$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa File: 4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa (raw, json) Hash identifier: slM4OdpqWSRK+nQNZVVGbFgEQ1YhuFnyYxCME5oIK00= Subject key identifier: 54:EB:36:F0:ED:96:CA:FC:18:FB:7F:DD:83:B9:9E:AB:56:15:C7:6B Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A3CE63D6CEC339B39F80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.39.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a3:ce:63:d6:ce:c3:39:b3:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=33ea5840-e7ad-4028-9514-2ea543644171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:9a:a1:0e:4b:28:5f:5a:33:70:50:01:a1: 43:57:63:d1:fc:c3:a9:d9:59:8b:bc:c8:3e:9d:07: 90:59:02:c1:a1:8e:2e:0b:fd:b2:a1:84:d0:55:04: 35:90:02:de:ca:f1:e4:c5:5e:27:e9:72:a0:16:60: f2:9b:8c:08:76:96:83:56:53:4c:e9:bc:b6:65:4d: d2:91:3f:ee:1d:39:b0:6d:b2:cd:e0:5c:f2:6b:3e: 7c:17:89:37:5c:b6:e0:67:78:92:c2:83:3a:9f:91: b5:44:b0:f3:46:41:b7:b5:f9:20:bd:da:4c:24:aa: 17:c3:55:4e:75:d1:dd:db:e8:9b:00:bb:e8:64:b2: 96:67:0f:a0:f4:18:55:54:54:f9:06:56:dd:fa:68: 75:78:bf:cc:33:97:a2:b3:65:f0:a0:b9:7f:17:53: d2:b9:1a:a6:00:01:f1:1f:99:ba:56:3b:80:d3:db: 57:85:e1:d1:fc:29:ce:aa:f5:48:f2:24:a7:98:26: 72:0f:d5:3d:9e:11:fc:f2:6d:65:bb:31:cc:b1:8d: 61:9f:b6:52:49:01:52:71:f1:78:98:a4:97:9a:04: 55:68:ab:52:ca:8f:70:7d:67:a1:50:2e:4a:c6:5f: fc:eb:88:f6:ae:49:79:e3:8c:77:0e:28:ec:7b:63: a3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:EB:36:F0:ED:96:CA:FC:18:FB:7F:DD:83:B9:9E:AB:56:15:C7:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4f81c6b2-b1dc-36a2-9e84-be75a962123c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.39.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f9:df:f8:2f:65:c2:8c:d6:4f:42:31:22:91:33:4e:31:f7: 0a:e8:c4:dc:07:5c:69:7a:86:5b:15:48:09:dd:67:7d:d7:43: 8e:eb:c4:54:6c:50:9f:69:ed:f7:1c:27:b2:3b:8b:ed:de:d2: 4a:74:12:e7:12:ff:ff:32:87:00:57:1d:b6:f2:cc:f3:08:ce: ae:c1:b3:7d:72:bf:59:a3:7a:5f:f7:b7:03:6f:8a:a7:72:d8: ce:2c:c7:55:05:07:37:ac:28:5f:1f:dd:b6:8a:60:11:7f:b9: 79:8c:47:ce:ab:f4:ab:55:37:a4:85:ee:1a:90:6e:57:d8:7c: d7:a2:bb:83:5f:0c:d5:c6:b2:e9:fb:cc:f3:16:04:f0:3f:bb: b4:0c:fb:a7:d2:97:7e:06:22:03:4e:48:29:3d:2c:a4:7b:54: c7:7f:d5:2b:81:87:27:b3:e7:97:78:91:fc:30:ba:ab:85:db: 1a:f1:60:ab:e1:f7:46:be:d3:83:b2:b0:8a:44:e2:0d:53:73: 54:9a:1b:90:dc:ed:3e:d3:b8:d7:6c:ae:94:bf:d1:9d:bd:f0: e8:d8:96:e5:d1:b6:50:38:0e:2b:b2:1f:2b:1a:de:65:d4:77: 19:5d:f7:cd:87:46:8c:bf:20:e8:ad:7e:f5:2d:f8:23:d1:68: 9b:8c:cd:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6POY9bOwzmzn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MzNlYTU4NDAtZTdhZC00MDI4LTk1MTQtMmVhNTQzNjQ0MTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2yaoQ5LKF9aM3BQAaFDV2PR/MOp2VmLvMg+ nQeQWQLBoY4uC/2yoYTQVQQ1kALeyvHkxV4n6XKgFmDym4wIdpaDVlNM6by2ZU3S kT/uHTmwbbLN4Fzyaz58F4k3XLbgZ3iSwoM6n5G1RLDzRkG3tfkgvdpMJKoXw1VO ddHd2+ibALvoZLKWZw+g9BhVVFT5Blbd+mh1eL/MM5eis2XwoLl/F1PSuRqmAAHx H5m6VjuA09tXheHR/CnOqvVI8iSnmCZyD9U9nhH88m1luzHMsY1hn7ZSSQFScfF4 mKSXmgRVaKtSyo9wfWehUC5Kxl/864j2rkl544x3Dijse2OjmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFTrNvDtlsr8GPt/3YO5nqtWFcdrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNGY4MWM2YjItYjFkYy0z NmEyLTllODQtYmU3NWE5NjIxMjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCeAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/53/gvZcKM1k9CMSKRM04x9wroxNwHXGl6hlsVSAndZ33XQ47rxFRs UJ9p7fccJ7I7i+3e0kp0EucS//8yhwBXHbbyzPMIzq7Bs31yv1mjel/3twNviqdy 2M4sx1UFBzesKF8f3baKYBF/uXmMR86r9KtVN6SF7hqQblfYfNeiu4NfDNXGsun7 zPMWBPA/u7QM+6fSl34GIgNOSCk9LKR7VMd/1SuBhyez55d4kfwwuquF2xrxYKvh 90a+04OysIpE4g1Tc1SaG5Dc7T7TuNdsrpS/0Z298OjYluXRtlA4DiuyHysa3mXU dxld982HRoy/IOitfvUt+CPRaJuMzY4= -----END CERTIFICATE-----Generated at Sun Sep 13 15:02:18 2026 by rpki-client