$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/aec73d05-7228-32f0-a918-247faf5fc73a.roa File: aec73d05-7228-32f0-a918-247faf5fc73a.roa (raw, json) Hash identifier: NxGJ6CodZAvsQ0nd+A7JHxnO93U7fUeFCQ6P06Z9G7k= Subject key identifier: FE:FA:34:E6:AE:74:4C:C5:E2:B5:33:6A:92:F3:3A:16:DD:61:48:83 Certificate issuer: /CN=57f9cfef-e787-4c93-b24d-29ad31dc2128 Certificate serial: 010D0C9F4328584F480D653D9D6D3ACEB2924F80 Authority key identifier: D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/aec73d05-7228-32f0-a918-247faf5fc73a.roa Signing time: Thu 24 Sep 2026 13:00:12 +0000 ROA not before: Thu 24 Sep 2026 13:00:12 +0000 ROA not after: Wed 23 Dec 2026 14:00:12 +0000 asID: 22616 IP address blocks: 70.40.176.0/24 maxlen: 24 70.40.177.0/24 maxlen: 24 70.40.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:48:0d:65:3d:9d:6d:3a:ce:b2:92:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=57f9cfef-e787-4c93-b24d-29ad31dc2128 Validity Not Before: Sep 24 13:00:12 2026 GMT Not After : Dec 23 14:00:12 2026 GMT Subject: CN=60f3b72e-c8c9-4032-a6cb-684d2d244b4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:da:36:01:b4:ac:b9:34:8d:6a:67:7b:5f:64: 53:b3:0c:c8:e1:7a:ae:fb:0f:4e:07:d5:49:4b:b7: e7:2a:87:e2:fe:fa:7d:a6:05:43:7a:e0:1a:a6:a3: e7:1a:aa:2c:5a:08:98:5c:63:a7:08:42:86:a0:15: d4:a4:ef:81:de:e7:9b:61:24:ca:fb:de:6e:f4:ce: 58:38:60:fc:85:b0:10:0d:f8:9e:a0:67:8e:4c:bc: e5:1a:65:d7:2e:43:e2:87:1e:b1:35:ab:33:5f:c9: 73:9d:03:63:ad:ab:85:74:cf:07:fc:d4:95:ef:2d: 1c:1b:47:1e:0e:e2:c0:c0:83:a2:e0:0d:1f:c3:ca: b2:f8:97:15:c6:24:b0:2e:1a:40:e1:d2:98:44:b7: 29:bd:bb:69:da:96:8b:1c:57:95:1e:67:ed:68:ef: 91:93:77:50:67:1d:07:32:51:21:21:b0:d4:d9:3f: 55:78:01:fa:21:04:b7:c8:8d:d8:5c:44:2b:d5:1e: 9a:15:bd:66:3b:2e:67:9c:58:f1:04:ab:9b:1d:5d: fc:ec:94:3b:5d:f1:94:f7:e7:36:0f:2b:60:32:34: 63:84:42:70:6a:c0:d5:d3:8f:f9:b9:bf:58:f5:32: de:a3:b3:6c:98:81:1f:8c:9a:7c:28:48:2c:c5:4a: f5:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FA:34:E6:AE:74:4C:C5:E2:B5:33:6A:92:F3:3A:16:DD:61:48:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/aec73d05-7228-32f0-a918-247faf5fc73a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128/57f9cfef-e787-4c93-b24d-29ad31dc2128.crl X509v3 Authority Key Identifier: keyid:D4:96:EB:8D:A7:B5:A3:A3:C4:E5:BB:A4:2C:E8:2E:57:2D:DD:85:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/57f9cfef-e787-4c93-b24d-29ad31dc2128.cer sbgp-ipAddrBlock: critical IPv4: 70.40.176.0-70.40.178.