$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abdf020-78f0-3ee6-ac6d-2b75001cf325.roa File: 3abdf020-78f0-3ee6-ac6d-2b75001cf325.roa (raw, json) Hash identifier: HP3idmcUnGRSqAgRARsm2mOZdp5GmfPP2JVqbzpHkbo= Subject key identifier: CC:B9:F3:09:E3:E5:73:5E:35:90:B1:30:7C:7F:C9:BD:AB:72:73:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588FD54CAF875631A869F38 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abdf020-78f0-3ee6-ac6d-2b75001cf325.roa Signing time: Tue 23 Jun 2026 22:35:18 +0000 ROA not before: Tue 23 Jun 2026 22:35:18 +0000 ROA not after: Mon 21 Sep 2026 22:35:18 +0000 asID: 5650 IP address blocks: 172.108.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:fd:54:ca:f8:75:63:1a:86:9f:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:18 2026 GMT Not After : Sep 21 22:35:18 2026 GMT Subject: CN=e2b4187f-a1f1-41ed-8a09-87aa1e4cea08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:a0:13:0e:7a:f2:6a:02:44:63:d6:a8:7e: ef:f9:c3:f7:53:21:55:5c:9f:19:2b:c7:76:da:ce: 08:8c:61:7d:a2:ad:d4:83:6b:21:e4:7b:70:6e:bb: ee:45:36:52:50:33:1f:16:8e:0f:46:69:23:5c:a5: 06:7d:ac:96:10:89:d3:53:5e:d2:cf:b5:1e:f0:af: 0d:1d:67:42:9c:22:3d:f3:28:b1:83:f8:bb:25:88: 71:d3:ee:ed:cf:6d:59:76:d2:3d:9f:0f:c2:ee:39: 12:4b:7a:e0:60:bd:9f:ec:78:9c:08:c2:cf:42:41: 5f:6b:19:2d:d5:46:a9:54:a3:48:ef:56:6f:d7:1e: b3:74:43:71:75:56:fd:6a:3e:bf:78:34:8c:f2:4f: 7d:08:61:66:82:17:9f:3d:ac:14:11:b1:30:c9:21: ef:7e:2a:a3:b7:bf:17:ba:5d:b6:b7:b9:a6:3f:9f: c3:1d:ac:84:02:88:dd:d0:1f:7c:26:16:a7:27:a9: 7b:75:ef:cf:96:2a:68:c1:ad:72:26:af:ec:96:dd: 67:9f:03:fb:e9:b0:7f:59:40:16:c7:00:26:22:2b: 9a:7a:46:5b:2c:a9:c1:97:92:04:13:a8:3c:7e:b4: 97:26:0c:67:fe:bf:a0:73:6c:39:f4:bb:1a:53:81: 04:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:B9:F3:09:E3:E5:73:5E:35:90:B1:30:7C:7F:C9:BD:AB:72:73:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3abdf020-78f0-3ee6-ac6d-2b75001cf325.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:88:ec:e8:40:9a:1c:a0:78:87:33:99:17:b9:c9:b6:14:d1: 20:98:f7:c7:2e:be:50:1e:8c:f2:a5:a5:b3:8b:f2:9b:4f:0d: 4e:a7:52:34:b8:38:08:f4:b1:19:a5:e5:b7:7b:4a:cd:df:04: a3:04:04:f1:f4:2f:81:eb:4a:8f:5f:89:c7:08:51:a6:9b:fa: 40:92:95:77:26:d1:01:9a:58:ca:10:31:ba:4d:98:2c:cb:c7: 95:41:1d:2b:00:24:f3:c0:9e:54:c1:cd:87:06:3d:37:ce:99: c9:5e:78:6a:24:d4:38:4e:12:79:a2:71:3e:eb:4a:29:c6:79: d7:92:28:f5:36:5c:02:12:e0:cb:2e:c8:f1:ae:75:20:1c:d5: 90:36:6f:9d:e4:79:d0:23:e4:b5:0e:ef:83:de:af:b5:a5:ee: 45:81:a3:88:4b:e5:d7:99:a5:69:6b:c0:96:c7:1a:16:b2:68: da:35:de:c3:28:2d:6d:9f:e2:15:3e:ba:d3:93:02:19:9b:b2: 04:f9:8a:62:e8:94:fb:a0:e3:74:e4:63:50:fe:d3:8d:13:25: fe:59:44:e5:e2:e5:8c:af:82:1d:a9:31:18:17:97:60:e3:6d: 48:7f:66:fe:95:3d:db:f7:f9:f7:64:b2:d1:0e:81:cf:28:17: d7:50:a7:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiP1Uyvh1YxqGnzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUxOFoXDTI2MDkyMTIyMzUxOFowLzEtMCsGA1UEAxMk ZTJiNDE4N2YtYTFmMS00MWVkLThhMDktODdhYTFlNGNlYTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4agEw568moCRGPWqH7v+cP3UyFVXJ8ZK8d2 2s4IjGF9oq3Ug2sh5HtwbrvuRTZSUDMfFo4PRmkjXKUGfayWEInTU17Sz7Ue8K8N HWdCnCI98yixg/i7JYhx0+7tz21ZdtI9nw/C7jkSS3rgYL2f7HicCMLPQkFfaxkt 1UapVKNI71Zv1x6zdENxdVb9aj6/eDSM8k99CGFmghefPawUEbEwySHvfiqjt78X ul22t7mmP5/DHayEAojd0B98JhanJ6l7de/Plipowa1yJq/slt1nnwP76bB/WUAW xwAmIiuaekZbLKnBl5IEE6g8frSXJgxn/r+gc2w59LsaU4EESQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMy58wnj5XNeNZCxMHx/yb2rcnOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2FiZGYwMjAtNzhmMC0z ZWU2LWFjNmQtMmI3NTAwMWNmMzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKqI7OhAmhygeIczmRe5ybYU0SCY98cuvlAejPKlpbOL8ptPDU6nUjS4 OAj0sRml5bd7Ss3fBKMEBPH0L4HrSo9ficcIUaab+kCSlXcm0QGaWMoQMbpNmCzL x5VBHSsAJPPAnlTBzYcGPTfOmcleeGok1DhOEnmicT7rSinGedeSKPU2XAIS4Msu yPGudSAc1ZA2b53kedAj5LUO74Per7Wl7kWBo4hL5deZpWlrwJbHGhayaNo13sMo LW2f4hU+utOTAhmbsgT5imLolPug43TkY1D+040TJf5ZROXi5Yyvgh2pMRgXl2Dj bUh/Zv6VPdv3+fdkstEOgc8oF9dQp/o= -----END CERTIFICATE-----Generated at Mon Jul 13 11:32:58 2026 by rpki-client