:46:56:52:1e:f8:c5:c5:4a:b0:48: ac:ab:ec:01:7d:e2:99:75:9b:5c:0b:2c:bd:55:46: 9c:9d:b6:cb:02:a1:15:bd:0c:82:84:29:01:a3:c1: a8:a2:88:57:43:b8:2f:c0:e5:84:2d:50:b7:a2:43: f4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:2E:A7:CB:79:86:67:5C:3B:9B:B3:3B:A8:A5:ED:14:84:87:B9:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/a01ead4c-fe39-33bd-9360-d9d5b37f7ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.crl X509v3 Authority Key Identifier: keyid:E2:77:C8:C6:43:70:0A:E3:39:3F:AF:54:A8:29:DE:AA:97:57:CA:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1d4f6e46-d9c5-4221-a1e5-0f8722afef21.cer sbgp-ipAddrBlock: critical IPv4: 167.17.88.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:a5:a3:bc:af:9a:ce:6f:e4:df:74:ad:7e:62:ed:ce:52:5e: 0a:4d:3c:4b:c9:fb:17:fc:3e:03:2f:8b:ba:eb:71:17:18:c3: a3:03:6e:f0:d4:61:f4:55:a1:00:84:b6:15:10:00:c2:31:89: 90:52:b9:ae:35:b6:ad:f2:d7:fb:40:61:9a:26:32:72:9f:71: 9c:7f:6f:a5:ac:87:81:27:23:5e:2e:63:1c:37:8c:20:6c:19: 0c:7a:85:b7:b6:cc:b6:37:05:3a:66:11:9c:8b:0e:fc:62:b2: fd:9e:53:f4:46:8b:21:60:ad:c2:e1:5a:32:44:db:f2:89:51: 43:7b:47:b3:81:43:c5:e6:30:98:dc:d7:8e:67:be:78:2c:5a: c9:b4:e7:79:d2:3f:74:8b:db:ef:07:04:23:ee:57:09:bb:67: d5:e2:c3:6d:c1:9b:05:08:5b:0b:e8:11:32:0a:8f:a4:01:21: 09:8d:8a:63:be:8f:15:d0:74:b8:45:e5:b4:26:a0:7a:8d:d2: 62:41:27:0e:58:0c:88:06:02:1d:c6:e4:f7:f1:98:d6:16:de: 3e:c9:6c:9a:20:92:58:79:c8:63:63:3f:75:d6:b9:78:2c:cd: 00:95:ea:c1:aa:71:26:5a:51:62:7f:c0:4b:61:db:72:0e:12: 19:02:54:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/aSwQ8GeXN7jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ0ZjZlNDYtZDljNS00MjIxLWExZTUtMGY4NzIyYWZl ZjIxMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWY4MjI1ODMtNGRjMy00MjY2LWJiZWEtZTVlZGE2YTMzOTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPiLyw/WpvpPlWd33KbGqhgrWg6AbtjlErqd OJgfc2Q6OhPjzaOhF71XypNEGZDvE76APvxt8uxzoeNqVvFKk9B7y5IJk45ygM/b 5yrbvvt5DMm+ritN+9DgOBWODOjX+SLmBjqtVt2dzXM6ZlBwbLDUtKjzlhXrYF6O PSBDxWi4ySfFoXUUQ0J/KNqh2IXl0505+WaJSizSDd0nITsy4Fn5Get3AEKfEri5 jHskgYytBSpqVIlN/mTx62/Wx2Ag6bLoDhV6PkZWUh74xcVKsEisq+wBfeKZdZtc Cyy9VUacnbbLAqEVvQyChCkBo8GooohXQ7gvwOWELVC3okP0IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIup8t5hmdcO5uzO6il7RSEh7nHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xZDRm NmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3MjJhZmVmMjEvYTAxZWFkNGMtZmUzOS0z M2JkLTkzNjAtZDlkNWIzN2Y3Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWQ0ZjZlNDYtZDljNS00MjIxLWEx ZTUtMGY4NzIyYWZlZjIxLzFkNGY2ZTQ2LWQ5YzUtNDIyMS1hMWU1LTBmODcyMmFm ZWYyMS5jcmwwHwYDVR0jBBgwFoAU4nfIxkNwCuM5P69UqCneqpdXysEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xZDRmNmU0Ni1kOWM1LTQyMjEtYTFlNS0wZjg3 MjJhZmVmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpxFYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEClo7yvms5v5N90rX5i7c5SXgpNPEvJ+xf8PgMvi7rrcRcYw6MDbvDU YfRVoQCEthUQAMIxiZBSua41tq3y1/tAYZomMnKfcZx/b6Wsh4EnI14uYxw3jCBs GQx6hbe2zLY3BTpmEZyLDvxisv2eU/RGiyFgrcLhWjJE2/KJUUN7R7OBQ8XmMJjc 145nvngsWsm053nSP3SL2+8HBCPuVwm7Z9Xiw23BmwUIWwvoETIKj6QBIQmNimO+ jxXQdLhF5bQmoHqN0mJBJw5YDIgGAh3G5PfxmNYW3j7JbJogklh5yGNjP3XWuXgs zQCV6sGqcSZaUWJ/wEth23IOEhkCVHY= -----END CERTIFICATE-----Generated at Sat Sep 26 08:50:13 2026 by rpki-client