$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa File: aa00663e-3fea-35f2-a463-c2b67682be78.roa (raw, json) Hash identifier: l0G21ddwAHJlAsSJOzEvsOJwkBBezkSH2F0pHbrQVkU= Subject key identifier: 59:E1:98:0C:DF:C1:A5:8C:F2:1E:2C:1D:3E:D1:71:D5:76:E2:66:54 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D745BA43645604C2122F40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.23.44.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:45:ba:43:64:56:04:c2:12:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=e77039d6-156b-4864-a997-f78bc9b45e17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:5d:63:bf:a0:f4:af:bb:20:28:cd:fb:32:ce: 5b:a9:44:d0:54:12:aa:ef:d5:9f:ca:a2:e2:d1:f4: 88:1e:8b:0d:55:40:dd:e6:5e:4d:f6:b6:5a:7c:0a: 47:a8:00:31:82:5e:c2:c1:96:90:65:36:fa:bb:77: 06:e5:0e:4a:f8:38:7e:82:f9:7a:e9:b2:59:77:36: f2:9b:9c:68:d7:b0:51:4a:17:43:7e:3e:70:71:0c: 32:c3:35:ab:a3:cc:8d:92:9d:90:d4:87:2b:1e:01: b2:88:ff:f6:f8:34:58:a3:00:24:55:72:e7:07:30: 0b:93:3c:29:c4:9c:9b:89:5e:fe:0a:03:cf:60:6c: b3:cf:06:31:0a:d7:df:b8:97:69:12:f5:4d:1b:b8: 29:70:2e:e8:cd:e6:8e:80:e2:0d:1f:37:e1:16:18: 68:02:92:7e:57:2c:93:a8:90:19:7e:74:cf:90:9e: fe:17:4c:04:23:80:3f:4a:11:84:16:12:c9:bf:fb: 2b:5a:f7:e4:c6:e9:3a:a0:7d:ab:32:a4:5e:8a:46: 9c:41:5f:5a:81:f6:2e:ae:4e:1d:01:b1:64:0c:40: d4:2e:5b:85:3f:fa:2d:8d:a6:7e:9d:12:cb:58:32: 06:de:48:d8:e1:1d:c6:07:ff:18:b7:32:f5:ea:dd: ba:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E1:98:0C:DF:C1:A5:8C:F2:1E:2C:1D:3E:D1:71:D5:76:E2:66:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aa00663e-3fea-35f2-a463-c2b67682be78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.44.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:53:f3:da:02:54:49:5b:42:75:ec:8b:af:d3:70:90:24:6e: fb:63:f5:97:eb:c9:86:ab:1c:81:46:c6:dd:1d:d4:c1:50:d9: 02:41:12:41:54:d6:0d:13:d3:b2:df:c4:3d:93:aa:49:f3:0e: cf:20:2e:c2:80:8c:52:b6:31:8b:c7:46:11:c1:b3:29:e6:be: 25:a6:ec:07:8a:94:42:0c:7a:1b:3d:f4:53:c8:4b:06:11:c8: fd:2a:c1:76:87:95:c1:92:42:d0:b0:12:e3:15:59:88:40:7b: 8f:85:7e:b1:8c:56:14:72:b4:38:ad:82:b9:53:15:aa:b0:ae: cf:1e:22:05:2e:67:ec:60:1b:fd:ec:cd:de:f0:a9:1f:58:44: 34:b5:0c:17:76:03:ca:98:c6:d7:75:d6:dc:24:df:fa:3b:95: 4a:60:92:dc:2b:be:ad:9e:ed:1c:b6:1e:d9:b2:4d:fa:a5:71: 70:ba:29:3b:62:47:b1:9c:b5:48:e4:40:b9:c2:ef:5b:0a:75: d3:b4:b4:19:71:34:19:6a:93:a5:76:b5:05:d9:93:d8:6f:7f: a8:ed:9a:f5:6e:26:75:4e:29:7d:1a:46:86:f2:77:d4:77:c0: a2:e5:34:13:a4:0c:b8:e2:7a:96:15:50:63:66:92:37:5d:a5: 38:27:25:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10W6Q2RWBMISL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTc3MDM5ZDYtMTU2Yi00ODY0LWE5OTctZjc4YmM5YjQ1ZTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6l1jv6D0r7sgKM37Ms5bqUTQVBKq79WfyqLi 0fSIHosNVUDd5l5N9rZafApHqAAxgl7CwZaQZTb6u3cG5Q5K+Dh+gvl66bJZdzby m5xo17BRShdDfj5wcQwywzWro8yNkp2Q1IcrHgGyiP/2+DRYowAkVXLnBzALkzwp xJybiV7+CgPPYGyzzwYxCtffuJdpEvVNG7gpcC7ozeaOgOINHzfhFhhoApJ+VyyT qJAZfnTPkJ7+F0wEI4A/ShGEFhLJv/srWvfkxuk6oH2rMqReikacQV9agfYurk4d AbFkDEDULluFP/otjaZ+nRLLWDIG3kjY4R3GB/8YtzL16t26wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnhmAzfwaWM8h4sHT7RcdV24mZUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWEwMDY2M2UtM2ZlYS0z NWYyLWE0NjMtYzJiNjc2ODJiZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRcsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdT89oCVElbQnXsi6/TcJAkbvtj9ZfryYarHIFGxt0d1MFQ2QJBEkFU 1g0T07LfxD2TqknzDs8gLsKAjFK2MYvHRhHBsynmviWm7AeKlEIMehs99FPISwYR yP0qwXaHlcGSQtCwEuMVWYhAe4+FfrGMVhRytDitgrlTFaqwrs8eIgUuZ+xgG/3s zd7wqR9YRDS1DBd2A8qYxtd11twk3/o7lUpgktwrvq2e7Ry2HtmyTfqlcXC6KTti R7GctUjkQLnC71sKddO0tBlxNBlqk6V2tQXZk9hvf6jtmvVuJnVOKX0aRobyd9R3 wKLlNBOkDLjiepYVUGNmkjddpTgnJXQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:49 2025 by rpki-client