$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa File: cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa (raw, json) Hash identifier: LSTJIy/zW976izjGmIx66KxYMFKWyKIj/5Wqra5OO/U= Subject key identifier: A2:4B:A1:CA:39:AB:E5:E6:F1:C1:D5:90:F2:0C:E0:96:2B:6A:2A:4D Certificate issuer: /CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Certificate serial: 010D0C9F4328584F4112B2A4FDDCE457B56BF380 Authority key identifier: A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa Signing time: Tue 22 Sep 2026 01:00:12 +0000 ROA not before: Tue 22 Sep 2026 01:00:12 +0000 ROA not after: Mon 21 Dec 2026 02:00:12 +0000 asID: 46320 IP address blocks: 103.70.20.0/22 maxlen: 22 103.70.20.0/23 maxlen: 24 103.70.22.0/24 maxlen: 24 103.70.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:12:b2:a4:fd:dc:e4:57:b5:6b:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72b17343-d2f1-49ce-ba92-22f13cfbc0d0 Validity Not Before: Sep 22 01:00:12 2026 GMT Not After : Dec 21 02:00:12 2026 GMT Subject: CN=4f94707d-8fc2-475d-874d-da791e0bd108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:84:e1:76:3d:28:db:d0:d4:95:8b:33:88:be: ad:17:8c:d0:7a:d0:8a:30:9a:14:e4:9f:79:d8:28: c9:c4:54:23:1b:4d:95:a4:7c:f7:3c:ca:27:9e:4c: d7:06:a9:74:e9:b8:2e:38:94:60:f3:f5:00:b2:29: 00:c3:1b:98:d6:1a:ba:a7:19:bb:bb:50:65:01:52: 35:e1:05:a6:4a:c9:f6:4b:ca:96:71:1f:12:4f:8c: 84:0a:cf:20:b8:4e:69:fe:99:fc:2a:0d:9b:a6:7c: 11:83:27:d9:e1:40:84:ce:3c:e9:22:d0:bc:e4:23: a7:ef:e9:0c:6b:d3:81:7c:66:21:0a:43:88:3b:60: bb:55:c3:76:57:43:f8:63:83:3d:47:59:48:3e:5e: 70:6d:63:9a:f9:2a:03:70:1c:f3:23:c6:96:41:59: d4:71:ff:fa:8b:5e:61:08:f5:a0:51:9d:06:22:04: 30:44:a5:9e:25:34:64:ca:a6:d6:03:bc:4a:4e:c8: dd:a0:bf:0f:c3:16:32:46:1a:fd:76:9c:24:8f:28: 13:96:db:2f:69:01:a5:87:9b:5a:52:ae:62:f6:9e: 6d:16:a5:fc:a9:62:2b:72:be:d0:7d:0a:89:f1:83: 55:2b:63:b5:fe:47:55:99:67:fc:72:e0:74:47:b2: c3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:4B:A1:CA:39:AB:E5:E6:F1:C1:D5:90:F2:0C:E0:96:2B:6A:2A:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/cc81cd81-1ca7-3515-898b-d8b9f3b722ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.crl X509v3 Authority Key Identifier: keyid:A3:26:D1:9F:CB:29:99:84:97:4E:7C:E2:DB:A5:3C:1E:A7:33:CC:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/72b17343-d2f1-49ce-ba92-22f13cfbc0d0.cer sbgp-ipAddrBlock: critical IPv4: 103.70.