$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa File: 505d9a2a-250a-36f1-9573-fa96a66ece4e.roa (raw, json) Hash identifier: FGWKnij73TN9JSt6GD7nzCdDLqh3X2J5izQn75equYk= Subject key identifier: EA:62:41:87:E1:B7:8C:DF:AE:B9:9B:70:DE:B1:99:54:9B:97:2E:DF Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD3A3BB9D5C928CC16D40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 21696 IP address blocks: 172.108.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:a3:bb:9d:5c:92:8c:c1:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=c86b3f4f-444f-4d87-95c2-0c4f6a90dc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:97:ca:0b:05:db:ed:cb:dd:7a:bb:be:f6: c3:1b:63:46:3b:ad:3b:11:66:52:d4:8d:d2:ce:49: 49:f8:65:4a:54:7e:9a:c3:0d:07:4c:2a:8a:ac:35: 10:d7:64:6e:cf:2c:99:18:54:ac:cc:13:54:cd:c7: 78:35:08:7c:94:be:26:1c:4c:1f:43:ff:92:90:3b: 6d:6a:66:c0:58:0e:8c:fe:50:b2:d8:cd:f3:32:0d: 7d:35:27:77:c6:32:4b:46:4f:c5:52:72:c6:da:89: 0c:4b:36:74:99:f9:93:0e:16:52:2f:2c:a3:c4:35: bd:3f:19:be:ac:b6:a0:af:ec:d7:8f:3d:18:62:f1: d6:ae:48:20:0b:64:89:61:c0:1e:80:4f:94:3a:a0: 36:7d:72:24:5b:9f:29:0a:f6:ab:a6:4a:32:10:b8: 7a:57:c1:1b:1b:fd:90:cb:53:ea:71:4d:f8:b2:60: d1:55:02:2c:26:ca:d6:b0:00:a8:45:9a:bf:b5:b1: d9:70:a5:22:5d:47:f7:50:2e:cb:52:a0:50:b1:a4: 01:6a:51:44:3d:8c:d4:1c:52:86:b4:2b:7b:42:18: 1b:43:e6:54:4c:37:88:7b:47:81:58:b3:63:83:ba: e6:1f:28:74:94:ea:1a:c5:4c:b1:3c:d1:9f:82:b5: a3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:62:41:87:E1:B7:8C:DF:AE:B9:9B:70:DE:B1:99:54:9B:97:2E:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:b9:e8:4b:aa:ee:34:05:c1:f8:d0:cd:5f:22:fb:a5:74:fc: 95:b0:0c:51:b2:6e:7d:86:ec:e9:8e:1f:7b:fd:40:c5:dd:7f: 21:8c:77:22:3e:12:e5:dd:0e:2c:05:23:f9:d6:99:02:c6:a7: a5:12:7c:ac:24:08:dc:92:b4:23:c2:38:d4:84:aa:95:f4:a9: 40:6f:a5:39:c4:a2:52:96:11:36:65:68:29:f1:ab:37:1f:c0: 18:e0:f4:40:02:8d:10:13:ea:a2:ab:05:33:01:4f:f6:3e:6e: 7f:00:1b:b4:06:29:95:8f:dc:b3:b6:fd:2a:1c:98:8f:e0:41: d5:5a:2f:6d:c6:5b:15:10:cb:b4:ff:4e:06:a4:1c:a5:70:1f: 47:a9:4e:03:d1:38:f0:b0:06:9a:57:ee:96:74:40:4e:26:41: fc:97:c9:ce:92:9a:38:f1:58:c5:97:ef:74:ef:70:4f:46:5d: 84:22:b7:a1:b3:83:a3:c7:a4:5d:97:a0:2f:a3:48:99:4b:91: d9:76:5b:bf:76:8d:04:66:b0:0c:6d:bf:f4:e9:2f:40:59:0f: 33:b9:85:89:02:a1:60:92:7c:93:19:36:f0:ea:1b:8c:a1:9e: 05:d5:74:21:61:16:e4:9f:cc:9d:e2:47:ac:d5:0b:a3:f9:f6: b0:72:ea:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNOju51ckozBbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk Yzg2YjNmNGYtNDQ0Zi00ZDg3LTk1YzItMGM0ZjZhOTBkYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9eXygsF2+3L3Xq7vvbDG2NGO607EWZS1I3S zklJ+GVKVH6aww0HTCqKrDUQ12RuzyyZGFSszBNUzcd4NQh8lL4mHEwfQ/+SkDtt ambAWA6M/lCy2M3zMg19NSd3xjJLRk/FUnLG2okMSzZ0mfmTDhZSLyyjxDW9Pxm+ rLagr+zXjz0YYvHWrkggC2SJYcAegE+UOqA2fXIkW58pCvarpkoyELh6V8EbG/2Q y1PqcU34smDRVQIsJsrWsACoRZq/tbHZcKUiXUf3UC7LUqBQsaQBalFEPYzUHFKG tCt7QhgbQ+ZUTDeIe0eBWLNjg7rmHyh0lOoaxUyxPNGfgrWjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOpiQYfht4zfrrmbcN6xmVSbly7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTA1ZDlhMmEtMjUwYS0z NmYxLTk1NzMtZmE5NmE2NmVjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACq56Euq7jQFwfjQzV8i+6V0/JWwDFGybn2G7OmOH3v9QMXdfyGMdyI+ EuXdDiwFI/nWmQLGp6USfKwkCNyStCPCONSEqpX0qUBvpTnEolKWETZlaCnxqzcf wBjg9EACjRAT6qKrBTMBT/Y+bn8AG7QGKZWP3LO2/SocmI/gQdVaL23GWxUQy7T/ TgakHKVwH0epTgPROPCwBppX7pZ0QE4mQfyXyc6SmjjxWMWX73TvcE9GXYQit6Gz g6PHpF2XoC+jSJlLkdl2W792jQRmsAxtv/TpL0BZDzO5hYkCoWCSfJMZNvDqG4yh ngXVdCFhFuSfzJ3iR6zVC6P59rBy6ik= -----END CERTIFICATE-----Generated at Thu Aug 27 21:42:50 2026 by rpki-client