$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa File: 4ae881f7-a6b6-30cc-890b-e20aca70894f.roa (raw, json) Hash identifier: 2zlur3kFZO/NtCqqnjBy+W5hzx+V5u7PyN9ywQN/TOw= Subject key identifier: A5:4A:B2:B4:49:85:68:97:44:0C:54:98:53:32:21:F1:E1:0B:2A:ED Certificate issuer: /CN=34cfb9ea-f5ae-47b0-a218-623411b66523 Certificate serial: 010D0C9F4328584F2ABD0276391287B83BD75A80 Authority key identifier: 95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa Signing time: Mon 14 Sep 2026 01:00:12 +0000 ROA not before: Mon 14 Sep 2026 01:00:12 +0000 ROA not after: Sun 13 Dec 2026 02:00:12 +0000 asID: 1403 IP address blocks: 72.53.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:bd:02:76:39:12:87:b8:3b:d7:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34cfb9ea-f5ae-47b0-a218-623411b66523 Validity Not Before: Sep 14 01:00:12 2026 GMT Not After : Dec 13 02:00:12 2026 GMT Subject: CN=34da2d51-fa02-4fa1-a227-cabc8b342eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:59:33:01:11:b5:12:55:4f:9b:ab:2d:b7: fa:49:4e:1b:fe:f2:c5:8a:73:8a:70:6a:82:3f:7c: 90:27:08:79:41:76:0f:4e:3c:a5:70:e8:a6:d0:b4: 39:5f:72:0a:0b:08:23:b7:2d:6a:89:b2:ab:39:1f: a9:94:b1:6d:6c:a7:ad:3a:bd:77:9e:04:37:31:dd: 6d:1c:0e:b8:80:d8:9a:67:51:b6:e3:1c:95:7f:0e: 01:96:c3:81:09:4d:b3:e1:49:7e:48:9a:40:d9:10: d8:71:7a:49:00:f9:a9:84:ad:e8:64:f0:3d:61:e8: 67:ec:a7:1a:9b:09:e9:b1:1e:3f:a4:da:09:09:16: cc:2b:83:60:38:b3:d8:3a:53:41:33:ec:05:35:42: 31:51:66:8d:df:4a:85:26:72:73:54:e2:8f:56:7f: dd:19:db:f9:e9:23:a8:e5:d9:eb:b6:5d:02:ec:98: 48:48:d4:38:e0:bc:48:54:89:2e:70:e7:1f:c3:ff: 97:e6:47:b8:b0:d4:46:5a:6a:b8:54:2c:dd:06:34: 56:4c:0d:68:5a:da:7b:ea:9c:e3:7b:3d:96:ff:30: a5:8a:d7:86:6a:f6:c0:71:28:dc:db:ad:6c:3c:e8: 39:c6:ee:06:0a:e3:d9:f2:9c:9c:a2:92:60:05:c4: e2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:4A:B2:B4:49:85:68:97:44:0C:54:98:53:32:21:F1:E1:0B:2A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/4ae881f7-a6b6-30cc-890b-e20aca70894f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523/34cfb9ea-f5ae-47b0-a218-623411b66523.crl X509v3 Authority Key Identifier: keyid:95:37:A5:7A:08:AA:B3:28:E4:44:04:16:39:C0:62:BB:0B:4A:B6:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/34cfb9ea-f5ae-47b0-a218-623411b66523.cer sbgp-ipAddrBlock: critical IPv4: 72.