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:41:3e:4d:d4:22:84:0c:8e:39:bb:30:bd:57:fd:19:8b:63: a7:9b:af:81:cf:1a:6e:9b:27:11:4c:49:a0:66:cf:4e:7a:c5: 6b:f9:82:a3:11:04:af:2f:5b:7d:da:df:13:ce:8b:1d:47:2c: a8:71:74:0e:6a:86:19:f1:17:e5:82:fa:59:76:aa:7a:82:b2: dd:12:53:4e:58:35:47:1b:28:35:87:62:5e:ae:83:00:88:f0: 33:35:32:59:4d:29:ab:7e:67:72:a6:9e:0a:4c:8f:fc:b4:b4: 80:75:3f:e3:59:a8:21:1f:31:36:c4:9a:c7:e2:60:a9:19:54: 5e:3d:c5:7f:1d:f1:b5:7b:0e:4b:b9:ec:6e:f7:ac:b9:3b:4f: 22:6a:24:c1:e7:34:d6:fb:de:a0:f5:c9:5c:e4:d7:e3:17:eb: b4:67:5b:5e:f6:52:51:0d:2b:48:8a:a9:16:db:a8:0e:b3:db: 91:d8:2d:66:8a:c1:2d:47:16:d7:ac:b8:77:ce:a2:d0:5f:a9: 35:ff:4e:e3:06:9c:fa:6b:40:5a:a9:67:a3:bc:0e:b2:0c:b1: 3c:19:cf:be:6d:10:ad:a1:7a:6b:94:b4:2a:45:c7:ad:5f:1f: f6:09:2a:54:42:47:2d:a0:39:40:3f:41:aa:14:fa:2d:91:7d: a6:ab:9c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9BErKk/dzkV7Vr84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzJiMTczNDMtZDJmMS00OWNlLWJhOTItMjJmMTNjZmJj MGQwMB4XDTI2MDkyMjAxMDAxMloXDTI2MTIyMTAyMDAxMlowLzEtMCsGA1UEAxMk NGY5NDcwN2QtOGZjMi00NzVkLTg3NGQtZGE3OTFlMGJkMTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIThdj0o29DUlYsziL6tF4zQetCKMJoU5J95 2CjJxFQjG02VpHz3PMonnkzXBql06bguOJRg8/UAsikAwxuY1hq6pxm7u1BlAVI1 4QWmSsn2S8qWcR8ST4yECs8guE5p/pn8Kg2bpnwRgyfZ4UCEzjzpItC85COn7+kM a9OBfGYhCkOIO2C7VcN2V0P4Y4M9R1lIPl5wbWOa+SoDcBzzI8aWQVnUcf/6i15h CPWgUZ0GIgQwRKWeJTRkyqbWA7xKTsjdoL8PwxYyRhr9dpwkjygTltsvaQGlh5ta Uq5i9p5tFqX8qWIrcr7QfQqJ8YNVK2O1/kdVmWf8cuB0R7LD6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJLoco5q+Xm8cHVkPIM4JYraipNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIx NzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYxM2NmYmMwZDAvY2M4MWNkODEtMWNhNy0z NTE1LTg5OGItZDhiOWYzYjcyMmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzJiMTczNDMtZDJmMS00OWNlLWJh OTItMjJmMTNjZmJjMGQwLzcyYjE3MzQzLWQyZjEtNDljZS1iYTkyLTIyZjEzY2Zi YzBkMC5jcmwwHwYDVR0jBBgwFoAUoybRn8spmYSXTnzi26U8HqczzBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi83MmIxNzM0My1kMmYxLTQ5Y2UtYmE5Mi0yMmYx M2NmYmMwZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ0YUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRBPk3UIoQMjjm7ML1X/RmLY6ebr4HPGm6bJxFMSaBmz056xWv5gqMR BK8vW33a3xPOix1HLKhxdA5qhhnxF+WC+ll2qnqCst0SU05YNUcbKDWHYl6ugwCI 8DM1MllNKat+Z3KmngpMj/y0tIB1P+NZqCEfMTbEmsfiYKkZVF49xX8d8bV7Dku5 7G73rLk7TyJqJMHnNNb73qD1yVzk1+MX67RnW172UlENK0iKqRbbqA6z25HYLWaK wS1HFtesuHfOotBfqTX/TuMGnPprQFqpZ6O8DrIMsTwZz75tEK2hemuUtCpFx61f H/YJKlRCRy2gOUA/QaoU+i2RfaarnG8= -----END CERTIFICATE-----Generated at Wed Sep 30 22:51:25 2026 by rpki-client