$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d31757fb-ecd2-3776-b6f5-92f3bae85318.roa File: d31757fb-ecd2-3776-b6f5-92f3bae85318.roa (raw, json) Hash identifier: bgKEw3kvy+7SegCt2T+v8Q3XXNa9s9Rplxo2EjN9INw= Subject key identifier: 60:FC:66:2D:64:92:38:62:0B:E5:AF:5B:9E:1A:D6:ED:1F:06:20:70 Certificate issuer: /CN=ae55b5de-dd92-467b-8e52-a8892152f63e Certificate serial: 010D0C9F4328584D5E1A8788384A9F0B237EAD00 Authority key identifier: 3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d31757fb-ecd2-3776-b6f5-92f3bae85318.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 31943 IP address blocks: 167.88.213.0/24 maxlen: 24 167.88.214.0/24 maxlen: 24 167.88.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:87:88:38:4a:9f:0b:23:7e:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae55b5de-dd92-467b-8e52-a8892152f63e Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=a801db4f-f688-4539-afd0-b5a43aa2caee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:02:45:cb:a2:70:e0:96:ce:4e:e9:3e:7e: c0:2e:16:c6:41:21:ea:1e:81:8f:22:76:db:dc:ef: 9e:99:84:27:3a:87:8a:19:20:48:72:ad:69:fd:98: 06:39:43:d3:33:27:f5:a4:ee:be:39:1a:27:3e:df: e6:09:54:52:6e:2f:6b:8e:34:72:30:0a:20:75:dd: 3f:c7:66:c3:23:2d:9f:f2:78:06:7a:35:87:d9:d7: be:8d:b4:7e:14:b9:a4:99:20:71:fe:0d:36:db:e2: 92:da:7e:19:22:7d:3e:16:c0:5f:ec:f4:39:59:54: d3:3b:a4:88:e7:c4:99:16:5b:94:12:95:bc:95:d7: 93:fe:1c:4c:c7:d3:61:39:e5:83:14:18:5a:48:09: ae:91:e9:13:14:f7:e5:19:99:46:14:ba:ff:3f:63: 28:5e:31:1a:0c:21:d0:bf:77:a1:24:83:a1:91:f1: 1f:c2:3d:e4:1e:73:10:bc:f9:4b:67:a0:78:1f:33: 99:91:5e:c6:2b:1f:3d:9d:e2:d7:66:aa:cd:45:00: 67:f4:fb:12:9b:12:71:1b:6f:40:ec:0b:a6:db:42: af:3c:0d:05:3a:4f:04:47:c1:42:47:0e:91:a6:ee: 9d:f5:f4:1a:58:bb:d3:46:92:bf:1b:6c:54:6b:84: 14:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:FC:66:2D:64:92:38:62:0B:E5:AF:5B:9E:1A:D6:ED:1F:06:20:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/d31757fb-ecd2-3776-b6f5-92f3bae85318.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e/ae55b5de-dd92-467b-8e52-a8892152f63e.crl X509v3 Authority Key Identifier: keyid:3C:CB:7F:A8:B3:A3:29:3E:B0:7E:2F:BF:D0:6B:75:3C:D0:85:9C:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ae55b5de-dd92-467b-8e52-a8892152f63e.cer sbgp-ipAddrBlock: critical IPv4: 167.88.213.0-167.88.215.