$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa File: 440c4003-c877-35d5-8850-db2208d28191.roa (raw, json) Hash identifier: zzjOavHFeEgwIy3NCeAg44h535UBlGRVHM9o9gmsT48= Subject key identifier: 0A:52:60:FA:4E:3F:2E:8B:29:8A:3D:96:A6:6A:89:44:2D:22:22:04 Certificate issuer: /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Certificate serial: 010D0C9F4328584F498A49DD773489D04D343F00 Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400202 IP address blocks: 170.39.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:49:dd:77:34:89:d0:4d:34:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3302641e-a248-4c1d-a15a-b99fc6c79d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:05:3d:21:3d:d5:f1:d3:3e:a6:62:87:3a: b8:d8:95:b4:be:e6:87:ed:75:94:53:aa:9a:aa:9a: 1b:2f:a1:62:58:96:87:6d:8c:2f:ed:d0:a9:2a:d8: 8a:40:c9:92:10:d1:e9:76:53:5e:e9:16:f8:6d:3e: 38:45:b1:b8:15:0d:6b:79:00:df:29:58:56:88:73: d8:e6:63:54:74:f1:69:08:ce:8d:b2:b7:f5:d7:cb: c1:61:1b:ca:95:b5:27:61:95:33:d0:ff:c8:bb:70: 98:ed:cd:55:7d:25:60:b2:df:d6:c8:18:19:53:54: de:ed:b7:2f:2b:0c:8a:cd:25:18:b1:3e:07:5a:db: cb:ef:b3:1d:fe:2e:98:c1:a3:ac:97:a5:64:60:5f: 2c:86:db:53:ad:68:4c:d9:21:50:95:d6:2c:48:57: aa:03:0f:5d:99:10:ff:bf:d2:cc:4b:e3:7c:d4:78: 23:5b:04:75:13:1e:e0:1f:67:77:4b:d1:75:e9:20: 21:42:e3:e3:49:81:02:da:8d:7a:cb:7d:5b:c9:b2: 48:ce:4a:65:94:3a:e2:f4:52:52:5f:8a:12:6e:d5: ed:8b:d9:99:90:c3:5a:d3:47:a9:e6:11:77:8e:78: 61:e2:ce:9e:f8:c9:a7:f9:95:ad:9d:9e:24:71:38: 5d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:60:FA:4E:3F:2E:8B:29:8A:3D:96:A6:6A:89:44:2D:22:22:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl X509v3 Authority Key Identifier: keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer sbgp-ipAddrBlock: critical IPv4: 170.39.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4b:90:25:3c:ef:3f:1c:ab:7e:c6:22:fc:d8:ea:39:15:00: fb:88:2f:90:cf:4b:72:f7:e5:67:e8:43:f6:2e:a5:15:2c:44: 42:b3:01:9a:b0:20:4c:9d:61:5e:22:94:55:23:ac:20:32:2a: be:7d:04:81:7f:6c:1f:29:f2:0f:a1:92:a3:f5:4c:0e:6a:08: cb:dc:03:d6:58:ba:06:d2:b6:41:3f:18:58:f4:b0:99:58:8c: 16:ca:12:28:14:25:8d:a3:7f:73:63:0d:e0:2b:2c:6e:f0:5f: 9c:29:a0:87:85:47:07:7f:59:f6:57:5b:5e:dc:98:92:7d:e9: bf:ff:7d:5d:84:46:f3:9d:40:92:05:d0:6f:ca:59:19:f9:79: ec:88:b7:9c:14:fc:33:07:0d:82:11:db:a7:2c:5c:92:04:b5: 7b:bd:87:47:ac:6a:d8:4b:5c:4f:a2:87:9c:4f:f0:97:16:ea: 0d:52:88:7c:e8:9e:fe:67:00:06:d7:1a:f7:c2:d6:38:e3:d0: 78:04:07:95:8a:05:b9:48:5e:af:73:e7:a8:2a:44:e5:d5:96: 00:ac:a7:ad:c8:55:c6:71:df:b8:3d:51:0b:ce:6e:99:83:61: 41:72:3a:65:56:6f:51:84:4a:e9:18:1c:58:e4:73:7a:45:4a: c7:fd:d8:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiknddzSJ0E00PwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjZDFjYzUtZWQzZS00ZjllLTgxMjktOWQ0ODgzYzBh N2FlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzMwMjY0MWUtYTI0OC00YzFkLWExNWEtYjk5ZmM2Yzc5ZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY8FPSE91fHTPqZihzq42JW0vuaH7XWUU6qa qpobL6FiWJaHbYwv7dCpKtiKQMmSENHpdlNe6Rb4bT44RbG4FQ1reQDfKVhWiHPY 5mNUdPFpCM6Nsrf118vBYRvKlbUnYZUz0P/Iu3CY7c1VfSVgst/WyBgZU1Te7bcv KwyKzSUYsT4HWtvL77Md/i6YwaOsl6VkYF8shttTrWhM2SFQldYsSFeqAw9dmRD/ v9LMS+N81HgjWwR1Ex7gH2d3S9F16SAhQuPjSYEC2o16y31bybJIzkpllDri9FJS X4oSbtXti9mZkMNa00ep5hF3jnhh4s6e+Mmn+ZWtnZ4kcThduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApSYPpOPy6LKYo9lqZqiUQtIiIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNk MWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4ODNjMGE3YWUvNDQwYzQwMDMtYzg3Ny0z NWQ1LTg4NTAtZGIyMjA4ZDI4MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWFjZDFjYzUtZWQzZS00ZjllLTgx MjktOWQ0ODgzYzBhN2FlL2FhY2QxY2M1LWVkM2UtNGY5ZS04MTI5LTlkNDg4M2Mw YTdhZS5jcmwwHwYDVR0jBBgwFoAUXy5MbZ2JsVhvEqmOhYq6stgeakkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNkMWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4 ODNjMGE3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqifsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFLkCU87z8cq37GIvzY6jkVAPuIL5DPS3L35WfoQ/YupRUsREKzAZqw IEydYV4ilFUjrCAyKr59BIF/bB8p8g+hkqP1TA5qCMvcA9ZYugbStkE/GFj0sJlY jBbKEigUJY2jf3NjDeArLG7wX5wpoIeFRwd/WfZXW17cmJJ96b//fV2ERvOdQJIF 0G/KWRn5eeyIt5wU/DMHDYIR26csXJIEtXu9h0esathLXE+ih5xP8JcW6g1SiHzo nv5nAAbXGvfC1jjj0HgEB5WKBblIXq9z56gqROXVlgCsp63IVcZx37g9UQvObpmD YUFyOmVWb1GESukYHFjkc3pFSsf92KA= -----END CERTIFICATE-----Generated at Thu Oct 8 08:44:07 2026 by rpki-client