$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1d3e027-ac50-34e4-a11c-683230673588.roa File: e1d3e027-ac50-34e4-a11c-683230673588.roa (raw, json) Hash identifier: Ka+7hr5dPZUCMg4tl07qhIXR3+xvkPA+zp/1axVmM6k= Subject key identifier: B8:E7:99:34:25:E9:5E:A4:AC:F2:D3:A6:8D:79:E0:A1:02:8F:32:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD33868AC2E779B043700 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1d3e027-ac50-34e4-a11c-683230673588.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.108.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:38:68:ac:2e:77:9b:04:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=da4ecdaa-9939-4016-9d7c-88930a61aab1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:07:88:aa:ed:f0:a3:2d:60:6b:3c:97:d2: 7b:58:ec:3d:5a:5c:2a:ab:a0:2b:9b:88:df:81:f4: fa:77:4b:d9:8b:29:7c:0b:27:e4:7c:56:c4:ea:25: 3b:3f:de:a4:73:c2:44:51:27:d5:4a:0c:6d:76:a1: 96:e8:41:cf:12:7e:3a:05:c5:20:3d:ca:c7:ab:d8: 1a:88:cc:a1:00:96:d1:09:be:d6:cb:35:77:aa:87: e8:87:5f:38:4e:a5:f7:61:84:3c:c6:1f:af:78:15: 68:9c:09:fc:ad:8c:52:77:d7:7c:b5:ac:e3:2a:ed: 2f:21:e6:04:36:bc:25:d0:57:e3:c0:d3:43:d7:61: 1f:42:0a:92:84:03:ae:6a:5e:3e:c9:9c:b3:2b:74: 9e:0c:c8:12:8b:0f:59:46:05:e1:9b:8d:95:ac:31: ca:5d:87:d4:f9:7d:76:37:51:af:71:60:78:04:87: 7d:72:c7:05:a3:65:da:10:9e:ed:ec:a4:fe:de:9a: 49:eb:69:5b:ea:99:d9:27:24:ae:b6:14:9c:fd:33: 52:82:09:33:46:73:ee:4c:4a:4b:43:1e:81:5e:2e: 17:97:92:9a:1e:0b:97:3b:64:51:9d:12:7d:58:5b: 80:66:3a:20:92:7c:2e:9b:f8:71:ac:41:5f:25:f0: d9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E7:99:34:25:E9:5E:A4:AC:F2:D3:A6:8D:79:E0:A1:02:8F:32:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e1d3e027-ac50-34e4-a11c-683230673588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:ca:3c:79:a5:db:c8:74:f2:2c:20:b0:e6:e7:1a:5e:48:99: 13:cd:f1:8a:86:b5:00:65:e5:7c:77:14:1e:29:39:3b:94:45: bc:0d:3a:dd:f3:59:6d:55:5a:c3:59:ab:b5:7e:ba:64:a7:4c: 12:89:c4:b3:0b:34:15:ac:bf:4a:62:81:8a:ca:2c:98:7f:e6: e8:a3:59:76:08:e6:16:0f:7f:0d:ce:2e:3c:ca:d1:2d:fb:10: 6c:f2:da:c2:a8:bc:fe:3d:c7:2a:31:f7:71:6e:bd:c7:90:80: af:1d:72:1c:1c:0d:69:2b:a0:67:7e:90:1b:99:b5:e0:8d:4c: f1:6f:e6:1e:65:01:d9:d4:8d:9b:73:2e:3c:a7:c7:1a:f0:65: 3a:d9:64:4d:ad:74:d6:8e:f0:5b:99:9d:aa:fc:02:59:05:71: 3e:1d:6d:da:15:2a:26:a5:51:7b:a0:f9:e5:6c:bb:0e:04:a3: d9:cd:db:e7:ef:0b:67:6a:43:13:75:95:c4:bd:44:e8:ee:d6: f4:dd:f4:09:ef:21:3c:a3:a4:d9:4c:9b:d6:e6:cb:b6:93:2b: 1d:08:65:79:01:d9:f7:22:da:e3:0f:b3:f4:56:e6:ea:29:a9: c4:9b:01:e0:32:a6:be:1d:3f:a9:0c:db:d4:27:b0:f5:64:25: 0c:b5:bc:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNM4aKwud5sENwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ZGE0ZWNkYWEtOTkzOS00MDE2LTlkN2MtODg5MzBhNjFhYWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNoHiKrt8KMtYGs8l9J7WOw9Wlwqq6Arm4jf gfT6d0vZiyl8CyfkfFbE6iU7P96kc8JEUSfVSgxtdqGW6EHPEn46BcUgPcrHq9ga iMyhAJbRCb7WyzV3qofoh184TqX3YYQ8xh+veBVonAn8rYxSd9d8tazjKu0vIeYE Nrwl0FfjwNND12EfQgqShAOual4+yZyzK3SeDMgSiw9ZRgXhm42VrDHKXYfU+X12 N1GvcWB4BId9cscFo2XaEJ7t7KT+3ppJ62lb6pnZJySuthSc/TNSggkzRnPuTEpL Qx6BXi4Xl5KaHguXO2RRnRJ9WFuAZjogknwum/hxrEFfJfDZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjnmTQl6V6krPLTpo154KECjzKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTFkM2UwMjctYWM1MC0z NGU0LWExMWMtNjgzMjMwNjczNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzKPHml28h08iwgsObnGl5ImRPN8YqGtQBl5Xx3FB4pOTuURbwNOt3z WW1VWsNZq7V+umSnTBKJxLMLNBWsv0pigYrKLJh/5uijWXYI5hYPfw3OLjzK0S37 EGzy2sKovP49xyox93FuvceQgK8dchwcDWkroGd+kBuZteCNTPFv5h5lAdnUjZtz LjynxxrwZTrZZE2tdNaO8FuZnar8AlkFcT4dbdoVKialUXug+eVsuw4Eo9nN2+fv C2dqQxN1lcS9ROju1vTd9AnvITyjpNlMm9bmy7aTKx0IZXkB2fci2uMPs/RW5uop qcSbAeAypr4dP6kM29QnsPVkJQy1vEE= -----END CERTIFICATE-----Generated at Mon Oct 12 22:48:42 2026 by rpki-client