$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa File: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (raw, json) Hash identifier: YeoYaowyqf0NU5ZHCbsk1T5zPZQ3Glk5CmEisGKzImA= Subject key identifier: C8:EC:A7:65:8A:EA:D5:A0:44:D1:FD:A2:E1:67:98:22:4A:6A:7D:90 Certificate issuer: /CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Certificate serial: 010D0C9F4328584E210EFE3B644B8F64D5000AA0 Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa Signing time: Wed 10 Jun 2026 21:00:11 +0000 ROA not before: Wed 10 Jun 2026 21:00:11 +0000 ROA not after: Tue 08 Sep 2026 21:00:11 +0000 asID: 46687 IP address blocks: 173.44.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:21:0e:fe:3b:64:4b:8f:64:d5:00:0a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129 Validity Not Before: Jun 10 21:00:11 2026 GMT Not After : Sep 8 21:00:11 2026 GMT Subject: CN=3dc4f944-37d2-41e9-ac07-25dcc9ec8763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:fd:f2:27:08:67:66:1d:96:3a:bd:ce:70:38: 94:90:03:f8:06:3d:ea:a5:12:f3:2c:5f:8f:ac:43: 6f:79:e4:02:c6:98:5f:57:fa:9d:99:de:33:bc:6b: 0a:e0:24:37:e6:e7:b0:87:66:73:56:81:f0:4c:4f: 29:5b:0f:05:1d:83:9f:79:52:12:1c:70:c1:57:87: f0:28:db:91:da:13:95:e6:f4:91:ff:ba:a6:19:3d: 28:8d:39:26:27:d9:f0:4e:62:c1:3d:ce:bd:7c:18: cf:9c:ed:94:1c:b9:fc:47:70:3c:d5:f7:bd:40:6f: be:e1:95:e7:89:71:fb:45:dd:d5:63:1a:74:b0:a4: 8e:e3:f4:35:9e:a1:b1:7b:56:94:d6:85:c3:10:f2: fd:42:d7:08:50:c7:53:b9:2e:b5:78:54:72:22:05: 44:da:a5:31:b5:86:ea:5d:de:97:7f:92:e6:ae:1a: a2:42:a2:27:09:fe:01:e0:3e:33:3b:19:86:4c:1f: 31:70:3e:a6:99:13:81:d5:64:ac:18:c4:d3:a5:4c: 6a:7f:0e:1f:6b:08:e9:c1:da:6f:ac:b7:c4:83:54: f9:47:6d:c4:29:0c:52:f1:a4:a1:9d:66:91:e4:f0: be:63:39:a0:86:0d:4b:c1:c4:4b:d7:b4:75:96:8b: 25:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EC:A7:65:8A:EA:D5:A0:44:D1:FD:A2:E1:67:98:22:4A:6A:7D:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl X509v3 Authority Key Identifier: keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer sbgp-ipAddrBlock: critical IPv4: 173.44.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:ec:20:82:93:6a:dc:8a:f8:79:c7:3a:05:7f:04:e4:09:40: 1b:c9:db:7c:0e:41:a4:dd:a5:41:e1:8c:9e:b6:4d:0f:b7:f6: 0b:e5:bf:bd:b4:da:31:67:22:92:2c:0f:6b:ec:67:06:bf:cd: 73:15:ec:55:4e:65:73:c0:76:1e:f2:c2:01:c9:49:89:3f:cc: 75:02:ff:fe:51:e0:18:bf:8f:5b:a5:d4:66:43:5b:de:8a:59: ea:4f:ab:e3:79:12:6d:79:5c:f0:eb:fe:52:12:13:b6:c5:67: e3:b5:13:2b:12:18:66:f2:1f:8a:c9:0a:b5:e5:a0:40:5c:bc: ae:4e:cc:20:20:9e:a5:9e:ab:bf:36:b8:90:a3:03:d2:c3:fa: 1a:8b:fc:a3:7d:f8:dc:e9:64:93:cc:e3:1f:61:2b:9d:92:e2: eb:f8:ec:0f:24:d8:45:be:49:6d:cb:f2:f9:2d:df:33:ba:7e: 0b:e5:d4:54:93:b4:f9:ab:28:b6:ce:45:ef:c8:e5:8d:4d:ce: 28:b6:1c:2d:98:74:45:4c:ec:d9:85:77:43:d0:12:b7:00:93: 28:e6:fa:f8:36:a5:59:f4:9a:e1:a5:f4:57:a8:35:ef:65:f6: c1:e1:59:07:bf:c5:13:e7:61:cf:36:7a:b1:58:4c:ec:c3:8c: ca:02:d2:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4hDv47ZEuPZNUACqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWEzMWE0YTAtN2I3Ny00ZjU2LThmODktMDE1MjViNTA2 MTI5MB4XDTI2MDYxMDIxMDAxMVoXDTI2MDkwODIxMDAxMVowLzEtMCsGA1UEAxMk M2RjNGY5NDQtMzdkMi00MWU5LWFjMDctMjVkY2M5ZWM4NzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf3yJwhnZh2WOr3OcDiUkAP4Bj3qpRLzLF+P rENveeQCxphfV/qdmd4zvGsK4CQ35uewh2ZzVoHwTE8pWw8FHYOfeVISHHDBV4fw KNuR2hOV5vSR/7qmGT0ojTkmJ9nwTmLBPc69fBjPnO2UHLn8R3A81fe9QG++4ZXn iXH7Rd3VYxp0sKSO4/Q1nqGxe1aU1oXDEPL9QtcIUMdTuS61eFRyIgVE2qUxtYbq Xd6Xf5LmrhqiQqInCf4B4D4zOxmGTB8xcD6mmROB1WSsGMTTpUxqfw4fawjpwdpv rLfEg1T5R23EKQxS8aShnWaR5PC+Yzmghg1LwcRL17R1losluQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjsp2WK6tWgRNH9ouFnmCJKan2QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYTMx YTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUyNWI1MDYxMjkvZDJjZGNkNzctYWUzMS0z NjliLTlmNjMtY2UyYTQ2Y2M4ZjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWEzMWE0YTAtN2I3Ny00ZjU2LThm ODktMDE1MjViNTA2MTI5L2FhMzFhNGEwLTdiNzctNGY1Ni04Zjg5LTAxNTI1YjUw NjEyOS5jcmwwHwYDVR0jBBgwFoAUWIlNWT2gnXPWliBuheubsbqbZj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYTMxYTRhMC03Yjc3LTRmNTYtOGY4OS0wMTUy NWI1MDYxMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrSx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJPsIIKTatyK+HnHOgV/BOQJQBvJ23wOQaTdpUHhjJ62TQ+39gvlv720 2jFnIpIsD2vsZwa/zXMV7FVOZXPAdh7ywgHJSYk/zHUC//5R4Bi/j1ul1GZDW96K WepPq+N5Em15XPDr/lISE7bFZ+O1EysSGGbyH4rJCrXloEBcvK5OzCAgnqWeq782 uJCjA9LD+hqL/KN9+NzpZJPM4x9hK52S4uv47A8k2EW+SW3L8vkt3zO6fgvl1FST tPmrKLbORe/I5Y1Nzii2HC2YdEVM7NmFd0PQErcAkyjm+vg2pVn0muGl9FeoNe9l 9sHhWQe/xRPnYc82erFYTOzDjMoC0n0= -----END CERTIFICATE-----Generated at Sat Jun 13 17:57:55 2026 by rpki-client