$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19c8147a-496c-3e3a-b062-1bb6d67c5ed3.roa File: 19c8147a-496c-3e3a-b062-1bb6d67c5ed3.roa (raw, json) Hash identifier: qqzzoXhteCtMF2uigV+UkaKvDt/VbV8mV8gUUSBnRLg= Subject key identifier: 71:23:B0:F8:EC:0B:71:8E:FD:67:7B:91:7D:C9:1D:9C:AF:17:C4:E3 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588FDB3AD58A07CE1F278C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19c8147a-496c-3e3a-b062-1bb6d67c5ed3.roa Signing time: Tue 23 Jun 2026 22:35:19 +0000 ROA not before: Tue 23 Jun 2026 22:35:19 +0000 ROA not after: Mon 21 Sep 2026 22:35:19 +0000 asID: 5650 IP address blocks: 172.108.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:fd:b3:ad:58:a0:7c:e1:f2:78:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:19 2026 GMT Not After : Sep 21 22:35:19 2026 GMT Subject: CN=c304feb6-d2b2-4b2b-82a7-cef30e37ec16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d1:d7:bd:6b:5f:46:70:0c:83:f2:39:86:81: cd:46:c8:9f:02:ac:52:2c:63:1c:a3:7f:bc:db:d4: 0b:fe:24:25:f0:8c:24:c3:28:c4:21:c9:92:cc:be: 3b:80:77:8e:ce:ab:91:e9:fb:99:50:a7:2c:0c:83: dc:79:80:c1:11:83:54:fd:fd:e0:25:d2:14:5d:3f: fd:31:ff:33:66:31:54:54:f7:30:b5:12:71:73:ec: 3a:55:6b:17:14:9c:33:b6:0e:85:8b:f5:0a:f0:49: 04:a9:7b:8b:b6:63:37:fc:54:67:0a:d9:95:c8:1c: 23:c9:5a:e4:6c:e2:e4:df:08:7f:64:8f:e2:bc:93: 71:95:1a:2c:e3:06:52:34:3b:e6:0a:4d:fe:a9:ac: 69:91:d9:bc:f3:4f:b3:cb:10:43:27:ea:f0:2d:28: 66:47:3d:df:b3:de:4d:fa:1a:76:51:04:6b:85:c0: ac:2a:a1:97:54:ec:70:e4:58:3c:39:95:a0:48:e8: aa:64:f5:39:72:9c:e8:3d:6c:f4:af:f4:f4:a0:76: 70:1b:28:ad:0c:b1:6f:3f:42:97:91:43:a4:5b:c0: e5:9c:04:9d:4f:80:1a:ab:31:a4:18:3d:5d:12:83: 52:33:ea:6a:1b:f7:81:f0:b7:c5:c5:e9:08:fb:a9: bc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:23:B0:F8:EC:0B:71:8E:FD:67:7B:91:7D:C9:1D:9C:AF:17:C4:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/19c8147a-496c-3e3a-b062-1bb6d67c5ed3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:ab:09:f1:a5:0f:5d:76:58:34:7a:e5:62:76:33:43:39:61: c8:9c:49:ed:1e:4d:d5:64:3d:bc:fa:1b:1a:82:8e:15:98:99: 52:41:2c:ed:40:4a:4d:2e:e0:2b:2a:7b:08:69:d6:71:69:7b: 38:d4:85:2f:1c:a3:ab:51:6f:b0:88:c3:14:a1:ca:2b:63:62: aa:b1:f4:7b:95:cb:46:e0:64:77:9c:ef:1e:e6:23:26:75:cb: 09:e4:02:15:79:e9:52:56:34:96:e1:ea:36:5c:6a:8e:4b:0f: a2:6d:f9:98:49:5f:87:ff:93:fc:f4:ac:0a:39:56:3e:c3:a7: 0c:53:00:c1:19:70:90:24:de:f8:8b:d7:19:4f:38:62:b8:07: f6:76:1f:b5:e1:60:9c:63:6e:a4:92:16:39:b4:ed:b4:df:f7: e7:0f:27:2f:e1:85:5f:d9:4a:d4:26:67:53:4b:c0:19:2f:6e: 4e:c9:99:26:08:c7:68:12:3c:6a:96:55:79:e5:d1:f6:87:62: e9:36:2b:66:23:57:a7:6f:50:4b:e5:0d:aa:07:37:44:94:d2: 91:ca:b4:52:6a:c9:b9:0d:30:3a:35:f7:37:97:30:c3:fc:55: 97:b8:1d:36:d9:08:2a:ff:fc:b0:dc:88:1a:69:2b:70:10:05: ed:0c:6f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiP2zrVigfOHyeMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUxOVoXDTI2MDkyMTIyMzUxOVowLzEtMCsGA1UEAxMk YzMwNGZlYjYtZDJiMi00YjJiLTgyYTctY2VmMzBlMzdlYzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNHXvWtfRnAMg/I5hoHNRsifAqxSLGMco3+8 29QL/iQl8IwkwyjEIcmSzL47gHeOzquR6fuZUKcsDIPceYDBEYNU/f3gJdIUXT/9 Mf8zZjFUVPcwtRJxc+w6VWsXFJwztg6Fi/UK8EkEqXuLtmM3/FRnCtmVyBwjyVrk bOLk3wh/ZI/ivJNxlRos4wZSNDvmCk3+qaxpkdm880+zyxBDJ+rwLShmRz3fs95N +hp2UQRrhcCsKqGXVOxw5Fg8OZWgSOiqZPU5cpzoPWz0r/T0oHZwGyitDLFvP0KX kUOkW8DlnASdT4AaqzGkGD1dEoNSM+pqG/eB8LfFxekI+6m8LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEjsPjsC3GO/Wd7kX3JHZyvF8TjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMTljODE0N2EtNDk2Yy0z ZTNhLWIwNjItMWJiNmQ2N2M1ZWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOrCfGlD112WDR65WJ2M0M5YcicSe0eTdVkPbz6GxqCjhWYmVJBLO1A Sk0u4Csqewhp1nFpezjUhS8co6tRb7CIwxShyitjYqqx9HuVy0bgZHec7x7mIyZ1 ywnkAhV56VJWNJbh6jZcao5LD6Jt+ZhJX4f/k/z0rAo5Vj7DpwxTAMEZcJAk3viL 1xlPOGK4B/Z2H7XhYJxjbqSSFjm07bTf9+cPJy/hhV/ZStQmZ1NLwBkvbk7JmSYI x2gSPGqWVXnl0faHYuk2K2YjV6dvUEvlDaoHN0SU0pHKtFJqybkNMDo19zeXMMP8 VZe4HTbZCCr//LDciBppK3AQBe0Mb24= -----END CERTIFICATE-----Generated at Mon Jul 13 10:32:59 2026 by rpki-client