$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa File: fb70d8ab-f744-306b-928d-3397d20319cb.roa (raw, json) Hash identifier: 5Xfjy+HWgcwtpoR8S2Ui28EU0e1tTpa+U/SIbpp9m74= Subject key identifier: E7:BE:C8:8D:DD:1C:B0:41:57:7B:DA:8A:37:A3:22:A8:A9:12:85:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F497480CC053C5417E4361800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30036 IP address blocks: 173.22.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:80:cc:05:3c:54:17:e4:36:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08fb449b-bb89-425f-80c6-5366d8fa4b8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:ec:e7:d8:cc:ef:6f:36:7e:b6:49:6b:92: 6d:45:6d:28:ea:b6:4f:60:43:37:aa:e6:d6:70:e0: d5:e5:8d:9a:37:ce:3d:58:b8:03:ac:45:29:77:30: c8:e3:a6:54:b7:f2:89:86:54:f7:df:0c:63:28:04: eb:83:42:8b:13:c1:81:09:7d:0b:c8:94:88:f5:f6: 1f:07:da:62:04:09:b7:cf:89:83:6e:f4:4c:c2:28: b6:c8:29:b3:c8:f0:77:74:21:83:58:56:a2:c3:47: 12:d4:17:4e:af:68:2d:12:0c:18:fd:5a:1e:ed:19: 20:bb:fe:bf:1e:9f:88:1e:cc:93:02:79:5d:b6:83: 7c:de:22:c7:8b:65:b1:a8:fb:34:06:44:eb:04:e2: 96:50:13:8e:4c:4b:39:4b:67:84:c8:68:c9:ce:4e: 12:5e:c1:cd:80:41:89:e9:ce:ad:67:72:70:ed:ae: 5a:ff:08:d1:8e:d3:fb:79:3a:46:03:a6:89:98:ef: ec:60:cd:22:d3:cd:9e:c9:7c:0c:b3:76:df:b3:22: c5:8d:37:96:b8:83:17:02:b2:3b:2d:f0:36:c1:66: 54:13:b7:59:f3:88:5c:00:71:bb:67:44:05:8a:4b: 10:65:fe:15:f1:0e:66:b4:37:04:6a:3c:e8:8b:d9: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:BE:C8:8D:DD:1C:B0:41:57:7B:DA:8A:37:A3:22:A8:A9:12:85:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb70d8ab-f744-306b-928d-3397d20319cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:37:f0:88:8c:23:8e:ca:7b:21:67:2f:75:d0:03:cd:b7:bf: 44:e6:06:4c:a7:8a:cc:a6:e3:99:e9:a5:fc:63:15:d6:76:c7: f9:2d:f6:f3:e5:cf:df:ab:72:e6:71:a3:c0:ff:29:80:47:c0: f1:63:02:96:fd:a9:c1:3c:12:c6:c0:70:34:56:0c:99:fd:7e: 43:39:71:62:84:5f:5b:e4:35:36:51:ba:a8:b9:a2:90:b3:36: 22:1c:04:eb:41:26:c4:73:56:72:08:6e:67:4e:6d:f1:40:9b: 57:de:ab:96:12:f2:79:4d:47:8d:d1:36:a8:d3:b2:20:b8:41: 16:c6:ee:ee:f7:d0:d2:37:5a:6e:37:80:81:30:84:98:25:8c: 88:72:e7:3c:9b:e9:44:90:ac:f5:48:b5:95:0b:55:30:dd:2e: 18:80:26:d4:b6:cb:1b:89:b1:c0:72:18:97:1b:43:ef:b9:88: a6:5a:ec:1e:37:8d:d7:36:c7:4e:64:5e:12:d8:54:1d:6b:a6: d9:a9:bb:f7:92:0b:4b:67:0a:dc:c7:4c:f5:d7:36:ea:b2:1e: 7c:48:6d:76:c2:3a:bb:e7:fa:17:f3:38:88:0c:ec:24:f3:56: bd:74:6f:fe:4e:fa:be:76:7f:7e:71:d4:a7:1a:5c:60:a6:1a: b3:5c:0e:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdIDMBTxUF+Q2GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDhmYjQ0OWItYmI4OS00MjVmLTgwYzYtNTM2NmQ4ZmE0YjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI3s59jM7282frZJa5JtRW0o6rZPYEM3qubW cODV5Y2aN849WLgDrEUpdzDI46ZUt/KJhlT33wxjKATrg0KLE8GBCX0LyJSI9fYf B9piBAm3z4mDbvRMwii2yCmzyPB3dCGDWFaiw0cS1BdOr2gtEgwY/Voe7Rkgu/6/ Hp+IHsyTAnldtoN83iLHi2WxqPs0BkTrBOKWUBOOTEs5S2eEyGjJzk4SXsHNgEGJ 6c6tZ3Jw7a5a/wjRjtP7eTpGA6aJmO/sYM0i082eyXwMs3bfsyLFjTeWuIMXArI7 LfA2wWZUE7dZ84hcAHG7Z0QFiksQZf4V8Q5mtDcEajzoi9lc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOe+yI3dHLBBV3vaijejIqipEoURMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmI3MGQ4YWItZjc0NC0z MDZiLTkyOGQtMzM5N2QyMDMxOWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRY8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABE38IiMI47KeyFnL3XQA823v0TmBkynisym45nppfxjFdZ2x/kt9vPl z9+rcuZxo8D/KYBHwPFjApb9qcE8EsbAcDRWDJn9fkM5cWKEX1vkNTZRuqi5opCz NiIcBOtBJsRzVnIIbmdObfFAm1feq5YS8nlNR43RNqjTsiC4QRbG7u730NI3Wm43 gIEwhJgljIhy5zyb6USQrPVItZULVTDdLhiAJtS2yxuJscByGJcbQ++5iKZa7B43 jdc2x05kXhLYVB1rptmpu/eSC0tnCtzHTPXXNuqyHnxIbXbCOrvn+hfzOIgM7CTz Vr10b/5O+r52f35x1KcaXGCmGrNcDrg= -----END CERTIFICATE-----Generated at Sun Oct 4 17:27:24 2026 by rpki-client