$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa File: 3c271c2f-5fb4-307b-8972-821df3f14259.roa (raw, json) Hash identifier: s0hvaLnp2NeGhaxLuGqsTDEcdjw7ezrwn91B+wa+2WY= Subject key identifier: A9:A8:1B:DB:DF:78:5C:DA:92:4F:74:BC:D4:09:FD:51:DF:BB:57:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A68A91D4DE640FF7B9F8080 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.34.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:a9:1d:4d:e6:40:ff:7b:9f:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=786e5fe4-0983-4d9f-b8ac-777dd74727cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:ba:c0:86:28:dc:dd:20:8f:36:d3:fe:9a: d5:c0:42:49:44:b0:bb:87:38:4e:81:2c:3c:92:01: 93:0a:7d:d4:0b:5c:2b:1b:57:7d:20:8f:c5:c8:ac: 36:ba:65:25:5e:83:59:fe:7e:c5:9a:15:db:6e:b3: 13:96:02:22:71:b5:71:de:b8:a9:f3:21:dd:e5:4a: 4c:90:ed:4a:0d:1d:77:14:f7:3b:88:a8:43:7a:d0: f8:3f:c7:c1:f3:03:0b:d9:95:a9:f3:55:fb:2b:df: 8a:fd:04:15:d2:15:92:58:32:63:cb:52:e2:e2:8d: a7:c4:73:e0:8f:f8:18:55:50:92:75:f4:4d:88:0d: b9:28:a2:f3:b6:b9:9e:b6:91:d4:8e:ed:19:05:9b: 44:fa:51:f0:22:1f:88:29:81:42:00:94:5e:03:6b: 9c:89:7c:e1:ae:de:bd:5d:2f:8b:5d:b0:6e:7e:d8: 5e:fe:12:04:97:23:2d:9c:99:bb:96:e9:ab:9a:ff: 50:41:d3:62:cb:ea:0a:8b:61:e2:7e:7c:db:87:62: d1:7b:c0:b7:89:12:4e:f5:e2:51:1a:1a:6f:78:a4: e6:17:cd:de:97:53:0d:62:83:dc:62:d4:62:5b:46: 32:c3:f4:27:59:0a:ca:62:c6:30:cf:31:99:4b:73: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:1B:DB:DF:78:5C:DA:92:4F:74:BC:D4:09:FD:51:DF:BB:57:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3c271c2f-5fb4-307b-8972-821df3f14259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.34.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b4:4c:05:1f:26:c0:fc:99:a6:36:77:a8:b6:9a:ec:97:68: 88:4e:31:5e:87:b7:1c:04:c9:17:a0:2b:13:97:9a:7a:26:2e: 27:5c:b3:4b:06:c9:00:68:4b:f5:10:e4:1d:ea:a4:66:e9:8c: 22:60:ab:c5:8e:ca:75:a2:6e:60:72:ef:e2:a0:a0:d4:b9:d4: e9:bb:51:37:c0:1b:a8:cf:dd:ec:b8:ac:4d:da:fe:ec:0c:ec: 19:35:3b:a5:8a:53:c3:97:3f:6d:b7:0c:e2:36:c3:28:7d:f2: a3:72:33:26:43:5a:14:6d:5f:46:25:32:13:b6:ee:71:f9:ef: c6:46:e2:24:30:1e:b4:5b:f2:e3:3b:b2:59:9a:7c:6b:17:9e: 89:82:c5:ba:ef:a9:d7:d9:05:94:07:0a:02:d1:3b:53:9d:1e: 3c:28:15:7c:2d:20:15:11:3a:36:50:80:b1:88:ea:1d:b1:1f: 61:b8:14:25:36:65:b5:9b:3a:30:2d:93:a9:21:5b:e9:da:34: b3:12:dd:72:28:bf:b4:89:3d:d4:77:28:dc:8e:e9:26:7f:39: 43:74:28:22:58:65:72:a4:89:2e:ef:ce:04:1e:37:43:12:b9: 3b:7a:cd:69:7d:5f:74:01:1e:8d:6c:a9:e7:85:65:7e:74:91: cd:f7:69:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKkdTeZA/3ufgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk Nzg2ZTVmZTQtMDk4My00ZDlmLWI4YWMtNzc3ZGQ3NDcyN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH66wIYo3N0gjzbT/prVwEJJRLC7hzhOgSw8 kgGTCn3UC1wrG1d9II/FyKw2umUlXoNZ/n7FmhXbbrMTlgIicbVx3rip8yHd5UpM kO1KDR13FPc7iKhDetD4P8fB8wML2ZWp81X7K9+K/QQV0hWSWDJjy1Li4o2nxHPg j/gYVVCSdfRNiA25KKLztrmetpHUju0ZBZtE+lHwIh+IKYFCAJReA2uciXzhrt69 XS+LXbBufthe/hIElyMtnJm7lumrmv9QQdNiy+oKi2Hifnzbh2LRe8C3iRJO9eJR GhpveKTmF83el1MNYoPcYtRiW0Yyw/QnWQrKYsYwzzGZS3OfhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmoG9vfeFzakk90vNQJ/VHfu1enMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2MyNzFjMmYtNWZiNC0z MDdiLTg5NzItODIxZGYzZjE0MjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+0TAUfJsD8maY2d6i2muyXaIhOMV6HtxwEyRegKxOXmnomLidcs0sG yQBoS/UQ5B3qpGbpjCJgq8WOynWibmBy7+KgoNS51Om7UTfAG6jP3ey4rE3a/uwM 7Bk1O6WKU8OXP223DOI2wyh98qNyMyZDWhRtX0YlMhO27nH578ZG4iQwHrRb8uM7 slmafGsXnomCxbrvqdfZBZQHCgLRO1OdHjwoFXwtIBUROjZQgLGI6h2xH2G4FCU2 ZbWbOjAtk6khW+naNLMS3XIov7SJPdR3KNyO6SZ/OUN0KCJYZXKkiS7vzgQeN0MS uTt6zWl9X3QBHo1sqeeFZX50kc33aYM= -----END CERTIFICATE-----Generated at Sun Nov 1 00:28:02 2026 by rpki-client