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a9:d8:19:f3:06:10:1c:ac:e5:25:93:6f:7f:4c:9c:8b:64: 71:f7:1e:ae:86:4b:f7:47:9d:94:9b:28:15:02:e8:2e:e4:29: 45:65:b3:5f:81:68:9f:43:53:be:5c:08:cb:35:c6:ee:b9:a6: 72:c2:b3:50:e8:c3:ef:e1:12:2d:50:28:6d:a9:ad:af:12:30: 33:5c:c0:d2:2c:79:ff:79:3a:b6:58:18:da:08:fe:cc:e3:f3: 25:04:f7:83:1b:c7:06:5b:4e:e0:94:d2:cb:c0:2c:47:8c:59: 10:4f:57:33:a8:62:c0:70:b2:27:d0:bf:0f:6f:58:04:f4:0e: 4f:12:96:35:97:57:95:91:2d:f4:8c:3f:6b:81:34:ec:c4:f3: a3:eb:e9:06:59:51:04:d6:96:71:8e:42:18:32:e7:ba:8a:23: cd:12:67:db:c0:63:5d:4e:6c:7b:35:05:4c:5d:7e:78:e3:90: 31:96:fa:a3:23:ea:85:76:a2:78:94:ca:59:66:49:84:e2:c2: 6c:34:8f:2c:3f:e0:b3:36:65:0e:98:88:72:07:49:d0:3d:19: c8:26:cc:77:ca:4d:70:c0:71:71:87:60:e9:c0:35:5a:e6:71: f1:3b:28:ad:1d:07:4d:3f:73:c4:e6:e9:cf:d1:c0:3c:56:a0: bd:51:54:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qvQJ2ORKHuDvXWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzRjZmI5ZWEtZjVhZS00N2IwLWEyMTgtNjIzNDExYjY2 NTIzMB4XDTI2MDkxNDAxMDAxMloXDTI2MTIxMzAyMDAxMlowLzEtMCsGA1UEAxMk MzRkYTJkNTEtZmEwMi00ZmExLWEyMjctY2FiYzhiMzQyZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXNZMwERtRJVT5urLbf6SU4b/vLFinOKcGqC P3yQJwh5QXYPTjylcOim0LQ5X3IKCwgjty1qibKrOR+plLFtbKetOr13ngQ3Md1t HA64gNiaZ1G24xyVfw4BlsOBCU2z4Ul+SJpA2RDYcXpJAPmphK3oZPA9Yehn7Kca mwnpsR4/pNoJCRbMK4NgOLPYOlNBM+wFNUIxUWaN30qFJnJzVOKPVn/dGdv56SOo 5dnrtl0C7JhISNQ44LxIVIkucOcfw/+X5ke4sNRGWmq4VCzdBjRWTA1oWtp76pzj ez2W/zCliteGavbAcSjc261sPOg5xu4GCuPZ8pycopJgBcTi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVKsrRJhWiXRAxUmFMyIfHhCyrtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zNGNm YjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0MTFiNjY1MjMvNGFlODgxZjctYTZiNi0z MGNjLTg5MGItZTIwYWNhNzA4OTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzRjZmI5ZWEtZjVhZS00N2IwLWEy MTgtNjIzNDExYjY2NTIzLzM0Y2ZiOWVhLWY1YWUtNDdiMC1hMjE4LTYyMzQxMWI2 NjUyMy5jcmwwHwYDVR0jBBgwFoAUlTelegiqsyjkRAQWOcBiuwtKtvYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zNGNmYjllYS1mNWFlLTQ3YjAtYTIxOC02MjM0 MTFiNjY1MjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWp2BnzBhAcrOUlk29/TJyLZHH3Hq6GS/dHnZSbKBUC6C7kKUVls1+B aJ9DU75cCMs1xu65pnLCs1Dow+/hEi1QKG2pra8SMDNcwNIsef95OrZYGNoI/szj 8yUE94MbxwZbTuCU0svALEeMWRBPVzOoYsBwsifQvw9vWAT0Dk8SljWXV5WRLfSM P2uBNOzE86Pr6QZZUQTWlnGOQhgy57qKI80SZ9vAY11ObHs1BUxdfnjjkDGW+qMj 6oV2oniUyllmSYTiwmw0jyw/4LM2ZQ6YiHIHSdA9GcgmzHfKTXDAcXGHYOnANVrm cfE7KK0dB00/c8Tm6c/RwDxWoL1RVPg= -----END CERTIFICATE-----Generated at Mon Sep 28 13:14:53 2026 by rpki-client