$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa File: a04e273c-0bad-30e9-9712-71862e0e0c75.roa (raw, json) Hash identifier: ZrzeczgxZHqNfkm4rgzf6oXtJshcpTzsXtF+dlQPekY= Subject key identifier: 72:34:11:B0:1B:8D:6E:2A:73:21:CA:AB:4D:E7:78:47:AA:80:DD:E4 Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584E86F50F651BF9FD457B6BE540 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa Signing time: Fri 17 Jul 2026 09:00:14 +0000 ROA not before: Fri 17 Jul 2026 09:00:14 +0000 ROA not after: Thu 15 Oct 2026 09:00:14 +0000 asID: 399300 IP address blocks: 167.88.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:86:f5:0f:65:1b:f9:fd:45:7b:6b:e5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Jul 17 09:00:14 2026 GMT Not After : Oct 15 09:00:14 2026 GMT Subject: CN=07aeb8f4-647e-48e9-85c9-679d9349ec01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:08:b6:78:d1:82:17:93:e2:f8:13:8c:18:22: 89:2a:93:7f:5b:41:4a:96:43:60:64:22:28:1c:0b: 63:a8:8d:8b:a8:01:0b:28:11:bc:60:92:85:c5:65: 9b:18:7d:c2:d6:71:15:dc:79:fe:94:78:60:16:78: a5:16:4f:b6:70:3b:ec:20:88:d6:04:9c:91:81:79: aa:80:a6:c4:e1:78:c5:19:24:0d:2a:47:7d:a2:69: 9b:7b:0e:b1:91:61:11:e1:4a:83:78:b1:14:6d:fb: b2:c1:18:41:66:43:6f:87:a0:bb:1e:62:1b:2a:34: bf:fd:6f:53:d2:78:12:89:19:f4:0b:72:b0:95:07: 37:12:4f:97:93:5b:43:a2:9b:0e:c7:4a:78:8f:e1: 97:1d:82:86:b1:a5:83:bb:23:4d:66:5d:6e:c0:60: 62:4e:a1:6a:2d:49:4d:df:26:05:ef:b1:38:ee:c3: 89:cb:cf:ba:33:d6:e3:8e:94:d4:28:d3:46:1d:a9: 01:cf:e6:29:32:93:9a:2a:fe:2d:af:68:7b:e3:47: d3:de:bd:ed:72:71:27:d1:5d:df:33:ca:d1:65:38: 1f:8e:f4:6b:8a:a9:7e:f8:9d:0e:42:a1:a7:60:76: 19:2c:7f:b6:2e:cf:e0:b9:66:6e:e5:cc:1f:68:44: 45:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:34:11:B0:1B:8D:6E:2A:73:21:CA:AB:4D:E7:78:47:AA:80:DD:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/a04e273c-0bad-30e9-9712-71862e0e0c75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:40:6e:df:a9:26:79:2c:23:25:0a:b1:39:b5:26:9f:0f:e4: e8:b1:f0:5b:5c:dc:27:42:12:53:5e:6d:3c:46:e7:5c:a8:d1: c3:09:c1:0f:1b:92:bd:cd:79:a0:bc:b7:f7:5d:cf:37:3b:bc: 43:19:46:3e:3f:83:98:28:83:59:c3:4d:35:3b:34:86:74:60: ec:54:df:ad:b2:29:cb:68:a0:e9:60:d1:c8:0b:b3:90:28:98: 2a:56:2a:d5:61:16:18:73:a0:aa:b4:53:6e:a3:f1:3a:32:0f: fd:68:13:4b:bd:12:81:09:b0:a8:69:3e:61:fa:ec:36:27:e1: 49:80:fb:b0:3c:a0:68:76:de:78:04:53:57:44:1a:c8:25:17: fe:2d:d6:42:18:75:2f:3e:1b:7f:26:52:98:b0:6c:bd:0f:62: f6:05:9b:14:01:86:dc:46:04:62:de:87:aa:67:8d:53:58:e4: 51:1b:4b:0d:56:a9:6d:be:5c:ea:99:eb:70:65:38:f6:88:ae: 6d:d2:b5:fd:3c:85:98:2e:b8:82:a5:21:10:fa:0e:ff:9a:aa: f5:63:61:c5:b7:46:c5:e4:c9:dd:eb:44:30:fa:cc:30:0d:a2: 4d:fe:9a:7b:59:1c:3a:7a:d7:72:2e:70:79:be:e4:b4:ac:2b: 56:9a:e2:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6G9Q9lG/n9RXtr5UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk MDdhZWI4ZjQtNjQ3ZS00OGU5LTg1YzktNjc5ZDkzNDllYzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQi2eNGCF5Pi+BOMGCKJKpN/W0FKlkNgZCIo HAtjqI2LqAELKBG8YJKFxWWbGH3C1nEV3Hn+lHhgFnilFk+2cDvsIIjWBJyRgXmq gKbE4XjFGSQNKkd9ommbew6xkWER4UqDeLEUbfuywRhBZkNvh6C7HmIbKjS//W9T 0ngSiRn0C3KwlQc3Ek+Xk1tDopsOx0p4j+GXHYKGsaWDuyNNZl1uwGBiTqFqLUlN 3yYF77E47sOJy8+6M9bjjpTUKNNGHakBz+YpMpOaKv4tr2h740fT3r3tcnEn0V3f M8rRZTgfjvRriql++J0OQqGnYHYZLH+2Ls/guWZu5cwfaERF7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHI0EbAbjW4qcyHKq03neEeqgN3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvYTA0ZTI3M2MtMGJhZC0z MGU5LTk3MTItNzE4NjJlMGUwYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp1jRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZAbt+pJnksIyUKsTm1Jp8P5Oix8Ftc3CdCElNebTxG51yo0cMJwQ8b kr3NeaC8t/ddzzc7vEMZRj4/g5gog1nDTTU7NIZ0YOxU362yKctooOlg0cgLs5Ao mCpWKtVhFhhzoKq0U26j8ToyD/1oE0u9EoEJsKhpPmH67DYn4UmA+7A8oGh23ngE U1dEGsglF/4t1kIYdS8+G38mUpiwbL0PYvYFmxQBhtxGBGLeh6pnjVNY5FEbSw1W qW2+XOqZ63BlOPaIrm3Stf08hZguuIKlIRD6Dv+aqvVjYcW3RsXkyd3rRDD6zDAN ok3+mntZHDp613IucHm+5LSsK1aa4jc= -----END CERTIFICATE-----Generated at Fri Jul 24 10:56:22 2026 by rpki-client