$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa File: 505d9a2a-250a-36f1-9573-fa96a66ece4e.roa (raw, json) Hash identifier: Z3yPEVsy9U0mvD864ds31OVveIuLSPukrTG4hxGFqeg= Subject key identifier: FF:C5:14:5B:D4:C5:72:16:C5:2D:F1:F4:35:E1:F1:D3:16:81:96:B8 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E45890782B883528BF10C8F00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa Signing time: Tue 23 Jun 2026 22:35:23 +0000 ROA not before: Tue 23 Jun 2026 22:35:23 +0000 ROA not after: Mon 21 Sep 2026 22:35:23 +0000 asID: 21696 IP address blocks: 172.108.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:89:07:82:b8:83:52:8b:f1:0c:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:23 2026 GMT Not After : Sep 21 22:35:23 2026 GMT Subject: CN=36325379-d64b-4c1a-ad36-df3450db5b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c2:ff:43:75:7f:c1:78:94:ba:db:2d:29:f8: 47:72:60:b9:ba:37:bc:be:3d:8a:c7:22:e6:68:d9: d8:90:d0:99:84:fd:7e:06:5b:9d:f2:ba:00:bc:02: da:73:fe:e7:04:60:1d:ee:f5:eb:fd:a2:e1:4c:e9: 8a:59:25:29:a5:25:28:79:80:86:b0:c9:27:08:58: 4b:45:41:7a:ad:1d:1f:0f:f0:84:fd:db:92:99:45: e4:fa:a8:6d:a9:61:8e:f6:7d:5e:bd:6b:57:47:7f: 3e:6e:3b:4e:7c:c9:d6:af:01:88:c6:68:9e:41:c2: 54:84:45:a5:82:ba:0e:77:44:14:e6:1c:cd:da:19: 13:d6:29:c9:49:28:c2:f2:1a:46:17:d6:86:14:e1: b9:73:1e:ea:40:a1:e4:d0:53:7d:fe:6e:e0:35:f9: 32:50:2e:48:52:09:c3:86:ce:75:cc:45:65:d8:03: f4:e1:c0:19:f1:aa:e1:22:16:f8:d7:d8:32:0b:76: 25:4c:c3:6a:fe:94:a5:62:97:10:32:c2:12:b1:7a: 0f:af:c9:6d:64:c8:bf:15:7f:77:63:90:85:41:a8: 9d:d4:ac:98:5d:b2:c6:aa:bc:88:d6:41:d7:5c:0a: 2b:c8:c5:aa:df:c0:8d:4b:d9:2d:fe:39:58:73:83: 83:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C5:14:5B:D4:C5:72:16:C5:2D:F1:F4:35:E1:F1:D3:16:81:96:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/505d9a2a-250a-36f1-9573-fa96a66ece4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:6b:67:35:13:25:7a:63:9e:4b:b7:c8:3d:e1:fd:59:0c:88: 17:2f:4b:70:12:03:5b:98:86:a9:24:38:e1:07:47:6b:9f:3b: 72:5d:59:62:ea:85:79:0b:da:e9:03:40:14:fd:33:42:70:e8: 60:64:29:ae:2e:dd:84:ba:f6:70:ef:88:46:c2:3f:d6:4c:8c: a6:07:ad:34:13:32:a5:ac:5b:d3:6a:05:90:09:05:10:45:61: 2c:d3:1f:ea:61:a4:06:7f:75:71:cd:08:55:69:57:2a:34:b8: f0:8a:12:81:0e:f1:9c:4f:82:37:1f:5f:ea:47:cc:32:ae:9b: f8:90:29:fd:28:cd:a4:39:82:7e:5b:7d:32:76:a6:82:c9:8c: 79:8f:ea:92:6f:dc:5d:e0:b1:59:b9:01:c6:88:18:cb:c9:65: 0b:26:70:38:7a:1e:ad:ff:2b:eb:cc:b2:e4:51:56:e8:f5:d1: 6c:d7:92:31:46:c2:4d:96:5d:c1:85:1f:1d:91:b9:d4:09:d7: 3b:20:49:89:d2:b5:54:7e:ae:10:dd:b6:9b:22:45:b8:5f:ba: 55:63:d6:48:13:3c:f1:32:d5:2d:14:a2:ca:3f:6f:97:d5:66: 07:69:c6:93:b3:22:76:4a:22:82:07:e4:74:33:49:e8:76:ca: b4:0b:dd:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiQeCuINSi/EMjwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUyM1oXDTI2MDkyMTIyMzUyM1owLzEtMCsGA1UEAxMk MzYzMjUzNzktZDY0Yi00YzFhLWFkMzYtZGYzNDUwZGI1YjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzML/Q3V/wXiUutstKfhHcmC5uje8vj2KxyLm aNnYkNCZhP1+Blud8roAvALac/7nBGAd7vXr/aLhTOmKWSUppSUoeYCGsMknCFhL RUF6rR0fD/CE/duSmUXk+qhtqWGO9n1evWtXR38+bjtOfMnWrwGIxmieQcJUhEWl groOd0QU5hzN2hkT1inJSSjC8hpGF9aGFOG5cx7qQKHk0FN9/m7gNfkyUC5IUgnD hs51zEVl2AP04cAZ8arhIhb419gyC3YlTMNq/pSlYpcQMsISsXoPr8ltZMi/FX93 Y5CFQaid1KyYXbLGqryI1kHXXAoryMWq38CNS9kt/jlYc4OD3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/FFFvUxXIWxS3x9DXh8dMWgZa4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNTA1ZDlhMmEtMjUwYS0z NmYxLTk1NzMtZmE5NmE2NmVjZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGyLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhrZzUTJXpjnku3yD3h/VkMiBcvS3ASA1uYhqkkOOEHR2ufO3JdWWLq hXkL2ukDQBT9M0Jw6GBkKa4u3YS69nDviEbCP9ZMjKYHrTQTMqWsW9NqBZAJBRBF YSzTH+phpAZ/dXHNCFVpVyo0uPCKEoEO8ZxPgjcfX+pHzDKum/iQKf0ozaQ5gn5b fTJ2poLJjHmP6pJv3F3gsVm5AcaIGMvJZQsmcDh6Hq3/K+vMsuRRVuj10WzXkjFG wk2WXcGFHx2RudQJ1zsgSYnStVR+rhDdtpsiRbhfulVj1kgTPPEy1S0Uoso/b5fV ZgdpxpOzInZKIoIH5HQzSeh2yrQL3bs= -----END CERTIFICATE-----Generated at Mon Jul 13 10:33:09 2026 by rpki-client