$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: lW4oiRS1Zlv/a+8IPrJePdphoL1v8Z2WEKkjAKuIN1E= Subject key identifier: 34:28:A6:2C:FD:46:0C:E8:40:2F:78:42:A5:B9:35:18:0F:E2:F5:7D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E54B49FDF869A655A5DF29820 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Mon 29 Jun 2026 09:00:12 +0000 ROA not before: Mon 29 Jun 2026 09:00:12 +0000 ROA not after: Sun 27 Sep 2026 09:00:12 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:54:b4:9f:df:86:9a:65:5a:5d:f2:98:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 29 09:00:12 2026 GMT Not After : Sep 27 09:00:12 2026 GMT Subject: CN=3b16d7b3-bacc-4353-a79c-9da00b7ea9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:89:0a:b2:b9:61:5a:51:cb:fb:ea:72:60:d5: 81:0b:4f:54:7b:a3:6d:d3:0b:d8:c0:b2:fd:f8:81: 86:fd:47:e4:e4:7e:24:dc:31:53:27:df:49:75:36: 5b:a5:c0:1a:e3:53:29:ab:28:68:bc:26:54:d2:ce: fd:8b:4d:e0:20:a4:02:49:10:4b:36:8a:1e:0d:cf: 42:a9:9b:27:ff:b1:5f:56:e1:22:ae:27:a4:ac:08: 0e:cc:4a:e9:3e:de:13:40:80:93:7c:fa:66:f2:6f: 5a:31:28:a1:d1:15:94:56:6d:82:db:bb:ac:85:65: 94:9a:ee:69:1e:34:dd:38:39:78:bc:da:0f:84:77: 64:e9:12:da:d5:ea:8e:e5:78:63:b0:2a:50:22:22: 78:32:7f:60:97:2a:1a:51:4b:4a:65:dc:c4:2a:b7: 88:e1:4d:e4:53:6b:44:2a:bc:f5:fb:92:a4:d6:f4: b9:2d:b0:67:16:bb:57:82:77:bb:38:0d:2a:7e:43: 3a:44:66:37:23:52:05:6a:87:f1:38:07:7d:32:4d: 74:e1:f7:0d:70:ef:b9:99:06:a2:e5:9d:45:b0:fe: 87:6c:db:95:2d:d4:ef:c8:3f:f9:45:a7:eb:5e:26: 78:8d:41:c3:e0:7b:e0:f3:13:e9:21:31:84:e8:1c: ee:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:28:A6:2C:FD:46:0C:E8:40:2F:78:42:A5:B9:35:18:0F:E2:F5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:56:3f:4b:b8:09:b0:b8:c2:25:1b:94:15:e9:7f:20:87:7f: b3:a8:67:9e:c2:4d:0b:6c:e0:cb:ae:20:f3:62:63:06:af:9b: 87:31:d4:c5:78:96:ad:12:95:52:b1:71:bc:f3:7c:3c:c5:7b: e3:e2:11:17:37:29:bb:67:cb:f8:45:ac:3f:68:07:31:fc:1f: e9:0c:05:35:28:cd:36:4a:11:e7:6e:30:d8:cd:d3:53:fc:98: 3e:b6:b6:cb:12:95:22:27:88:19:b3:8a:e8:c7:8c:84:ad:52: 77:1d:3a:d1:7b:e6:50:51:50:3e:81:8b:21:9d:04:e4:57:d1: 6c:8a:74:36:cd:88:02:8d:53:91:5c:9c:17:1b:c1:fa:7c:2d: df:2f:f9:7a:9f:04:f3:ad:53:79:3a:cb:76:64:72:0c:f6:04: 56:27:e7:5b:93:2b:8d:58:5c:cb:55:82:af:3f:b8:88:fe:a9: c1:98:db:2d:0d:d3:ed:66:4d:6e:e0:db:b9:cc:e4:3a:e7:f0: 61:e4:65:30:db:ac:d9:52:b7:57:95:75:db:01:1c:46:3a:f0: ac:72:e3:13:63:2d:a0:9e:0d:55:18:3f:db:bf:55:e9:ae:a4: d4:ec:7c:5a:d1:53:8f:3b:58:13:4c:c7:e0:5b:8c:01:85:08: 83:e4:89:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5UtJ/fhpplWl3ymCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyOTA5MDAxMloXDTI2MDkyNzA5MDAxMlowLzEtMCsGA1UEAxMk M2IxNmQ3YjMtYmFjYy00MzUzLWE3OWMtOWRhMDBiN2VhOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiokKsrlhWlHL++pyYNWBC09Ue6Nt0wvYwLL9 +IGG/Ufk5H4k3DFTJ99JdTZbpcAa41MpqyhovCZU0s79i03gIKQCSRBLNooeDc9C qZsn/7FfVuEiriekrAgOzErpPt4TQICTfPpm8m9aMSih0RWUVm2C27ushWWUmu5p HjTdODl4vNoPhHdk6RLa1eqO5XhjsCpQIiJ4Mn9glyoaUUtKZdzEKreI4U3kU2tE Krz1+5Kk1vS5LbBnFrtXgne7OA0qfkM6RGY3I1IFaofxOAd9Mk104fcNcO+5mQai 5Z1FsP6HbNuVLdTvyD/5RafrXiZ4jUHD4Hvg8xPpITGE6Bzu+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQopiz9RgzoQC94QqW5NRgP4vV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARWP0u4CbC4wiUblBXpfyCHf7OoZ57CTQts4MuuIPNiYwavm4cx1MV4 lq0SlVKxcbzzfDzFe+PiERc3Kbtny/hFrD9oBzH8H+kMBTUozTZKEeduMNjN01P8 mD62tssSlSIniBmziujHjIStUncdOtF75lBRUD6BiyGdBORX0WyKdDbNiAKNU5Fc nBcbwfp8Ld8v+XqfBPOtU3k6y3Zkcgz2BFYn51uTK41YXMtVgq8/uIj+qcGY2y0N 0+1mTW7g27nM5Drn8GHkZTDbrNlSt1eVddsBHEY68Kxy4xNjLaCeDVUYP9u/Vemu pNTsfFrRU487WBNMx+BbjAGFCIPkiV8= -----END CERTIFICATE-----Generated at Thu Jul 23 22:01:16 2026 by rpki-client