$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa File: 440c4003-c877-35d5-8850-db2208d28191.roa (raw, json) Hash identifier: s4EjuvMqKmuo40RZ06w33jl1ee1NLJEcuiPAzGSSs5M= Subject key identifier: AD:77:26:8A:0C:A3:5C:53:5D:5A:45:CC:45:78:94:A6:A6:D2:D2:97 Certificate issuer: /CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Certificate serial: 010D0C9F4328584B540C9B402A02E65FB1117F40 Authority key identifier: 5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa Signing time: Sat 27 Sep 2025 01:00:33 +0000 ROA not before: Sat 27 Sep 2025 01:00:33 +0000 ROA not after: Fri 26 Dec 2025 02:00:33 +0000 asID: 400202 IP address blocks: 170.39.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:54:0c:9b:40:2a:02:e6:5f:b1:11:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae Validity Not Before: Sep 27 01:00:33 2025 GMT Not After : Dec 26 02:00:33 2025 GMT Subject: CN=c16fd869-8ef3-4740-89e9-6ff63aed4a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f7:57:ae:eb:da:5d:87:ab:4f:e9:8b:61:f9: c9:a5:f9:a6:35:35:30:01:8d:4b:fd:79:b1:bf:34: 38:a1:e8:0f:49:f7:bd:97:39:60:0c:fd:13:42:fc: c1:9d:7b:49:e8:6b:c0:7d:09:40:9b:17:f1:b6:c5: f9:f3:4e:f2:2e:ef:71:54:08:77:f7:92:d2:23:4a: d9:65:0e:a8:56:88:1b:21:ba:b8:9f:63:95:8b:2c: 2e:d3:aa:03:09:ca:8f:4d:1d:da:22:14:31:9a:f4: 15:aa:79:9b:3d:57:3c:5b:ec:a6:7c:0a:43:e7:dc: ed:fa:09:58:1b:32:b8:99:9f:81:3f:a4:89:cd:12: b5:fc:4e:a0:23:8b:5d:4d:98:13:49:d2:f7:48:7c: 48:af:26:66:de:35:91:07:32:05:c7:52:b2:dd:4f: 99:e2:01:1e:78:95:2a:9c:33:3d:1d:6c:db:f0:79: 6b:32:00:b2:ea:06:f1:4b:83:7b:cb:97:ac:92:31: 79:ea:66:c3:a4:ec:27:bc:4a:4b:ee:e6:67:e6:52: 4d:08:89:67:ed:b7:a2:de:b9:b7:c6:8a:e0:04:3e: 34:f3:71:36:76:91:8c:32:36:45:e9:31:ce:50:2d: 5c:bd:dd:a9:db:35:1b:30:3b:2f:fd:cf:8a:06:48: 29:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:77:26:8A:0C:A3:5C:53:5D:5A:45:CC:45:78:94:A6:A6:D2:D2:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/440c4003-c877-35d5-8850-db2208d28191.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.crl X509v3 Authority Key Identifier: keyid:5F:2E:4C:6D:9D:89:B1:58:6F:12:A9:8E:85:8A:BA:B2:D8:1E:6A:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/aacd1cc5-ed3e-4f9e-8129-9d4883c0a7ae.cer sbgp-ipAddrBlock: critical IPv4: 170.39.