$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa File: d898c3e6-e536-3098-b097-31f14862b8a8.roa (raw, json) Hash identifier: XJkbWPgsQD4VkjEQUR0pExeiE3aGaHFZQPeZfvODtMg= Subject key identifier: BF:28:E8:B0:CA:9C:6D:60:4B:B2:B4:13:BC:B2:A0:39:B3:AD:02:00 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F3FAD488FC2DD043021904210 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.15.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:48:8f:c2:dd:04:30:21:90:42:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d364d1ce-d46a-4563-8358-fe5ff077c0be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f5:50:74:d9:76:c5:39:7b:42:28:21:c6:7a: dc:52:5b:07:87:8a:59:b9:a2:28:9f:d4:84:d7:44: 14:82:bd:af:d8:42:f4:35:66:8d:29:86:96:77:c5: 4f:a0:03:dd:d3:f1:5f:38:ae:9d:e1:dd:ba:6d:3a: 6d:29:1b:2e:1b:f8:af:e3:f1:1d:fb:c3:35:b8:3f: b3:f7:6b:cc:c4:ea:80:44:f1:6d:dc:af:ee:a4:1e: 99:39:dc:1f:86:b4:f0:67:22:2e:22:9b:bd:5a:37: 99:68:e7:9b:c4:51:ff:4a:ac:54:f5:7b:34:bb:78: 0f:be:fc:c4:ca:0d:7b:2a:bd:7c:a0:4f:40:47:50: 51:05:8c:72:45:a2:b6:06:46:7f:bf:56:8d:23:c2: f4:7d:68:ae:bd:cd:1b:4a:91:b7:4f:5b:53:97:2e: 8b:d0:a2:49:25:70:4e:c5:0b:de:85:1f:ba:43:63: 4d:24:87:74:de:4c:75:6d:e8:2c:7e:58:1f:5a:f2: 17:8d:fe:63:72:af:08:78:62:6b:ef:46:87:f5:d9: 37:9d:a0:48:6a:03:54:45:c8:92:85:8f:70:99:62: cd:ec:7c:f8:bb:67:00:ef:55:90:c4:d5:de:39:54: 8f:df:30:90:5a:b5:73:dc:cc:10:5d:19:bc:41:2c: f6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:28:E8:B0:CA:9C:6D:60:4B:B2:B4:13:BC:B2:A0:39:B3:AD:02:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d898c3e6-e536-3098-b097-31f14862b8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.15.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e6:2d:44:15:ed:3b:5d:7d:26:56:b4:83:9c:20:4e:04:1b: 89:38:a8:aa:9a:2d:bd:85:42:0d:4a:46:29:1c:58:5f:29:15: c1:c3:fc:10:85:e8:6f:7b:83:e9:70:e5:cf:6c:0c:8b:74:33: df:f4:b5:79:4d:8e:11:80:a0:1e:f6:41:25:ce:19:a3:52:a5: 65:72:d0:d9:9f:8a:22:87:85:df:83:92:0b:bb:e4:4a:9c:1a: 63:7b:8c:2b:20:6e:38:3f:d7:47:91:86:e5:30:c6:37:91:13: 14:17:99:00:6a:3e:16:c6:24:93:cd:d4:da:2d:26:dc:81:f0: 10:ca:f0:bb:c8:3d:c6:7b:54:19:bc:2f:65:17:de:42:c2:ef: 12:97:25:19:34:0a:4b:f5:d7:29:48:70:6d:e3:04:1e:c8:dc: d1:16:c2:20:e8:a8:d4:be:c8:34:22:09:16:c6:43:61:bc:31: 3e:8e:40:79:81:ac:df:0e:eb:b1:cb:72:c8:49:81:29:32:86: c9:9d:84:16:b4:b7:62:fa:07:d6:6c:4a:a8:e8:1f:51:d7:23: 59:37:e1:ba:99:45:ad:6f:82:91:76:8d:ed:d8:67:8d:18:9d: d6:c7:7a:dc:49:e9:f6:49:8b:9c:61:28:cc:7b:75:fa:f5:46: e7:31:bd:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUiPwt0EMCGQQhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDM2NGQxY2UtZDQ2YS00NTYzLTgzNTgtZmU1ZmYwNzdjMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPVQdNl2xTl7QighxnrcUlsHh4pZuaIon9SE 10QUgr2v2EL0NWaNKYaWd8VPoAPd0/FfOK6d4d26bTptKRsuG/iv4/Ed+8M1uD+z 92vMxOqARPFt3K/upB6ZOdwfhrTwZyIuIpu9WjeZaOebxFH/SqxU9Xs0u3gPvvzE yg17Kr18oE9AR1BRBYxyRaK2BkZ/v1aNI8L0fWiuvc0bSpG3T1tTly6L0KJJJXBO xQvehR+6Q2NNJId03kx1begsflgfWvIXjf5jcq8IeGJr70aH9dk3naBIagNURciS hY9wmWLN7Hz4u2cA71WQxNXeOVSP3zCQWrVz3MwQXRm8QSz2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8o6LDKnG1gS7K0E7yyoDmzrQIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDg5OGMzZTYtZTUzNi0z MDk4LWIwOTctMzFmMTQ4NjJiOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEbA+wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPmLUQV7TtdfSZWtIOcIE4EG4k4qKqaLb2FQg1KRikcWF8pFcHD/BCF 6G97g+lw5c9sDIt0M9/0tXlNjhGAoB72QSXOGaNSpWVy0NmfiiKHhd+Dkgu75Eqc GmN7jCsgbjg/10eRhuUwxjeRExQXmQBqPhbGJJPN1NotJtyB8BDK8LvIPcZ7VBm8 L2UX3kLC7xKXJRk0Ckv11ylIcG3jBB7I3NEWwiDoqNS+yDQiCRbGQ2G8MT6OQHmB rN8O67HLcshJgSkyhsmdhBa0t2L6B9ZsSqjoH1HXI1k34bqZRa1vgpF2je3YZ40Y ndbHetxJ6fZJi5xhKMx7dfr1Rucxvec= -----END CERTIFICATE-----Generated at Thu Sep 24 13:15:49 2026 by rpki-client