$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa File: 3ece903d-52be-317b-af18-f2a1344c3da8.roa (raw, json) Hash identifier: xe6uKta1ulT5U8nOksAtOW0zwBc1BWpvtCBAzZ95egM= Subject key identifier: 61:4B:A2:D3:F4:9C:26:E5:E1:05:C0:8D:E9:A0:63:9F:49:A2:A9:6E Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF7176BA31F51EC37273EF588 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.22.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:6b:a3:1f:51:ec:37:27:3e:f5:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=a1c4e955-ab8c-4d58-a172-714c2ba840c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a6:af:51:02:0f:ac:47:ac:b0:07:9c:8d:41: b7:95:f5:81:82:b3:26:28:68:a5:42:68:2e:95:54: b2:9d:84:da:f4:1e:36:4f:bc:d6:da:44:5c:eb:0c: 8e:da:c3:8d:41:84:4a:69:69:17:24:b8:8a:95:d5: 9f:85:71:ca:6f:05:cd:8d:9d:d1:f0:b2:4a:b7:9b: 84:0e:c9:c6:1a:fa:3c:42:f5:78:af:4f:5a:29:79: a1:1b:17:ff:8b:85:d1:af:91:f1:62:e2:3d:72:c0: 8a:34:53:8b:93:89:64:82:10:9d:c0:08:11:ef:e4: 8d:e7:f4:5b:aa:c2:0e:52:17:6b:cd:cd:39:d5:95: 0a:4d:26:de:0a:1f:50:0b:8a:f2:81:9a:d1:b7:23: 84:55:4b:6d:63:5b:f1:c2:00:ce:2c:66:27:ca:03: 0d:71:ec:5b:91:78:bf:d4:3b:5a:8e:d0:05:40:98: 04:69:e7:8b:9a:08:1e:60:48:ae:b2:fa:71:fe:ca: 23:d6:60:7e:c2:57:fe:1a:21:ca:f6:ae:6d:16:e7: f5:a7:32:89:3e:df:81:78:d2:50:f2:2e:86:f3:9a: 5e:1e:4a:e2:6a:44:8e:7c:a3:23:c0:a0:f0:5e:6c: ae:63:b2:a8:ca:31:b5:b9:06:34:5d:23:ab:bb:dd: f2:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:4B:A2:D3:F4:9C:26:E5:E1:05:C0:8D:E9:A0:63:9F:49:A2:A9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/3ece903d-52be-317b-af18-f2a1344c3da8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:8c:53:53:a2:53:c9:9c:d8:44:9d:35:84:44:07:58:a8:5a: 7b:c8:2e:3b:98:86:9b:e6:49:eb:40:de:f2:45:21:2a:32:aa: c3:35:b2:e5:23:9e:22:d4:e0:8b:6c:56:28:e8:e3:c2:e5:d5: 2b:e1:bb:d1:56:82:9a:6e:11:19:28:26:56:92:d5:30:a6:b1: 24:6c:c1:0b:51:a7:f5:8f:2f:4b:81:b4:e5:77:fe:6e:5a:56: f1:8f:e8:30:61:dd:64:31:ad:ac:6a:cf:17:02:b3:d6:8c:7f: 82:68:2b:0c:dd:f9:ac:f9:e7:79:fc:f7:6f:bd:a5:24:65:83: 61:f8:d6:55:27:ea:41:7e:11:3d:a5:7f:45:13:bb:dd:0d:37: bf:98:d2:1f:77:6a:f3:30:da:d3:a5:a3:9a:04:07:81:4f:c5: 7e:a5:0f:e2:b4:7c:1b:71:93:d9:f9:75:cb:fc:35:0b:fd:76: bc:89:bb:c9:67:6b:c5:8b:61:92:6c:34:cd:cb:ec:d0:f8:80: af:10:f5:74:cf:83:2a:81:82:05:66:53:83:4a:81:29:bb:3e: e4:ff:c2:11:a5:de:a6:57:5b:3e:82:c7:89:e6:35:c7:3c:94: eb:a1:f9:27:b0:8f:7e:1b:a6:cc:94:3f:92:2e:a5:0e:75:08: 74:86:4f:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2ujH1HsNyc+9YgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk YTFjNGU5NTUtYWI4Yy00ZDU4LWExNzItNzE0YzJiYTg0MGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqavUQIPrEessAecjUG3lfWBgrMmKGilQmgu lVSynYTa9B42T7zW2kRc6wyO2sONQYRKaWkXJLiKldWfhXHKbwXNjZ3R8LJKt5uE DsnGGvo8QvV4r09aKXmhGxf/i4XRr5HxYuI9csCKNFOLk4lkghCdwAgR7+SN5/Rb qsIOUhdrzc051ZUKTSbeCh9QC4rygZrRtyOEVUttY1vxwgDOLGYnygMNcexbkXi/ 1DtajtAFQJgEaeeLmggeYEiusvpx/soj1mB+wlf+GiHK9q5tFuf1pzKJPt+BeNJQ 8i6G85peHkriakSOfKMjwKDwXmyuY7KoyjG1uQY0XSOru93yLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGFLotP0nCbl4QXAjemgY59JoqluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvM2VjZTkwM2QtNTJiZS0z MTdiLWFmMTgtZjJhMTM0NGMzZGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+MU1OiU8mc2ESdNYREB1ioWnvILjuYhpvmSetA3vJFISoyqsM1suUj niLU4ItsVijo48Ll1Svhu9FWgppuERkoJlaS1TCmsSRswQtRp/WPL0uBtOV3/m5a VvGP6DBh3WQxraxqzxcCs9aMf4JoKwzd+az553n892+9pSRlg2H41lUn6kF+ET2l f0UTu90NN7+Y0h93avMw2tOlo5oEB4FPxX6lD+K0fBtxk9n5dcv8NQv9dryJu8ln a8WLYZJsNM3L7ND4gK8Q9XTPgyqBggVmU4NKgSm7PuT/whGl3qZXWz6Cx4nmNcc8 lOuh+Sewj34bpsyUP5IupQ51CHSGT2Y= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:48 2026 by rpki-client