$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: 9r4mfnDdpvYftrcbAKMVFsJFCtUjnwm1HorycHGXZGM= Subject key identifier: EB:BB:AB:D0:A4:39:4F:9D:83:C6:8C:EC:5A:2B:11:58:CB:F3:F7:D4 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6870A378CFE3E6281E1840 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:70:a3:78:cf:e3:e6:28:1e:18:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=fc2fd2bf-e461-4ab4-9020-e428b24bdbda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:31:9d:f1:cb:e3:af:d4:d8:fb:22:81:e7:1f: 6c:77:fe:d9:df:91:8a:c9:65:dd:25:6e:4e:96:e9: 27:34:ab:b6:9d:4d:3f:b8:59:18:fc:d2:52:c9:61: 50:f1:25:87:04:23:da:3f:a9:60:ae:cd:6e:1e:6d: b8:b4:d2:0d:0e:2d:ea:18:45:44:e7:37:e8:40:3d: e8:75:c3:cf:17:4e:49:9e:2d:ef:ae:93:56:4f:3e: 20:95:dc:5f:e8:74:52:e8:96:4a:2c:56:ba:ac:e6: 40:68:db:1e:53:98:55:70:87:89:d2:56:0e:93:ba: 92:dd:85:d4:64:70:f2:9f:f7:da:33:72:b2:db:d5: d9:5c:79:72:32:86:3a:b1:90:72:90:49:39:b6:85: b6:c3:83:c3:c5:a7:de:e6:3e:59:25:09:4b:99:22: 07:46:ef:9e:5b:ea:20:5d:ab:0e:64:a7:5f:2e:11: 16:66:8c:39:b7:cf:1a:e9:37:8f:bc:ae:b6:72:5c: 17:20:b8:07:75:ea:dd:05:62:a9:53:ea:50:11:60: 56:87:9e:17:62:b5:0d:7e:81:f5:b6:24:d5:f2:14: de:d8:39:d0:66:c7:77:5e:c5:cd:c6:3f:13:4c:d6: 69:d3:70:4e:d0:22:da:1e:82:45:76:22:c2:56:24: dc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BB:AB:D0:A4:39:4F:9D:83:C6:8C:EC:5A:2B:11:58:CB:F3:F7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f0:55:cd:94:e6:16:f0:e6:75:e2:6d:d3:1c:7f:5a:f5:bd: b3:aa:71:8b:f5:b8:50:04:cb:01:31:ce:fb:4e:ef:91:50:84: 49:03:0f:71:96:e4:39:3a:b7:65:72:b9:56:ec:cf:05:a6:0b: 4d:ff:64:38:3f:04:01:68:23:c0:ae:19:0b:a5:85:28:a0:78: 11:ba:a0:68:c3:e6:40:82:8d:33:f5:db:2e:97:63:ab:93:2a: 5d:57:94:46:0c:68:e4:b0:af:56:82:5e:3b:4e:75:e7:b1:ac: 21:fd:29:79:7b:f4:0c:82:03:9a:37:98:44:1f:4a:ca:93:0e: 99:64:09:16:30:d5:ce:5b:82:dc:a7:f7:73:7d:90:48:e8:4d: 31:b7:a9:ef:cc:0b:1e:84:88:1e:89:21:5d:93:2a:a6:7b:a9: 20:da:4b:1f:3d:ff:dd:da:b8:8d:66:80:72:24:c1:ba:5c:f4: 3b:3f:32:28:71:2d:d7:c3:bc:fa:ec:38:f7:50:a2:5e:c5:ff: 0d:62:07:4f:f5:69:11:2e:8b:53:7a:bb:21:ab:4b:0e:c0:4e: ab:7e:b2:fe:a0:75:34:b3:9c:14:12:5c:03:70:16:cd:fe:43: b2:bc:8f:4d:aa:d6:fb:7a:30:7c:a9:a3:89:c9:c9:42:58:94: 31:df:eb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaHCjeM/j5igeGEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZmMyZmQyYmYtZTQ2MS00YWI0LTkwMjAtZTQyOGIyNGJkYmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTGd8cvjr9TY+yKB5x9sd/7Z35GKyWXdJW5O luknNKu2nU0/uFkY/NJSyWFQ8SWHBCPaP6lgrs1uHm24tNINDi3qGEVE5zfoQD3o dcPPF05Jni3vrpNWTz4gldxf6HRS6JZKLFa6rOZAaNseU5hVcIeJ0lYOk7qS3YXU ZHDyn/faM3Ky29XZXHlyMoY6sZBykEk5toW2w4PDxafe5j5ZJQlLmSIHRu+eW+og XasOZKdfLhEWZow5t88a6TePvK62clwXILgHderdBWKpU+pQEWBWh54XYrUNfoH1 tiTV8hTe2DnQZsd3XsXNxj8TTNZp03BO0CLaHoJFdiLCViTcrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOu7q9CkOU+dg8aM7ForEVjL8/fUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLwVc2U5hbw5nXibdMcf1r1vbOqcYv1uFAEywExzvtO75FQhEkDD3GW 5Dk6t2VyuVbszwWmC03/ZDg/BAFoI8CuGQulhSigeBG6oGjD5kCCjTP12y6XY6uT Kl1XlEYMaOSwr1aCXjtOdeexrCH9KXl79AyCA5o3mEQfSsqTDplkCRYw1c5bgtyn 93N9kEjoTTG3qe/MCx6EiB6JIV2TKqZ7qSDaSx89/93auI1mgHIkwbpc9Ds/Mihx LdfDvPrsOPdQol7F/w1iB0/1aREui1N6uyGrSw7ATqt+sv6gdTSznBQSXANwFs3+ Q7K8j02q1vt6MHypo4nJyUJYlDHf6yQ= -----END CERTIFICATE-----Generated at Sun Nov 1 05:55:53 2026 by rpki-client