$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa File: 872f476c-b7cb-3c95-8fef-940a071d7450.roa (raw, json) Hash identifier: 0xCBhN8qqhswNZ8tmH3rrgAfz1gc1odMAYxOuIoGaEo= Subject key identifier: 5B:BF:3F:29:3F:66:C2:62:9E:F1:AF:48:05:BD:9D:0B:D5:28:7D:9F Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6888C426F306C925BFD8A0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.44.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:88:c4:26:f3:06:c9:25:bf:d8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=dd5dea8c-7221-4e7e-a33c-2db042d269e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:03:3e:28:d6:2f:d4:4d:cd:a1:0a:4f:d5:cb: 93:70:9c:34:81:e0:e3:35:0f:ca:22:a2:0a:09:8c: 60:da:f8:03:61:78:4c:3b:e2:bb:98:3a:00:a2:6e: e8:1f:1a:6f:78:38:34:b0:db:37:de:af:34:d3:f2: a0:af:f9:12:3b:0e:ec:c3:74:f9:42:cd:35:6a:7b: 64:26:38:c2:22:ce:60:35:94:b0:dd:48:ba:d5:c9: ea:71:d7:64:e0:d1:ce:3f:8b:4b:cc:85:fa:11:73: 28:5e:28:84:f8:14:ec:f2:98:0f:a8:af:b2:cc:47: 15:57:76:81:cf:cd:a8:05:20:a5:f7:86:d9:ad:78: 5d:d6:ba:e0:2e:9b:0f:2e:9d:b9:b5:16:f3:19:24: 83:1d:7e:f5:d3:79:e9:1f:18:f0:f2:c5:f0:ba:d4: 77:60:1f:d2:b1:60:87:9a:d2:73:ab:ee:be:96:fe: 2c:29:c9:70:31:16:c0:f0:0e:ec:1f:42:9e:df:81: 64:ca:42:e0:12:bc:07:cf:06:30:f1:58:90:c9:df: 43:82:2e:bc:ee:af:11:60:02:9c:a9:bd:b9:7c:e2: 14:e0:18:27:f7:a3:c2:dd:93:0e:5d:f7:c6:fe:47: 76:72:9e:49:61:81:d7:58:91:36:d6:74:ad:db:eb: 4e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BF:3F:29:3F:66:C2:62:9E:F1:AF:48:05:BD:9D:0B:D5:28:7D:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/872f476c-b7cb-3c95-8fef-940a071d7450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6c:51:08:90:a0:a5:c8:05:b6:e0:3f:4d:19:55:2f:65:68: 79:f9:f7:3f:bf:46:2f:02:a9:67:a3:36:bd:0a:07:db:99:ea: 11:50:1b:6a:0b:ad:cf:69:bc:63:bb:5e:cd:dd:96:27:77:2d: 0e:f7:1f:0c:ca:07:38:0f:52:34:da:88:3d:b2:19:88:5a:f6: 58:79:28:2c:17:f8:2b:b0:fd:82:47:af:1f:26:ed:cf:f9:f7: d3:a3:4e:8d:fe:1e:3d:e2:8d:b5:ef:45:cb:08:8c:73:28:3e: a3:df:98:c7:ae:ab:45:96:23:d4:88:3f:ec:4a:93:e3:da:3d: 09:f1:fb:50:e8:a9:0b:58:c4:21:a8:9a:7f:c4:70:8e:8c:26: 44:b1:ed:90:0b:60:e8:a7:4f:0d:ba:5d:62:40:a2:54:fc:e2: 3d:a9:d6:0c:b9:36:67:f3:ca:00:35:b2:4c:f9:32:0a:15:a2: 5b:3f:02:ac:9d:d0:09:4e:b2:b7:99:38:d8:28:49:e9:81:4d: d5:2b:c6:6d:3d:c1:62:87:f6:7a:cf:73:c8:2c:b5:57:3c:84: f9:d9:d7:37:04:8c:36:95:cc:2e:f8:c0:b9:ee:94:cc:e8:82: 82:9f:34:d9:86:ea:bb:9d:2b:ef:27:68:be:90:76:f3:39:17: 06:98:6c:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIjEJvMGySW/2KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ1ZGVhOGMtNzIyMS00ZTdlLWEzM2MtMmRiMDQyZDI2OWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQM+KNYv1E3NoQpP1cuTcJw0geDjNQ/KIqIK CYxg2vgDYXhMO+K7mDoAom7oHxpveDg0sNs33q800/Kgr/kSOw7sw3T5Qs01antk JjjCIs5gNZSw3Ui61cnqcddk4NHOP4tLzIX6EXMoXiiE+BTs8pgPqK+yzEcVV3aB z82oBSCl94bZrXhd1rrgLpsPLp25tRbzGSSDHX7103npHxjw8sXwutR3YB/SsWCH mtJzq+6+lv4sKclwMRbA8A7sH0Ke34FkykLgErwHzwYw8ViQyd9Dgi687q8RYAKc qb25fOIU4Bgn96PC3ZMOXffG/kd2cp5JYYHXWJE21nSt2+tOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFu/Pyk/ZsJinvGvSAW9nQvVKH2fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvODcyZjQ3NmMtYjdjYi0z Yzk1LThmZWYtOTQwYTA3MWQ3NDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZsUQiQoKXIBbbgP00ZVS9laHn59z+/Ri8CqWejNr0KB9uZ6hFQG2oL rc9pvGO7Xs3dlid3LQ73HwzKBzgPUjTaiD2yGYha9lh5KCwX+Cuw/YJHrx8m7c/5 99OjTo3+Hj3ijbXvRcsIjHMoPqPfmMeuq0WWI9SIP+xKk+PaPQnx+1DoqQtYxCGo mn/EcI6MJkSx7ZALYOinTw26XWJAolT84j2p1gy5NmfzygA1skz5MgoVols/Aqyd 0AlOsreZONgoSemBTdUrxm09wWKH9nrPc8gstVc8hPnZ1zcEjDaVzC74wLnulMzo goKfNNmG6rudK+8naL6QdvM5FwaYbOU= -----END CERTIFICATE-----Generated at Mon Nov 2 05:53:21 2026 by rpki-client