$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa File: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (raw, json) Hash identifier: VXAcQf22m+VBCsksaQeL0HoiRCaCvEeWScKO5786Qlo= Subject key identifier: CA:34:5B:EB:27:C9:86:A7:19:99:10:31:6E:92:85:D3:9D:C2:F5:80 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584F655D819ED8F32F0BF1FD2600 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 46687 IP address blocks: 173.44.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:81:9e:d8:f3:2f:0b:f1:fd:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=ba9ae622-d2b0-4ac7-b18e-d5eb1a1e63db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:99:a7:61:3a:0e:ef:17:b9:33:d2:75:49:3b: 8c:97:9d:38:a7:67:dc:36:6d:f0:ae:d9:68:a2:98: 1d:d0:18:d2:3f:ec:df:cf:51:21:db:e3:70:2c:ec: 04:0b:96:00:10:b3:3b:5d:a3:b0:af:df:3a:bc:ba: 88:05:16:8c:cf:11:18:1c:e2:08:cd:df:1f:e7:48: 0f:b6:e5:8b:f9:8b:ef:b1:b0:f3:be:c1:e0:50:0d: 26:e3:ee:cc:88:57:59:cf:57:b8:85:fb:a7:cf:98: e5:93:16:54:ff:f6:46:db:37:8c:34:0a:c7:92:6d: a3:5d:66:ba:1b:4a:02:63:cc:a4:92:37:75:41:4c: f8:ae:79:7e:5e:dc:66:7e:7a:a4:b7:a4:17:10:b5: b6:10:11:6c:39:e1:60:4c:4f:56:09:32:47:4c:ac: 9f:f4:d8:8f:94:c0:5d:77:97:ce:50:ff:95:3d:61: 7f:f8:6f:84:0b:0b:b5:02:fa:e2:06:7b:1e:c8:fa: 88:a3:18:42:19:29:1d:aa:07:12:11:cd:f5:fa:c6: 91:c0:2e:e4:8b:e3:44:b7:d9:d7:8b:cc:2f:cc:b1: 71:1e:ae:dd:6d:dc:93:6d:35:6e:ae:13:a9:75:89: e5:ad:30:15:f9:ed:83:b5:12:65:be:cd:db:5c:96: ef:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:34:5B:EB:27:C9:86:A7:19:99:10:31:6E:92:85:D3:9D:C2:F5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 173.44.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:5d:b0:91:ca:50:b0:eb:2f:f0:46:37:e4:d9:10:ed:3e:c9: 75:56:47:f5:25:76:62:7d:3c:af:30:33:fa:ee:62:e2:1f:f8: 2f:ba:00:03:1e:f9:9a:63:be:04:32:78:59:2b:2f:cf:be:83: 0b:bf:22:49:48:8b:c7:51:32:74:46:6a:81:11:84:25:3e:7f: 50:fe:1c:42:f5:e8:78:9b:df:77:cf:74:40:ae:e8:2d:e1:b4: b8:fe:8e:95:fb:9e:b9:8c:93:b7:80:88:79:a9:29:88:0c:3e: 11:ea:fc:34:38:48:07:3d:ab:b1:26:e3:05:53:0d:e3:1a:b2: a9:22:07:b5:59:25:67:99:5b:0a:f8:79:83:a8:69:53:9e:7f: 95:0b:db:c1:59:c1:46:3b:bb:be:3d:1d:27:2e:33:92:e6:82: b4:89:90:aa:6c:c8:86:39:db:96:ef:63:61:46:93:0c:23:87: d3:f2:fb:d6:25:88:d6:f9:89:fd:4f:6e:6e:05:0e:9b:a0:aa: fe:de:96:95:58:74:9d:b1:ac:c8:1b:48:32:52:1a:41:1a:b1: be:75:a7:27:de:68:fb:40:a2:ee:9d:e0:79:a8:cd:82:32:0f: ad:79:02:97:6a:d6:92:1c:89:f5:39:1c:3b:36:d3:40:de:7c: 1b:3e:a4:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXYGe2PMvC/H9JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk YmE5YWU2MjItZDJiMC00YWM3LWIxOGUtZDVlYjFhMWU2M2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJmnYToO7xe5M9J1STuMl504p2fcNm3wrtlo opgd0BjSP+zfz1Eh2+NwLOwEC5YAELM7XaOwr986vLqIBRaMzxEYHOIIzd8f50gP tuWL+YvvsbDzvsHgUA0m4+7MiFdZz1e4hfunz5jlkxZU//ZG2zeMNArHkm2jXWa6 G0oCY8ykkjd1QUz4rnl+Xtxmfnqkt6QXELW2EBFsOeFgTE9WCTJHTKyf9NiPlMBd d5fOUP+VPWF/+G+ECwu1AvriBnseyPqIoxhCGSkdqgcSEc31+saRwC7ki+NEt9nX i8wvzLFxHq7dbdyTbTVurhOpdYnlrTAV+e2DtRJlvs3bXJbvJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMo0W+snyYanGZkQMW6ShdOdwvWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDJjZGNkNzctYWUzMS0z NjliLTlmNjMtY2UyYTQ2Y2M4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrSx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZdsJHKULDrL/BGN+TZEO0+yXVWR/UldmJ9PK8wM/ruYuIf+C+6AAMe +ZpjvgQyeFkrL8++gwu/IklIi8dRMnRGaoERhCU+f1D+HEL16Hib33fPdECu6C3h tLj+jpX7nrmMk7eAiHmpKYgMPhHq/DQ4SAc9q7Em4wVTDeMasqkiB7VZJWeZWwr4 eYOoaVOef5UL28FZwUY7u749HScuM5LmgrSJkKpsyIY525bvY2FGkwwjh9Py+9Yl iNb5if1Pbm4FDpugqv7elpVYdJ2xrMgbSDJSGkEasb51pyfeaPtAou6d4HmozYIy D615Apdq1pIcifU5HDs200DefBs+pEM= -----END CERTIFICATE-----Generated at Thu Oct 15 07:00:25 2026 by rpki-client