$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b41ca9-0457-3126-8932-b4990b785163.roa File: 70b41ca9-0457-3126-8932-b4990b785163.roa (raw, json) Hash identifier: qFCxyUEkUnfZB7CAe5wJzK06ew+5pJX4rb4hemNpQns= Subject key identifier: DC:A2:92:48:28:B4:60:5E:DC:95:C4:D5:4E:AD:8D:77:4C:67:CA:C6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F49872360A6F509E865E92B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b41ca9-0457-3126-8932-b4990b785163.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.24.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:23:60:a6:f5:09:e8:65:e9:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cf5a819f-92d3-4ae9-969e-f0e518d494e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:a7:e3:39:9f:aa:fa:c7:a2:69:89:67:84: c7:82:39:73:29:98:bf:75:fd:cd:5d:a1:32:3b:0c: 70:70:74:47:60:7b:fa:f1:5c:94:36:1d:02:1f:6a: c3:f3:76:ea:1e:e9:46:30:cf:00:53:90:8b:18:44: 47:3e:81:0f:8f:11:ab:7a:a7:36:ee:fc:15:32:58: d9:25:1d:4a:f9:43:c8:52:0b:16:da:54:d2:e4:fc: 70:78:85:ef:98:86:c2:09:2f:e4:0e:37:a1:2e:7a: c6:58:04:83:3c:28:24:db:c5:82:e6:96:ab:0f:1d: e2:e0:81:24:cc:50:33:d8:0b:4d:d4:b3:51:86:00: 1b:1c:17:10:45:b7:3e:4e:fd:9e:03:9d:da:bb:ae: ce:aa:3a:5a:42:6e:fb:67:fb:ac:42:e5:c1:8f:d5: cf:ce:22:dc:48:7f:9e:e8:5e:43:d5:a2:6d:07:72: 07:e8:47:71:a5:25:57:7d:4c:c8:45:e0:40:a7:b8: 9c:1f:01:27:4a:53:2f:c3:7d:59:24:0c:1e:37:0d: 09:f0:fb:f9:ce:94:e8:47:86:c5:ab:0d:78:e8:aa: 8e:59:9d:7b:18:d0:c1:c9:6f:bb:2d:75:b6:64:c5: 24:62:b6:d1:93:04:95:5e:77:89:68:3a:f7:fd:e1: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:A2:92:48:28:B4:60:5E:DC:95:C4:D5:4E:AD:8D:77:4C:67:CA:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b41ca9-0457-3126-8932-b4990b785163.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:65:04:9e:f3:b1:31:5b:ae:d6:dd:d4:aa:96:13:01:64:97: 0b:07:8b:2b:b6:d0:95:47:9a:11:55:67:43:ff:f3:f6:67:f6: d5:43:55:0b:64:28:ab:17:5d:f8:22:e7:09:95:41:be:42:a7: 39:86:ca:b7:ab:d5:61:a4:f2:5c:56:ab:82:5d:16:1c:0f:c6: 7e:18:6e:ae:c0:30:6d:73:dc:ec:f7:45:79:3e:92:c3:ec:83: 47:5b:fd:1f:f0:11:92:78:91:17:4b:e5:05:5f:d2:88:53:40: d6:78:fd:df:da:e1:dd:72:bd:5f:7f:2f:16:8a:af:df:c6:48: e2:97:d4:0f:a1:9e:31:41:9d:7d:44:93:d7:7f:cc:b7:53:04: 31:ef:ea:5b:33:4a:5f:b6:f8:9b:79:90:75:f3:b9:52:2e:bb: e8:81:ee:74:13:12:c2:e8:89:6f:b3:34:7f:c0:05:da:94:4e: 94:73:ee:4b:54:f8:b3:3c:27:d2:f1:57:b8:94:ad:c7:1f:ae: 57:ef:41:29:14:eb:c5:f2:97:b9:d5:ed:7f:ee:aa:af:7c:10: f0:47:7b:dc:c8:33:83:5e:08:51:93:38:b6:93:7f:78:ad:39: 2c:5f:f4:f2:f7:eb:21:dc:82:93:b0:e2:cd:2e:a1:7f:d9:37: d5:f1:99:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhyNgpvUJ6GXpK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2Y1YTgxOWYtOTJkMy00YWU5LTk2OWUtZjBlNTE4ZDQ5NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyen4zmfqvrHommJZ4THgjlzKZi/df3NXaEy OwxwcHRHYHv68VyUNh0CH2rD83bqHulGMM8AU5CLGERHPoEPjxGreqc27vwVMljZ JR1K+UPIUgsW2lTS5PxweIXvmIbCCS/kDjehLnrGWASDPCgk28WC5parDx3i4IEk zFAz2AtN1LNRhgAbHBcQRbc+Tv2eA53au67OqjpaQm77Z/usQuXBj9XPziLcSH+e 6F5D1aJtB3IH6EdxpSVXfUzIReBAp7icHwEnSlMvw31ZJAweNw0J8Pv5zpToR4bF qw146KqOWZ17GNDByW+7LXW2ZMUkYrbRkwSVXneJaDr3/eFDTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyikkgotGBe3JXE1U6tjXdMZ8rGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBiNDFjYTktMDQ1Ny0z MTI2LTg5MzItYjQ5OTBiNzg1MTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRhgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdlBJ7zsTFbrtbd1KqWEwFklwsHiyu20JVHmhFVZ0P/8/Zn9tVDVQtk KKsXXfgi5wmVQb5CpzmGyrer1WGk8lxWq4JdFhwPxn4Ybq7AMG1z3Oz3RXk+ksPs g0db/R/wEZJ4kRdL5QVf0ohTQNZ4/d/a4d1yvV9/LxaKr9/GSOKX1A+hnjFBnX1E k9d/zLdTBDHv6lszSl+2+Jt5kHXzuVIuu+iB7nQTEsLoiW+zNH/ABdqUTpRz7ktU +LM8J9LxV7iUrccfrlfvQSkU68Xyl7nV7X/uqq98EPBHe9zIM4NeCFGTOLaTf3it OSxf9PL36yHcgpOw4s0uoX/ZN9XxmUk= -----END CERTIFICATE-----Generated at Sun Sep 27 00:16:33 2026 by rpki-client