$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa File: 704fbc67-6793-334f-9cfa-ad8985af882b.roa (raw, json) Hash identifier: bVy4jhsaJuIfpd5ziMMpOse5XmJ6IcE7A423rDP5azc= Subject key identifier: 6D:C8:50:00:12:0C:77:CA:07:3D:9A:8A:FD:F4:47:3B:14:CE:16:71 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F498798016BC9EE33D1999F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:98:01:6b:c9:ee:33:d1:99:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b17037ab-d607-49de-b6f1-73f857cbca17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:18:28:a0:b0:b6:0e:a2:26:aa:1c:8e:a1: 02:02:b5:22:56:d4:29:dd:3f:4a:b0:82:fd:c0:69: 7c:78:56:3a:55:57:3e:15:f7:6c:7f:13:01:a6:c6: 66:cd:27:3d:3c:03:15:cd:ae:91:b1:18:ba:a2:cd: ab:26:cc:de:b4:13:3a:84:bd:b0:66:5b:f0:4b:e3: 34:78:2e:31:6f:90:0a:55:d8:87:41:16:16:cd:0b: f2:06:a6:0d:33:15:5f:f8:20:e9:cc:55:3d:62:23: d9:c9:47:9d:03:59:74:71:9e:45:7f:0a:42:8e:80: eb:26:55:f6:3f:6a:2a:d3:ee:34:4e:2f:09:5c:ba: a5:02:41:57:34:e8:60:13:bf:fa:bb:5b:ae:e1:51: db:c2:71:0d:a9:53:be:61:1f:ae:dc:81:e3:41:89: 19:97:bd:57:f4:3d:2e:bd:0c:4f:79:e4:c5:82:c0: 1a:20:30:dd:2a:3f:c5:60:41:a3:e5:38:cd:99:f2: bf:f6:78:89:17:97:90:3d:b2:e3:83:aa:ce:59:5f: 96:34:3f:ce:f6:98:60:4d:a2:7c:ca:b6:b3:25:5e: 57:be:3a:d4:44:1e:fb:97:bd:7e:1c:39:e9:02:ac: e3:b0:0f:df:7d:3f:0e:b6:7a:65:aa:eb:bf:1f:6c: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C8:50:00:12:0C:77:CA:07:3D:9A:8A:FD:F4:47:3B:14:CE:16:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/704fbc67-6793-334f-9cfa-ad8985af882b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:22:ee:c6:e3:8c:5d:e1:8a:c4:fd:7f:99:5b:1e:d9:21:4f: 60:c3:3f:07:47:6a:0b:24:14:b5:ed:d1:7c:05:10:a0:fc:48: f8:5a:c8:a5:a6:3f:74:2b:e2:d4:ba:da:4b:58:76:b9:1f:88: 05:a1:f0:da:c3:95:f2:2a:79:03:2b:1f:28:1b:ad:0c:72:78: c4:de:e4:f9:c8:41:53:2f:cd:6e:fc:2f:c3:cc:b9:95:f9:21: ec:a0:02:79:e1:35:b8:be:4b:c5:79:fd:fb:c6:18:86:bc:45: 6e:94:1c:2b:a4:4d:b1:92:49:57:dc:fc:95:f7:41:50:31:8c: 05:0d:af:c1:2f:d5:3a:da:97:d5:6b:71:36:05:a4:44:46:00: 6d:e3:26:72:9f:a0:e0:a9:8a:28:7c:34:6d:ce:c8:fd:55:ac: ee:e7:62:69:fe:de:71:e1:a5:c7:f6:02:b3:ad:77:4b:f6:6c: 2a:cb:a1:2c:ce:74:7b:80:3a:56:92:b0:67:8d:5e:52:16:0a: e6:bc:15:b6:e5:35:40:70:b4:8e:39:34:2a:ef:9e:9e:ed:65: a0:ac:d4:8e:83:9b:9b:fc:bb:96:8f:1a:ce:d8:f7:c2:c1:89: 13:5a:ad:a9:ae:75:99:32:25:c2:89:a2:e8:d5:8c:7f:eb:5c: d3:30:25:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh5gBa8nuM9GZnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE3MDM3YWItZDYwNy00OWRlLWI2ZjEtNzNmODU3Y2JjYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLwYKKCwtg6iJqocjqECArUiVtQp3T9KsIL9 wGl8eFY6VVc+FfdsfxMBpsZmzSc9PAMVza6RsRi6os2rJszetBM6hL2wZlvwS+M0 eC4xb5AKVdiHQRYWzQvyBqYNMxVf+CDpzFU9YiPZyUedA1l0cZ5FfwpCjoDrJlX2 P2oq0+40Ti8JXLqlAkFXNOhgE7/6u1uu4VHbwnENqVO+YR+u3IHjQYkZl71X9D0u vQxPeeTFgsAaIDDdKj/FYEGj5TjNmfK/9niJF5eQPbLjg6rOWV+WND/O9phgTaJ8 yrazJV5XvjrURB77l71+HDnpAqzjsA/ffT8Otnplquu/H2ye8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG3IUAASDHfKBz2aiv30RzsUzhZxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzA0ZmJjNjctNjc5My0z MzRmLTljZmEtYWQ4OTg1YWY4ODJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABci7sbjjF3hisT9f5lbHtkhT2DDPwdHagskFLXt0XwFEKD8SPhayKWm P3Qr4tS62ktYdrkfiAWh8NrDlfIqeQMrHygbrQxyeMTe5PnIQVMvzW78L8PMuZX5 IeygAnnhNbi+S8V5/fvGGIa8RW6UHCukTbGSSVfc/JX3QVAxjAUNr8Ev1Tral9Vr cTYFpERGAG3jJnKfoOCpiih8NG3OyP1VrO7nYmn+3nHhpcf2ArOtd0v2bCrLoSzO dHuAOlaSsGeNXlIWCua8FbblNUBwtI45NCrvnp7tZaCs1I6Dm5v8u5aPGs7Y98LB iRNaramudZkyJcKJoujVjH/rXNMwJS0= -----END CERTIFICATE-----Generated at Fri Sep 25 05:19:58 2026 by rpki-client