$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa File: 5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa (raw, json) Hash identifier: INhDaYrjdi+CIzB/mjggyDrBkINPgtJVvOcpC6uffxY= Subject key identifier: DA:9D:B7:96:16:24:A8:6B:06:E7:06:22:07:18:6E:13:77:D0:65:90 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6889745F78D036255D4D80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.32.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:89:74:5f:78:d0:36:25:5d:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=65b82d3a-e24a-4e84-958b-79f0202ebc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ba:fb:a5:6c:24:71:9a:c7:6f:4e:83:01:0b: e8:71:e6:80:ab:a2:cd:29:c4:bb:ba:65:00:9c:18: 66:03:51:6d:aa:70:b1:9c:46:2a:d8:ec:6a:8f:df: 0c:a9:e0:f9:1b:3f:1c:93:05:3d:b2:36:fc:ff:4d: 53:59:aa:33:22:6f:4f:5e:3e:59:76:c3:44:4a:6d: ec:49:8c:95:1d:72:6b:9b:50:96:c4:20:8f:11:52: 5b:9a:a4:9e:ac:35:8b:1f:07:26:5f:fd:6c:b4:56: 0d:b8:08:5c:16:70:ef:da:8a:9f:b3:41:d2:71:04: a8:34:c7:be:3d:1f:98:94:7b:6c:7b:56:75:12:0a: 49:65:27:67:ad:8a:55:fa:67:20:ef:cd:2a:58:c3: 4d:09:4b:aa:bc:5e:bb:10:2a:28:eb:1a:cb:3f:2d: a8:a0:3a:e2:26:f8:08:a5:59:3f:66:f4:95:89:69: 37:47:f1:c6:fb:25:8d:6c:ff:c1:83:2a:08:95:2c: 94:f3:28:0e:84:28:34:9c:a0:24:8f:34:7a:41:3f: b0:0c:11:5e:c5:50:0e:fb:94:9f:7e:38:1f:d8:27: 79:6a:3c:bc:62:b0:7e:1a:cf:ee:55:9d:1f:62:bf: b1:34:99:88:5f:99:2c:ef:03:7e:7c:6c:e9:42:14: 14:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:9D:B7:96:16:24:A8:6B:06:E7:06:22:07:18:6E:13:77:D0:65:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5bddad3d-6e44-35ca-b0a9-f1b3ffeda585.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.32.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:15:42:41:f7:e7:d4:27:f1:24:eb:c3:cd:80:d8:ed:84:88: 76:43:fb:98:60:8f:be:ab:96:96:a4:d7:25:e3:67:c2:ea:b8: 0a:85:a1:8f:b7:f6:48:6b:74:64:c9:22:1c:87:77:5d:c5:85: 41:e9:9f:da:20:49:98:78:30:0f:e2:de:3f:14:43:0a:58:31: f1:0f:b8:43:5a:db:d0:97:97:b9:45:8f:99:bd:4a:00:d5:86: 6f:b4:f1:80:44:17:c9:ab:79:a2:cd:a9:9f:a0:9c:2a:cd:50: ba:a9:6c:52:41:1c:99:94:33:39:cd:e7:16:38:90:64:16:84: a4:c1:35:e1:73:8b:00:9c:97:9c:9a:81:23:e3:a5:12:01:93: a0:62:82:69:30:1c:af:74:09:ff:9d:bd:2e:9d:91:6a:bb:55: 6a:04:ab:cd:d2:89:2b:bd:b2:17:12:9c:55:40:4b:70:d7:a2: 9f:c8:62:fb:9d:55:00:8a:cd:14:41:3e:50:b0:60:ef:19:00: 54:90:33:5d:5f:ec:95:db:c7:de:77:b3:dc:f3:f7:7d:30:e1: ee:21:72:b1:a9:1e:07:51:a0:c5:88:91:87:93:16:99:b9:c3: ff:51:16:cb:0d:6c:a4:1b:da:7e:dc:ab:20:c3:80:29:ce:42: ea:87:90:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIl0X3jQNiVdTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NjViODJkM2EtZTI0YS00ZTg0LTk1OGItNzlmMDIwMmViYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLr7pWwkcZrHb06DAQvoceaAq6LNKcS7umUA nBhmA1FtqnCxnEYq2Oxqj98MqeD5Gz8ckwU9sjb8/01TWaozIm9PXj5ZdsNESm3s SYyVHXJrm1CWxCCPEVJbmqSerDWLHwcmX/1stFYNuAhcFnDv2oqfs0HScQSoNMe+ PR+YlHtse1Z1EgpJZSdnrYpV+mcg780qWMNNCUuqvF67ECoo6xrLPy2ooDriJvgI pVk/ZvSViWk3R/HG+yWNbP/BgyoIlSyU8ygOhCg0nKAkjzR6QT+wDBFexVAO+5Sf fjgf2Cd5ajy8YrB+Gs/uVZ0fYr+xNJmIX5ks7wN+fGzpQhQUtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqdt5YWJKhrBucGIgcYbhN30GWQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWJkZGFkM2QtNmU0NC0z NWNhLWIwYTktZjFiM2ZmZWRhNTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAVQkH359Qn8STrw82A2O2EiHZD+5hgj76rlpak1yXjZ8LquAqFoY+3 9khrdGTJIhyHd13FhUHpn9ogSZh4MA/i3j8UQwpYMfEPuENa29CXl7lFj5m9SgDV hm+08YBEF8mreaLNqZ+gnCrNULqpbFJBHJmUMznN5xY4kGQWhKTBNeFziwCcl5ya gSPjpRIBk6BigmkwHK90Cf+dvS6dkWq7VWoEq83SiSu9shcSnFVAS3DXop/IYvud VQCKzRRBPlCwYO8ZAFSQM11f7JXbx953s9zz930w4e4hcrGpHgdRoMWIkYeTFpm5 w/9RFssNbKQb2n7cqyDDgCnOQuqHkEk= -----END CERTIFICATE-----Generated at Sun Nov 1 13:07:15 2026 by rpki-client