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:88:bb:7e:54:16:5a:86:20:2b:3b:69:46:12:1c:c8:18:e7: 8a:b5:d8:b4:41:e9:4c:72:e9:01:9d:39:39:38:25:77:da:1f: d9:74:25:c5:e3:79:fa:a1:62:21:33:5a:6d:d3:7f:af:56:1b: 0c:dd:df:54:29:ac:6f:58:bb:06:9d:07:83:65:3d:2b:0e:dd: 2c:73:ef:bd:f8:b5:0a:cb:6f:4d:3e:e3:fa:61:7a:8c:d9:17: 87:57:f6:b2:ac:39:35:eb:16:a9:48:53:54:88:34:2b:52:d8: 5e:30:54:98:6c:a7:c5:56:90:1a:e2:1c:62:7d:d9:75:0b:46: 57:77:a7:53:5c:41:44:a2:12:b3:12:e2:e1:fd:44:01:b5:e9: 25:0c:80:81:cf:db:9d:80:ad:74:42:56:ef:1a:e1:94:9e:26: 83:0f:ec:c8:13:b7:00:b5:90:11:15:8e:d8:10:47:f5:99:64: 87:bd:72:89:6e:84:87:2f:a6:01:8b:46:61:26:64:1c:72:f0: 05:19:d3:34:33:66:e0:22:97:eb:c3:a4:63:d1:09:a5:bb:79: 15:b4:c0:60:1c:b9:bb:27:21:18:7a:0b:3a:f2:cd:f9:f3:e3: b9:34:b9:cd:c6:f0:1a:d8:b8:30:ce:9e:96:a3:9a:ff:be:62: 9e:36:a1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtUDJtAKgLmX7ERf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFjZDFjYzUtZWQzZS00ZjllLTgxMjktOWQ0ODgzYzBh N2FlMB4XDTI1MDkyNzAxMDAzM1oXDTI1MTIyNjAyMDAzM1owLzEtMCsGA1UEAxMk YzE2ZmQ4NjktOGVmMy00NzQwLTg5ZTktNmZmNjNhZWQ0YTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PdXruvaXYerT+mLYfnJpfmmNTUwAY1L/Xmx vzQ4oegPSfe9lzlgDP0TQvzBnXtJ6GvAfQlAmxfxtsX5807yLu9xVAh395LSI0rZ ZQ6oVogbIbq4n2OViywu06oDCcqPTR3aIhQxmvQVqnmbPVc8W+ymfApD59zt+glY GzK4mZ+BP6SJzRK1/E6gI4tdTZgTSdL3SHxIryZm3jWRBzIFx1Ky3U+Z4gEeeJUq nDM9HWzb8HlrMgCy6gbxS4N7y5eskjF56mbDpOwnvEpL7uZn5lJNCIln7bei3rm3 xorgBD4083E2dpGMMjZF6THOUC1cvd2p2zUbMDsv/c+KBkgp4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK13JooMo1xTXVpFzEV4lKam0tKXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNk MWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4ODNjMGE3YWUvNDQwYzQwMDMtYzg3Ny0z NWQ1LTg4NTAtZGIyMjA4ZDI4MTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWFjZDFjYzUtZWQzZS00ZjllLTgx MjktOWQ0ODgzYzBhN2FlL2FhY2QxY2M1LWVkM2UtNGY5ZS04MTI5LTlkNDg4M2Mw YTdhZS5jcmwwHwYDVR0jBBgwFoAUXy5MbZ2JsVhvEqmOhYq6stgeakkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYWNkMWNjNS1lZDNlLTRmOWUtODEyOS05ZDQ4 ODNjMGE3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqifsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaIu35UFlqGICs7aUYSHMgY54q12LRB6Uxy6QGdOTk4JXfaH9l0JcXj efqhYiEzWm3Tf69WGwzd31QprG9YuwadB4NlPSsO3Sxz7734tQrLb00+4/pheozZ F4dX9rKsOTXrFqlIU1SINCtS2F4wVJhsp8VWkBriHGJ92XULRld3p1NcQUSiErMS 4uH9RAG16SUMgIHP252ArXRCVu8a4ZSeJoMP7MgTtwC1kBEVjtgQR/WZZIe9colu hIcvpgGLRmEmZBxy8AUZ0zQzZuAil+vDpGPRCaW7eRW0wGAcubsnIRh6Czryzfnz 47k0uc3G8BrYuDDOnpajmv++Yp42oVw= -----END CERTIFICATE-----Generated at Sat Oct 11 04:56:32 2025 by rpki-client