$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa File: 4ae881f7-a6b6-30cc-890b-e20aca70894f.roa (raw, json) Hash identifier: rTXIUwdTFyWk/apoMln9TUZfw69vjC455f/XahcOPh0= Subject key identifier: CD:0F:BB:BA:E4:23:71:94:FC:46:4C:72:D3:31:C9:4A:76:EF:26:5C Certificate issuer: /CN=34cfb9ea-f5ae-47b0-a218-623411b66523 Certificate serial: 010D0C9F4328584E879548EA29DEE85D22439080 Authority key identifier: 95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa Signing time: Fri 17 Jul 2026 14:23:26 +0000 ROA not before: Fri 17 Jul 2026 14:23:26 +0000 ROA not after: Thu 15 Oct 2026 14:23:26 +0000 asID: 1403 IP address blocks: 72.53.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:87:95:48:ea:29:de:e8:5d:22:43:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cfb9ea-f5ae-47b0-a218-623411b66523 Validity Not Before: Jul 17 14:23:26 2026 GMT Not After : Oct 15 14:23:26 2026 GMT Subject: CN=6b489024-1bcd-43ee-9388-418ac97e8a8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:18:46:7e:07:a7:52:ba:24:2a:71:e2:de:e7: f5:d4:7c:1f:dc:35:1a:bf:bc:38:a2:89:dd:2a:9a: 76:19:9e:e9:97:73:da:87:ce:c4:93:72:2d:2f:51: cb:9f:be:b9:b7:3e:c5:10:a1:e3:96:c0:6e:c2:c0: 6e:5b:b8:39:85:af:2c:15:69:ce:00:b1:da:c7:97: 35:75:a7:d8:f8:cf:65:e4:72:96:29:65:bc:39:9f: 3b:f9:1d:2d:3c:91:fa:50:9f:e2:80:a0:38:51:12: 28:b0:b5:01:ea:89:9c:7c:0a:c1:e4:e0:19:31:ac: e6:ed:bd:9d:db:c1:a0:48:d4:bb:46:87:92:48:c2: ce:8c:3c:a2:ca:52:cc:3c:17:89:6b:7b:20:b5:d7: f6:85:64:47:ea:ed:27:62:5b:19:95:a1:67:92:d9: 26:f2:b5:b2:a0:c3:80:7b:cd:1b:48:46:ba:2d:36: 9b:35:f2:08:bd:64:73:ef:57:f7:e9:31:87:a5:92: 17:c3:a7:97:12:19:9e:38:7c:e1:eb:54:1d:e1:ac: 4f:97:63:7c:2d:86:f6:6f:da:d0:11:3a:00:cd:4c: 9f:3f:97:76:23:3a:e7:71:7a:2b:83:68:b7:2b:6f: 60:74:f2:29:6e:0c:13:ee:ba:62:3b:43:d4:f6:9b: 8d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0F:BB:BA:E4:23:71:94:FC:46:4C:72:D3:31:C9:4A:76:EF:26:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.crl X509v3 Authority Key Identifier: keyid:95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer sbgp-ipAddrBlock: critical IPv4: 72.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:51:92:57:ae:45:17:f8:4c:e6:83:6a:0f:04:a8:05:7b:a2: 0b:80:1a:a8:29:81:c1:e8:19:8e:f1:37:cb:c5:43:ee:bd:99: 72:f9:2d:75:76:db:21:80:5f:d5:69:44:68:2f:a8:a1:76:d5: 24:76:05:5b:5d:ba:54:d3:20:a8:d1:18:36:3f:a8:90:18:3e: 4c:8f:e5:97:f2:cc:87:dd:22:22:fd:38:82:40:b3:84:2b:50: 18:70:cf:8f:5e:d2:26:da:a9:10:d4:4d:7c:f2:3a:89:2f:eb: 84:dd:10:94:3b:d2:1b:3d:b7:9b:98:f4:be:d3:a6:74:e3:3b: e6:16:ca:b4:00:89:77:2a:e7:74:3e:89:fa:0f:2f:0b:a4:61: b7:54:be:68:9a:9a:ed:2f:13:b1:a8:a6:81:f0:46:28:85:5c: 91:59:13:72:b6:9d:e5:8f:a6:18:a8:da:f7:f4:d6:b7:3b:43: da:ef:5d:bf:2f:6b:6b:4a:57:b8:76:1a:99:02:d6:c8:29:88: 67:cc:64:bd:30:b1:83:3f:07:14:97:c6:24:1d:99:0f:98:ba: 26:a0:89:85:57:48:79:b9:37:46:50:49:aa:23:7e:dc:fc:6a: e5:ea:a1:6d:72:88:40:ff:0b:46:bc:5a:f8:67:80:fd:e2:fe: 20:59:f8:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6HlUjqKd7oXSJDkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRjZmI5ZWEtZjVhZS00N2IwLWEyMTgtNjIzNDExYjY2 NTIzMB4XDTI2MDcxNzE0MjMyNloXDTI2MTAxNTE0MjMyNlowLzEtMCsGA1UEAxMk NmI0ODkwMjQtMWJjZC00M2VlLTkzODgtNDE4YWM5N2U4YThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRhGfgenUrokKnHi3uf11Hwf3DUav7w4oond Kpp2GZ7pl3Pah87Ek3ItL1HLn765tz7FEKHjlsBuwsBuW7g5ha8sFWnOALHax5c1 dafY+M9l5HKWKWW8OZ87+R0tPJH6UJ/igKA4URIosLUB6omcfArB5OAZMazm7b2d 28GgSNS7RoeSSMLOjDyiylLMPBeJa3sgtdf2hWRH6u0nYlsZlaFnktkm8rWyoMOA e80bSEa6LTabNfIIvWRz71f36TGHpZIXw6eXEhmeOHzh61Qd4axPl2N8LYb2b9rQ EToAzUyfP5d2IzrncXorg2i3K29gdPIpbgwT7rpiO0PU9puNzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0Pu7rkI3GU/EZMctMxyUp27yZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGNm YjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0MTFiNjY1MjMvNGFlODgxZjctYTZiNi0z MGNjLTg5MGItZTIwYWNhNzA4OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRjZmI5ZWEtZjVhZS00N2IwLWEy MTgtNjIzNDExYjY2NTIzLzM0Y2ZiOWVhLWY1YWUtNDdiMC1hMjE4LTYyMzQxMWI2 NjUyMy5jcmwwHwYDVR0jBBgwFoAUlTelegiqsyjkRAQWOcBiuwtKtvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGNmYjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0 MTFiNjY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADpRkleuRRf4TOaDag8EqAV7oguAGqgpgcHoGY7xN8vFQ+69mXL5LXV2 2yGAX9VpRGgvqKF21SR2BVtdulTTIKjRGDY/qJAYPkyP5ZfyzIfdIiL9OIJAs4Qr UBhwz49e0ibaqRDUTXzyOokv64TdEJQ70hs9t5uY9L7TpnTjO+YWyrQAiXcq53Q+ ifoPLwukYbdUvmiamu0vE7GopoHwRiiFXJFZE3K2neWPphio2vf01rc7Q9rvXb8v a2tKV7h2GpkC1sgpiGfMZL0wsYM/BxSXxiQdmQ+YuiagiYVXSHm5N0ZQSaojftz8 auXqoW1yiED/C0a8WvhngP3i/iBZ+Aw= -----END CERTIFICATE-----Generated at Fri Jul 24 12:56:36 2026 by rpki-client