$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/856dd0c7-2a4b-38aa-aa6d-f488dbe96a48.roa File: 856dd0c7-2a4b-38aa-aa6d-f488dbe96a48.roa (raw, json) Hash identifier: alo9di2EkQ7cyDSIpbO7ZJhevXVVmJbFsH9M2bWUSHs= Subject key identifier: 4D:CB:BC:C6:FA:5C:A4:96:E0:AB:E1:AC:7D:42:F2:44:6E:58:16:5C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A2F47B294F8305094880 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/856dd0c7-2a4b-38aa-aa6d-f488dbe96a48.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.11.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a2:f4:7b:29:4f:83:05:09:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=24c0e462-a817-4e97-a3dd-147c7ff7fc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:63:c6:01:75:9b:b1:b8:59:47:20:12:2f:04: 95:11:77:94:e1:85:fb:c9:1b:e4:1a:dc:4a:bc:3a: 3a:8b:96:7f:38:db:c4:48:6b:b2:ab:6b:29:97:e6: df:21:05:13:63:37:33:98:89:21:dc:6c:68:7d:82: cc:c6:5c:51:bb:be:2b:ba:87:ac:af:bc:94:21:78: d1:28:37:29:36:cb:9b:50:44:df:ad:58:a8:2e:d4: 3b:d4:a7:98:98:48:4c:fb:eb:0a:6b:10:5d:f4:5d: f7:04:4a:c0:6f:09:ec:09:a4:6a:cd:9a:a8:d5:45: 34:0c:37:8a:a7:8e:48:12:8e:fa:1f:70:8e:4a:97: 91:48:16:4e:ff:b6:30:27:a8:c3:0d:85:ad:8b:c6: 4d:5b:a0:b7:60:2e:bc:41:35:67:1e:aa:0f:81:d1: 2d:f1:ab:44:48:ad:cd:e7:90:b7:1a:f9:3c:f3:1c: 97:0f:3e:51:a5:3a:be:1a:87:e4:91:3a:1a:92:70: 6e:c0:69:78:a4:ea:a0:d5:dd:3d:ba:f1:8f:83:21: a6:29:ba:6c:f6:33:92:2b:46:34:57:a6:ab:e7:e1: 02:a5:9e:2a:f8:0a:04:de:69:53:60:a6:d2:4a:fe: 76:4c:83:0a:92:32:fe:92:11:85:13:03:0b:76:81: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CB:BC:C6:FA:5C:A4:96:E0:AB:E1:AC:7D:42:F2:44:6E:58:16:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/856dd0c7-2a4b-38aa-aa6d-f488dbe96a48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.11.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:be:f7:85:e1:b9:a6:5e:41:e7:4c:da:24:0a:ee:53:16:67: c9:17:bb:7b:b8:60:4c:5d:2a:65:b9:e9:b0:63:5f:34:a4:df: e4:05:b2:61:95:91:55:0d:f9:4b:e5:09:34:84:23:f0:97:d0: 10:21:e2:ed:50:34:59:3e:b8:6e:96:73:9e:5b:c7:da:e2:35: e8:6e:fb:2e:93:d0:65:16:7e:09:3c:5b:d4:a0:78:0a:2f:3d: 17:45:fb:22:99:8a:1d:0c:dc:fd:73:99:2e:a4:19:20:6a:85: 0c:4b:36:c5:9a:bf:45:8d:07:d4:71:b0:d8:8e:f4:25:78:6c: 88:ba:df:59:28:bb:85:55:18:d0:3c:f4:de:79:72:66:3c:67: b7:bf:eb:c3:f2:32:b4:3b:a4:50:16:c6:ad:ca:ee:9d:b7:62: db:af:e1:bb:33:c0:d8:43:cb:d7:2d:ab:1b:87:e8:fa:a4:d4: f4:91:54:34:4f:39:10:30:99:03:9b:6d:df:85:23:e5:f9:97: af:31:2d:dc:5d:66:26:41:e1:5d:b1:62:83:8b:cc:bd:a0:10: b3:b0:c8:9a:fd:e9:ab:4c:81:ed:1e:7e:d1:64:41:92:5a:66: e6:3d:47:07:46:72:b5:34:fc:76:47:3c:30:e4:11:2f:9d:10: 28:d1:26:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6L0eylPgwUJSIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk MjRjMGU0NjItYTgxNy00ZTk3LWEzZGQtMTQ3YzdmZjdmYzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2PGAXWbsbhZRyASLwSVEXeU4YX7yRvkGtxK vDo6i5Z/ONvESGuyq2spl+bfIQUTYzczmIkh3GxofYLMxlxRu74ruoesr7yUIXjR KDcpNsubUETfrVioLtQ71KeYmEhM++sKaxBd9F33BErAbwnsCaRqzZqo1UU0DDeK p45IEo76H3COSpeRSBZO/7YwJ6jDDYWti8ZNW6C3YC68QTVnHqoPgdEt8atESK3N 55C3Gvk88xyXDz5RpTq+GofkkToaknBuwGl4pOqg1d09uvGPgyGmKbps9jOSK0Y0 V6ar5+ECpZ4q+AoE3mlTYKbSSv52TIMKkjL+khGFEwMLdoGkHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3LvMb6XKSW4KvhrH1C8kRuWBZcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODU2ZGQwYzctMmE0Yi0z OGFhLWFhNmQtZjQ4OGRiZTk2YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbAvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADC+94XhuaZeQedM2iQK7lMWZ8kXu3u4YExdKmW56bBjXzSk3+QFsmGV kVUN+UvlCTSEI/CX0BAh4u1QNFk+uG6Wc55bx9riNehu+y6T0GUWfgk8W9SgeAov PRdF+yKZih0M3P1zmS6kGSBqhQxLNsWav0WNB9RxsNiO9CV4bIi631kou4VVGNA8 9N55cmY8Z7e/68PyMrQ7pFAWxq3K7p23Ytuv4bszwNhDy9ctqxuH6Pqk1PSRVDRP ORAwmQObbd+FI+X5l68xLdxdZiZB4V2xYoOLzL2gELOwyJr96atMge0eftFkQZJa ZuY9RwdGcrU0/HZHPDDkES+dECjRJqI= -----END CERTIFICATE-----Generated at Sun Sep 13 16:39:36 2026 by rpki-client