$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa File: aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa (raw, json) Hash identifier: t6kHtHqA1vxiAxci7H+wDnLc2BXqR9qvP2oVQGvPTZw= Subject key identifier: 04:BB:DC:CB:68:61:38:DA:DC:10:68:8A:CC:19:A5:EB:29:B9:14:BD Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F4974B0056B6560CFA397C800 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32043 IP address blocks: 173.232.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:b0:05:6b:65:60:cf:a3:97:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fed5b0f6-d4dc-4922-9807-134b5c907860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:e0:2e:c2:34:25:de:6c:1f:d5:7a:35:a6: b2:0c:d6:9f:a9:3d:9f:1d:1b:77:54:8b:39:bd:b4: d6:10:cb:aa:0a:4c:76:11:d3:42:f1:38:e5:a2:3e: 23:c6:55:8d:52:34:05:bc:0a:da:b2:84:77:b2:9d: b5:bd:44:17:78:63:41:0a:2b:e7:1b:55:ab:23:a3: b9:20:d7:e7:65:fb:dc:32:1c:e8:46:18:d5:b8:f3: b0:d4:66:04:d3:4f:56:73:3a:91:e8:2b:6a:d1:8a: a6:59:f7:a7:7f:f6:a4:c7:59:a2:fa:00:19:6f:c3: 7f:5d:96:96:84:19:9a:5d:1d:12:52:1d:00:40:43: c1:94:34:03:c9:8e:7f:65:4c:3c:8f:70:3d:d4:de: 4b:3e:2b:c4:5c:c2:27:07:76:29:d4:b6:18:4d:7c: 90:4c:67:79:7b:53:d4:5c:e5:21:b8:f7:1f:a6:1f: 43:71:67:b1:28:00:8b:89:04:a4:22:b5:ff:ba:07: 20:2c:b0:86:75:52:8d:96:60:25:e5:77:75:00:8d: 9f:ee:d7:cf:81:d8:98:62:92:a4:e3:60:e5:62:3d: db:f6:9a:6f:68:13:28:be:59:46:10:61:1f:ca:11: 01:b7:78:f1:32:3d:26:23:3a:d9:2b:3d:7f:67:fd: 35:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BB:DC:CB:68:61:38:DA:DC:10:68:8A:CC:19:A5:EB:29:B9:14:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/aaf9a5f1-bfd8-3323-adaf-7d991dbaccc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:3a:46:fe:9a:0e:66:7d:5d:af:17:06:cd:9e:af:66:a1:4f: 62:b1:28:51:00:ed:e6:95:6e:9d:20:82:9a:8f:eb:84:dc:09: 42:36:d5:71:88:db:05:26:e3:c7:8c:4f:e7:d0:4d:7c:f0:6e: ea:47:83:08:11:52:59:47:0c:75:b0:ae:04:b3:3b:43:6f:5c: ab:ce:42:f7:a8:f7:e0:10:4d:5f:4c:e9:9b:5b:a3:b6:4a:77: b1:22:e0:c2:40:0d:a9:14:49:fe:52:12:91:5c:0e:0f:25:1b: ff:7b:19:18:e8:6b:07:40:3e:f8:38:1e:97:54:b3:4a:26:e3: 9c:64:92:e1:b5:53:31:19:e0:6f:6a:35:70:d1:1f:01:96:f8: cb:30:e9:ae:57:cf:bb:d7:f1:3f:fd:8a:c1:e7:3b:e2:9b:02: c4:79:e4:96:70:e8:83:c7:77:63:28:9b:84:db:32:51:0d:a7: b3:1a:41:15:c2:51:a5:54:5b:af:bc:d1:4d:95:2b:1f:05:8c: fd:5b:96:22:26:65:6d:78:73:a1:61:4c:66:6d:be:f3:23:5a: c1:98:1e:3b:13:23:d1:d2:8e:29:52:92:dc:e2:ed:08:7a:d4: b7:05:a2:68:b0:c8:71:e9:38:be:3d:aa:f5:01:51:5f:c9:e2: 5e:36:20:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdLAFa2Vgz6OXyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmVkNWIwZjYtZDRkYy00OTIyLTk4MDctMTM0YjVjOTA3ODYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgngLsI0Jd5sH9V6NaayDNafqT2fHRt3VIs5 vbTWEMuqCkx2EdNC8Tjloj4jxlWNUjQFvArasoR3sp21vUQXeGNBCivnG1WrI6O5 INfnZfvcMhzoRhjVuPOw1GYE009WczqR6Ctq0YqmWfenf/akx1mi+gAZb8N/XZaW hBmaXR0SUh0AQEPBlDQDyY5/ZUw8j3A91N5LPivEXMInB3Yp1LYYTXyQTGd5e1PU XOUhuPcfph9DcWexKACLiQSkIrX/ugcgLLCGdVKNlmAl5Xd1AI2f7tfPgdiYYpKk 42DlYj3b9ppvaBMovllGEGEfyhEBt3jxMj0mIzrZKz1/Z/01ZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS73MtoYTja3BBoiswZpespuRS9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvYWFmOWE1ZjEtYmZkOC0z MzIzLWFkYWYtN2Q5OTFkYmFjY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAregWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo6Rv6aDmZ9Xa8XBs2er2ahT2KxKFEA7eaVbp0ggpqP64TcCUI21XGI 2wUm48eMT+fQTXzwbupHgwgRUllHDHWwrgSzO0NvXKvOQveo9+AQTV9M6Ztbo7ZK d7Ei4MJADakUSf5SEpFcDg8lG/97GRjoawdAPvg4HpdUs0om45xkkuG1UzEZ4G9q NXDRHwGW+Msw6a5Xz7vX8T/9isHnO+KbAsR55JZw6IPHd2Mom4TbMlENp7MaQRXC UaVUW6+80U2VKx8FjP1bliImZW14c6FhTGZtvvMjWsGYHjsTI9HSjilSktzi7Qh6 1LcFomiwyHHpOL49qvUBUV/J4l42INQ= -----END CERTIFICATE-----Generated at Sat Oct 10 11:32:40 2026 by rpki-client