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c3:d1:75:92:30:e3:b4:f1:c1:1c:4b:0a:65:1a:fd:51:3a: a5:ec:bd:80:9b:55:13:29:dc:3b:33:33:f9:f3:6b:81:f8:c9: 6d:33:c1:52:e8:a2:1e:0d:0c:e7:df:73:74:bf:87:3f:14:49: 8b:a5:60:c9:71:85:48:3f:9e:ac:2c:a4:7f:5d:fd:10:91:31: 94:97:5c:4f:18:96:fb:ce:e5:28:f2:16:c6:14:19:8a:4e:2d: 12:23:d6:9e:8e:d9:5d:91:3b:fe:77:e1:e8:87:4a:6e:da:16: 9d:c7:9e:f8:d4:b6:ab:25:56:54:03:0e:84:52:db:40:bc:f0: 35:97:fc:c7:c5:13:c0:86:f1:91:4f:56:7e:13:17:14:43:f3: 98:2a:0b:4a:ea:4b:99:ad:88:72:8b:cc:cc:3c:cc:c6:fd:d3: 15:5e:68:01:a1:c0:0a:1a:58:db:16:b5:a9:9d:3a:ea:ca:6f: bc:6e:de:fb:a8:97:80:b4:09:9b:83:ae:78:b7:e8:ab:b2:13: 71:22:c8:f2:c5:bc:f8:75:7b:18:93:bb:e5:1f:ea:38:2b:e5: 9f:d4:91:48:09:d8:3c:9a:51:9e:e6:e6:a4:8f:4d:99:d3:ab: 48:23:d9:79:60:d6:eb:c8:8c:9a:58:77:ca:99:43:c7:ef:7f: 7d:79:ef:dd -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9IDWU9nW06zrKST4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTdmOWNmZWYtZTc4Ny00YzkzLWIyNGQtMjlhZDMxZGMy MTI4MB4XDTI2MDkyNDEzMDAxMloXDTI2MTIyMzE0MDAxMlowLzEtMCsGA1UEAxMk NjBmM2I3MmUtYzhjOS00MDMyLWE2Y2ItNjg0ZDJkMjQ0YjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5No2AbSsuTSNamd7X2RTswzI4Xqu+w9OB9VJ S7fnKofi/vp9pgVDeuAapqPnGqosWgiYXGOnCEKGoBXUpO+B3uebYSTK+95u9M5Y OGD8hbAQDfieoGeOTLzlGmXXLkPihx6xNaszX8lznQNjrauFdM8H/NSV7y0cG0ce DuLAwIOi4A0fw8qy+JcVxiSwLhpA4dKYRLcpvbtp2paLHFeVHmftaO+Rk3dQZx0H MlEhIbDU2T9VeAH6IQS3yI3YXEQr1R6aFb1mOy5nnFjxBKubHV387JQ7XfGU9+c2 DytgMjRjhEJwasDV04/5ub9Y9TLeo7NsmIEfjJp8KEgsxUr1FwIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFP76NOaudEzF4rUzapLzOhbdYUiDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81N2Y5 Y2ZlZi1lNzg3LTRjOTMtYjI0ZC0yOWFkMzFkYzIxMjgvYWVjNzNkMDUtNzIyOC0z MmYwLWE5MTgtMjQ3ZmFmNWZjNzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTdmOWNmZWYtZTc4Ny00YzkzLWIy NGQtMjlhZDMxZGMyMTI4LzU3ZjljZmVmLWU3ODctNGM5My1iMjRkLTI5YWQzMWRj MjEyOC5jcmwwHwYDVR0jBBgwFoAU1Jbrjae1o6PE5bukLOguVy3dhaEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81N2Y5Y2ZlZi1lNzg3LTRjOTMtYjI0ZC0yOWFk MzFkYzIxMjguY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARGKLAD BABGKLIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAq8PRdZIw47TxwRxLCmUa/VE6pey9gJtVEyncOzMz+fNr gfjJbTPBUuiiHg0M599zdL+HPxRJi6VgyXGFSD+erCykf139EJExlJdcTxiW+87l KPIWxhQZik4tEiPWno7ZXZE7/nfh6IdKbtoWncee+NS2qyVWVAMOhFLbQLzwNZf8 x8UTwIbxkU9WfhMXFEPzmCoLSupLma2IcovMzDzMxv3TFV5oAaHAChpY2xa1qZ06 6spvvG7e+6iXgLQJm4OueLfoq7ITcSLI8sW8+HV7GJO75R/qOCvln9SRSAnYPJpR nubmpI9NmdOrSCPZeWDW68iMmlh3yplDx+9/fXnv3Q== -----END CERTIFICATE-----Generated at Fri Sep 25 18:24:20 2026 by rpki-client