$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4314088e-0e2b-3a51-a2fa-95ab499c7e75.roa File: 4314088e-0e2b-3a51-a2fa-95ab499c7e75.roa (raw, json) Hash identifier: 5RXLmXa6c6RsugXSDBZhQovKb5VGwQAtVVAeXE5otGg= Subject key identifier: E1:9D:90:25:46:A6:81:77:1D:BD:DA:0D:C6:C8:24:79:A3:5C:C7:38 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD2A9D5E5CD4258B7B180 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4314088e-0e2b-3a51-a2fa-95ab499c7e75.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.108.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d2:a9:d5:e5:cd:42:58:b7:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=8169c47e-750b-4dc3-b158-466f21d043df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ca:b0:dc:db:b4:6f:d7:aa:32:e7:63:2c:e8: 1f:76:d9:8e:f4:10:43:7f:b7:f2:65:b7:f1:a0:f7: d3:9e:37:6b:17:f9:63:27:37:d0:d0:67:a9:87:8e: b6:91:5f:bf:60:65:4b:84:36:b6:aa:1a:11:b8:c8: 21:cc:2a:b9:ce:bc:5b:3d:4f:5e:69:68:96:1b:6e: aa:b5:67:43:8b:8e:38:ac:09:f6:41:32:59:8c:0e: ad:d9:72:50:89:4c:35:a6:d6:94:c3:0f:e3:91:45: 4e:0b:f5:dc:99:b0:e8:1d:34:e2:3e:24:52:98:3a: de:c3:b5:6b:92:04:b1:d5:71:7c:da:8f:60:7e:18: 79:a0:f6:d9:3e:bd:2e:6d:3d:42:8f:5e:b7:b9:db: b1:79:94:a1:f1:07:7c:db:2d:cf:9b:b2:e7:0d:be: 0d:a4:f0:d1:8c:0d:09:6a:e5:87:60:4a:8c:ac:f3: fe:db:53:43:54:05:bc:e8:67:44:76:e8:3a:ef:bc: ba:7f:9b:64:2d:91:92:f8:d4:35:65:c9:65:6e:7f: b6:d6:bc:4e:61:0f:60:f9:a0:1d:87:68:e8:bb:9d: 02:6c:02:7b:f2:bb:d4:8f:3f:3b:0b:68:a9:4e:1c: 93:0c:ff:48:ae:b2:c0:88:b7:f4:a0:5f:11:c7:a8: 1c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9D:90:25:46:A6:81:77:1D:BD:DA:0D:C6:C8:24:79:A3:5C:C7:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4314088e-0e2b-3a51-a2fa-95ab499c7e75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:83:29:77:06:1d:75:97:ec:50:ad:8f:af:af:d6:cc:63:6f: da:fb:ea:f9:f9:e8:41:db:4f:dc:7b:e6:46:5d:79:80:3b:ee: 79:32:37:74:37:b5:de:51:b1:01:78:3a:4a:58:40:66:0f:94: 98:96:6f:03:0b:02:88:d4:de:ea:60:37:ff:31:48:8a:86:54: 67:90:53:b3:25:fa:a0:88:af:11:d4:37:da:01:18:d4:78:0f: 06:aa:ee:4a:eb:9d:85:7e:ea:04:3d:7c:00:d5:d2:72:30:95: 70:8c:e8:70:22:cf:a0:0d:28:8a:89:b3:c6:c7:2e:b8:87:44: ac:d9:9b:69:94:14:51:24:46:2e:fa:ec:e4:db:82:62:53:f7: 08:01:f0:d5:fd:72:db:c3:76:55:80:d2:ac:89:08:49:9b:be: 06:c0:c7:e4:71:c5:e3:bc:16:7a:63:ce:f1:99:26:1a:0c:13: f9:a9:d9:2c:5e:54:02:4c:b4:6e:d6:cd:22:c2:00:7a:66:b9: b0:9b:f5:7b:c0:2f:60:42:ff:19:1c:7d:41:36:17:0a:8a:96: a7:11:73:2e:f8:c4:3f:00:bd:2e:3b:48:d6:af:b7:90:7c:24: 40:55:0b:e7:a3:c0:2e:5b:9d:26:bd:06:3c:6e:41:13:e4:88: 94:cc:d4:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNKp1eXNQli3sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk ODE2OWM0N2UtNzUwYi00ZGMzLWIxNTgtNDY2ZjIxZDA0M2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMqw3Nu0b9eqMudjLOgfdtmO9BBDf7fyZbfx oPfTnjdrF/ljJzfQ0Geph462kV+/YGVLhDa2qhoRuMghzCq5zrxbPU9eaWiWG26q tWdDi444rAn2QTJZjA6t2XJQiUw1ptaUww/jkUVOC/XcmbDoHTTiPiRSmDrew7Vr kgSx1XF82o9gfhh5oPbZPr0ubT1Cj163uduxeZSh8Qd82y3Pm7LnDb4NpPDRjA0J auWHYEqMrPP+21NDVAW86GdEdug677y6f5tkLZGS+NQ1Zcllbn+21rxOYQ9g+aAd h2jou50CbAJ78rvUjz87C2ipThyTDP9IrrLAiLf0oF8Rx6gc2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGdkCVGpoF3Hb3aDcbIJHmjXMc4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDMxNDA4OGUtMGUyYi0z YTUxLWEyZmEtOTVhYjQ5OWM3ZTc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJiDKXcGHXWX7FCtj6+v1sxjb9r76vn56EHbT9x75kZdeYA77nkyN3Q3 td5RsQF4OkpYQGYPlJiWbwMLAojU3upgN/8xSIqGVGeQU7Ml+qCIrxHUN9oBGNR4 Dwaq7krrnYV+6gQ9fADV0nIwlXCM6HAiz6ANKIqJs8bHLriHRKzZm2mUFFEkRi76 7OTbgmJT9wgB8NX9ctvDdlWA0qyJCEmbvgbAx+RxxeO8FnpjzvGZJhoME/mp2Sxe VAJMtG7WzSLCAHpmubCb9XvAL2BC/xkcfUE2FwqKlqcRcy74xD8AvS47SNavt5B8 JEBVC+ejwC5bnSa9BjxuQRPkiJTM1Gk= -----END CERTIFICATE-----Generated at Thu Aug 27 22:49:33 2026 by rpki-client