$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa File: 4427a838-ef7a-315d-9336-e75e68d4876e.roa (raw, json) Hash identifier: dZiht38oFN0jJjvMfdLp6iRsiFEAgGAGkeCxcEH4b88= Subject key identifier: 0F:C1:5A:BE:64:21:27:5D:E4:E0:74:E0:04:D0:0D:88:21:11:45:43 Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584D91C01A861DF353EF1BD2A800 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 1097 IP address blocks: 167.88.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:1a:86:1d:f3:53:ef:1b:d2:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=0e1484de-f511-412e-ad55-07bf69e8148d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:90:65:d5:e9:75:65:89:4f:c1:dc:7f:cb: 0a:5f:a5:2a:21:4c:f1:6e:a6:c7:aa:32:c5:49:bf: 0b:e1:d0:35:4e:8b:5f:a5:4b:cd:28:d6:d3:4c:4a: a4:49:a3:d9:61:05:c1:76:15:3a:73:2a:84:79:a0: 5e:54:c6:73:a9:16:3a:4a:8d:eb:a3:4d:ef:51:63: db:7b:89:ae:a0:66:e1:0b:ee:3e:ed:3c:cc:6f:d8: 36:9e:5b:86:03:e5:4a:e7:c8:d2:ee:2b:a6:2a:70: 29:c2:d5:b1:e2:12:ec:64:a9:98:0c:12:07:dc:03: fb:2e:3f:28:7f:e6:21:b7:6c:d7:13:dc:e0:62:10: 0d:7e:44:61:4e:cb:0f:97:3d:f7:ad:41:d2:2c:3f: 0e:74:2d:71:7e:fa:32:20:b6:7a:4b:12:e2:66:a2: 3e:e1:fb:38:26:41:5f:bd:51:2f:3a:c3:15:1b:65: 32:e2:54:9c:83:e0:f7:52:92:7a:b5:66:b5:34:6f: 0c:14:ff:f2:53:a2:e7:72:71:d6:05:5a:27:7f:f0: eb:11:a5:9d:f9:fe:f4:95:fa:56:40:ed:2a:e5:61: 20:aa:18:6c:58:f5:84:9b:f9:79:8c:de:2f:fc:47: a2:e4:4e:80:a8:02:06:53:aa:51:ec:81:cc:c3:6e: d8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C1:5A:BE:64:21:27:5D:E4:E0:74:E0:04:D0:0D:88:21:11:45:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/4427a838-ef7a-315d-9336-e75e68d4876e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ec:83:73:4b:f1:7b:6e:b1:5b:78:9a:66:8f:b1:18:30:37: 3f:c8:0e:fb:53:00:bc:82:61:f2:ef:54:f1:93:88:eb:6b:a4: 4b:9b:6e:4c:4d:42:65:d1:57:59:ff:59:2a:31:8f:73:01:01: 29:9f:c0:b0:5b:fc:43:c6:29:af:71:7f:b2:e0:e4:e1:ec:cf: 86:f6:e5:1a:00:b0:af:8f:e4:86:10:c3:b6:62:89:71:4e:d5: 09:2d:50:97:89:46:fc:ab:63:20:16:0b:52:f6:20:2d:3e:4e: f3:17:1a:60:6b:e7:8e:81:67:85:13:c8:86:ba:ce:4a:00:7d: 64:b8:85:1d:7a:8f:41:8b:57:85:63:26:f6:d0:60:f9:e1:4f: 07:2f:86:b8:59:e5:30:c4:f5:3d:85:2c:7c:14:4b:23:c8:c0: 13:55:a8:07:c5:52:ff:e1:4f:74:55:bf:81:36:f9:84:70:bb: 91:e4:33:25:ae:16:1a:7c:f3:f3:b2:e4:e9:9d:da:8e:52:0c: 85:4a:8b:71:e8:ae:c7:43:8c:90:6d:68:c5:6b:28:07:93:9e: 4e:09:a6:31:60:4b:73:f0:ec:b7:c2:ca:f7:22:94:37:25:04: af:30:42:34:ce:55:ba:2d:37:7e:7e:a6:e8:f4:2f:55:e6:82: 29:d7:1e:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwBqGHfNT7xvSqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk MGUxNDg0ZGUtZjUxMS00MTJlLWFkNTUtMDdiZjY5ZTgxNDhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooeQZdXpdWWJT8Hcf8sKX6UqIUzxbqbHqjLF Sb8L4dA1TotfpUvNKNbTTEqkSaPZYQXBdhU6cyqEeaBeVMZzqRY6So3ro03vUWPb e4muoGbhC+4+7TzMb9g2nluGA+VK58jS7iumKnApwtWx4hLsZKmYDBIH3AP7Lj8o f+Yht2zXE9zgYhANfkRhTssPlz33rUHSLD8OdC1xfvoyILZ6SxLiZqI+4fs4JkFf vVEvOsMVG2Uy4lScg+D3UpJ6tWa1NG8MFP/yU6LncnHWBVonf/DrEaWd+f70lfpW QO0q5WEgqhhsWPWEm/l5jN4v/Eei5E6AqAIGU6pR7IHMw27YjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/BWr5kISdd5OB04ATQDYghEUVDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvNDQyN2E4MzgtZWY3YS0z MTVkLTkzMzYtZTc1ZTY4ZDQ4NzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3sg3NL8XtusVt4mmaPsRgwNz/IDvtTALyCYfLvVPGTiOtrpEubbkxN QmXRV1n/WSoxj3MBASmfwLBb/EPGKa9xf7Lg5OHsz4b25RoAsK+P5IYQw7ZiiXFO 1QktUJeJRvyrYyAWC1L2IC0+TvMXGmBr546BZ4UTyIa6zkoAfWS4hR16j0GLV4Vj JvbQYPnhTwcvhrhZ5TDE9T2FLHwUSyPIwBNVqAfFUv/hT3RVv4E2+YRwu5HkMyWu Fhp88/Oy5Omd2o5SDIVKi3HorsdDjJBtaMVrKAeTnk4JpjFgS3Pw7LfCyvcilDcl BK8wQjTOVbotN35+puj0L1XmginXHpg= -----END CERTIFICATE-----Generated at Wed May 13 05:15:54 2026 by rpki-client