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:f7:16:aa:31:07:b0:b2:ea:29:b2:0c:7f:31:9f:50:0c:66: 79:4a:47:7f:aa:0a:bc:41:ce:e5:86:01:46:0c:be:61:f6:ff: fc:32:df:b6:b3:df:9f:51:c9:74:a9:c2:82:f1:63:89:f2:93: 93:1c:12:d6:ec:8b:a1:ff:9d:6c:cd:4e:06:fe:52:a1:9e:2d: a6:4d:52:80:f6:5f:45:42:7c:83:c5:59:64:50:c7:b3:00:cd: 29:12:0e:fe:4e:bf:4b:88:10:21:1e:b2:9b:7f:07:0d:1c:a8: fd:a9:b7:ab:82:c5:cc:52:1c:14:26:6e:de:78:f9:b8:a0:69: 2a:50:ca:8f:c5:ab:89:13:31:ad:09:90:1a:06:57:28:5b:45: ef:f6:00:6f:80:58:e9:84:d7:92:30:96:a4:fa:d1:b1:c8:8a: 5c:76:cf:d3:9c:fd:16:ac:42:ac:98:3e:ab:bc:df:fd:4d:99: f4:c9:0f:10:17:3e:08:9b:05:9a:11:89:0a:87:de:8f:7f:26: 29:6d:e1:b7:54:52:34:bd:5d:9b:bf:cd:5c:93:24:02:d0:09: 3a:c4:d0:5a:80:d3:14:6d:7c:67:a2:da:06:5a:ca:7a:82:7f: dc:eb:c9:4b:bb:01:92:78:0e:29:69:85:bc:27:4a:3b:4a:e8: 30:b5:22:e0 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE1eGoeIOEqfCyN+rQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWU1NWI1ZGUtZGQ5Mi00NjdiLThlNTItYTg4OTIxNTJm NjNlMB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk YTgwMWRiNGYtZjY4OC00NTM5LWFmZDAtYjVhNDNhYTJjYWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJACRcuicOCWzk7pPn7ALhbGQSHqHoGPInbb 3O+emYQnOoeKGSBIcq1p/ZgGOUPTMyf1pO6+ORonPt/mCVRSbi9rjjRyMAogdd0/ x2bDIy2f8ngGejWH2de+jbR+FLmkmSBx/g022+KS2n4ZIn0+FsBf7PQ5WVTTO6SI 58SZFluUEpW8ldeT/hxMx9NhOeWDFBhaSAmukekTFPflGZlGFLr/P2MoXjEaDCHQ v3ehJIOhkfEfwj3kHnMQvPlLZ6B4HzOZkV7GKx89neLXZqrNRQBn9PsSmxJxG29A 7Aum20KvPA0FOk8ER8FCRw6Rpu6d9fQaWLvTRpK/G2xUa4QUbwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFGD8Zi1kkjhiC+WvW54a1u0fBiBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9hZTU1 YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5MjE1MmY2M2UvZDMxNzU3ZmItZWNkMi0z Nzc2LWI2ZjUtOTJmM2JhZTg1MzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYWU1NWI1ZGUtZGQ5Mi00NjdiLThl NTItYTg4OTIxNTJmNjNlL2FlNTViNWRlLWRkOTItNDY3Yi04ZTUyLWE4ODkyMTUy ZjYzZS5jcmwwHwYDVR0jBBgwFoAUPMt/qLOjKT6wfi+/0Gt1PNCFnFMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9hZTU1YjVkZS1kZDkyLTQ2N2ItOGU1Mi1hODg5 MjE1MmY2M2UuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACnWNUD BAOnWNAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAJfcWqjEHsLLqKbIMfzGfUAxmeUpHf6oKvEHO5YYBRgy+ Yfb//DLftrPfn1HJdKnCgvFjifKTkxwS1uyLof+dbM1OBv5SoZ4tpk1SgPZfRUJ8 g8VZZFDHswDNKRIO/k6/S4gQIR6ym38HDRyo/am3q4LFzFIcFCZu3nj5uKBpKlDK j8WriRMxrQmQGgZXKFtF7/YAb4BY6YTXkjCWpPrRsciKXHbP05z9FqxCrJg+q7zf /U2Z9MkPEBc+CJsFmhGJCofej38mKW3ht1RSNL1dm7/NXJMkAtAJOsTQWoDTFG18 Z6LaBlrKeoJ/3OvJS7sBkngOKWmFvCdKO0roMLUi4A== -----END CERTIFICATE-----Generated at Fri Apr 3 09:18:14 2026 by rpki-client