$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa File: aa00663e-3fea-35f2-a463-c2b67682be78.roa (raw, json) Hash identifier: 1xRvGfnviUXT5GgIbK17heO1nLaT3d07sBscIAuYryM= Subject key identifier: D5:B2:03:9A:93:81:9D:05:1E:74:7E:26:57:F2:CC:E4:55:90:79:B6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498A2DCB6596079ABAD39A80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.23.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:2d:cb:65:96:07:9a:ba:d3:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6ee793e-66a4-459f-9600-4efb55a881aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:5e:19:f1:be:dc:19:b3:1d:51:2c:8d:6d:31: 43:87:49:30:9e:e6:06:e2:13:0b:41:5a:7f:a7:d1: 0d:96:42:7c:cd:ed:be:5d:d1:af:a0:60:43:da:9a: 1b:ea:11:8a:17:cb:7d:1a:96:13:7f:cc:8e:53:25: 22:34:4e:37:50:89:67:ba:21:a5:67:e7:60:a7:44: 35:f6:f4:37:aa:a3:47:d5:bb:a4:ea:dd:fc:76:6c: d6:33:2a:1d:45:65:42:e5:94:99:cb:e4:c2:cd:f8: 9e:a4:8c:b3:6c:a2:bd:5f:93:05:48:63:9c:b8:05: 58:e4:f7:c4:d1:9a:39:c2:01:b1:1d:4b:00:51:08: 06:47:71:59:59:5a:04:d9:5e:7b:41:4a:bf:84:8e: 65:df:9f:92:f6:2c:cc:3d:19:d7:7d:2b:46:14:81: 6c:5e:13:82:77:9b:3b:b9:7e:c6:80:b5:d5:3c:6a: de:9f:71:97:3a:4f:bc:e7:64:1f:91:f0:a9:09:e6: 39:3d:13:78:d7:6e:27:c9:26:96:a2:40:ad:2b:71: a5:76:c3:ab:66:fd:8e:34:7d:78:36:13:b9:6a:92: 95:60:a7:f1:9a:fa:c1:94:c2:3d:e5:5c:65:b9:5f: c3:cf:f9:83:04:33:06:b0:03:02:b1:60:9b:68:85: 87:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B2:03:9A:93:81:9D:05:1E:74:7E:26:57:F2:CC:E4:55:90:79:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:dd:7a:13:9f:1b:c1:cf:9a:96:b4:5f:fc:6d:1e:25:86:a2: 23:5e:36:68:91:40:5b:b6:17:3d:78:4c:72:ad:1a:bd:71:51: b8:c1:80:20:ff:03:fc:b5:5c:e8:66:dc:39:17:65:b7:28:c9: 2e:98:a8:5d:2b:cc:04:b4:f8:68:e2:2d:c4:03:bb:fa:a1:dd: 62:c7:40:45:ea:a4:02:96:b6:af:c8:ef:2c:b3:4f:99:85:50: 2d:5a:91:fa:80:55:15:b6:fc:34:05:9b:06:6f:35:d9:16:f4: d9:da:2b:f1:69:11:6a:ad:38:ec:0b:5e:b7:cd:fb:3c:c4:04: 2c:ba:4c:1c:31:0e:27:89:ed:23:29:75:f7:02:dc:c6:43:0f: 88:78:6d:0f:8b:d5:24:09:07:0f:b3:0f:31:9f:42:79:88:45: 0d:f4:2c:68:77:f1:62:0f:cf:2b:22:2e:72:78:b8:7a:44:82: e8:b5:d2:c8:7c:49:0e:3d:62:8a:a9:83:bd:b7:f5:b1:ef:10: f5:8f:e7:07:80:2d:45:a5:a7:ad:3e:54:3b:6e:ac:2f:60:00: 53:46:34:bf:3d:22:9f:e7:11:42:62:45:ad:fb:a2:fb:75:82: c5:e0:64:38:99:df:11:bb:9c:85:b4:ec:ad:45:66:9c:9a:3c: aa:09:a0:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jii3LZZYHmrrTmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZlZTc5M2UtNjZhNC00NTlmLTk2MDAtNGVmYjU1YTg4MWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl4Z8b7cGbMdUSyNbTFDh0kwnuYG4hMLQVp/ p9ENlkJ8ze2+XdGvoGBD2pob6hGKF8t9GpYTf8yOUyUiNE43UIlnuiGlZ+dgp0Q1 9vQ3qqNH1buk6t38dmzWMyodRWVC5ZSZy+TCzfiepIyzbKK9X5MFSGOcuAVY5PfE 0Zo5wgGxHUsAUQgGR3FZWVoE2V57QUq/hI5l35+S9izMPRnXfStGFIFsXhOCd5s7 uX7GgLXVPGren3GXOk+852QfkfCpCeY5PRN4124nySaWokCtK3GldsOrZv2ONH14 NhO5apKVYKfxmvrBlMI95VxluV/Dz/mDBDMGsAMCsWCbaIWHIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWyA5qTgZ0FHnR+JlfyzORVkHm2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWEwMDY2M2UtM2ZlYS0z NWYyLWE0NjMtYzJiNjc2ODJiZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzdehOfG8HPmpa0X/xtHiWGoiNeNmiRQFu2Fz14THKtGr1xUbjBgCD/ A/y1XOhm3DkXZbcoyS6YqF0rzAS0+GjiLcQDu/qh3WLHQEXqpAKWtq/I7yyzT5mF UC1akfqAVRW2/DQFmwZvNdkW9NnaK/FpEWqtOOwLXrfN+zzEBCy6TBwxDieJ7SMp dfcC3MZDD4h4bQ+L1SQJBw+zDzGfQnmIRQ30LGh38WIPzysiLnJ4uHpEgui10sh8 SQ49Yoqpg7239bHvEPWP5weALUWlp60+VDturC9gAFNGNL89Ip/nEUJiRa37ovt1 gsXgZDiZ3xG7nIW07K1FZpyaPKoJoDE= -----END CERTIFICATE-----Generated at Tue Sep 29 06:46:40 2026 by rpki-client