$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa File: 9b04685c-198f-3930-8130-bd1a003c13da.roa (raw, json) Hash identifier: ytSt5Li/3MJM3nARPICbknoPyTNU/8iiKD6tfSEQsHk= Subject key identifier: B5:CE:47:20:EA:D4:38:B4:30:14:14:1E:79:AF:D2:F6:2D:CE:79:48 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6886073E2C722118F7E200 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.11.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:86:07:3e:2c:72:21:18:f7:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=b3bf8241-c165-430f-83ed-34e40d586d58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:49:0a:81:04:e0:91:aa:a6:2f:4d:48:b8:60: 20:b3:22:da:68:19:4c:05:f2:e9:cc:1c:c7:7c:b1: 01:34:98:8b:d3:93:60:37:60:05:1e:76:5c:fe:c3: d3:f2:25:8d:f5:5c:aa:87:9c:a6:fe:d2:6f:cf:e9: cb:39:b8:1d:d3:43:88:33:d8:7b:43:ca:50:2f:83: 57:b1:d4:99:13:2c:61:bc:61:f2:82:dd:0a:6c:17: 1f:ea:1b:e0:f2:4e:af:b7:1e:f7:5e:3f:7e:05:9b: 6e:3e:4b:c9:04:7b:a7:ea:1e:77:1f:ee:5f:6e:9a: c2:92:80:d4:58:89:5c:b6:32:19:2c:42:34:c6:df: 27:2c:7d:ba:0a:d8:00:69:76:9e:80:1d:d1:d2:16: 1b:84:e6:5c:1e:18:04:c8:14:a0:86:28:2d:0a:6b: 47:ba:cd:52:ae:a8:20:9e:41:9c:49:a7:5e:46:74: 5c:7d:11:33:0a:e7:1f:e8:ec:6e:53:90:9f:c8:4b: 77:08:01:2e:5a:ae:c0:35:7e:c7:c9:7f:aa:fe:5b: 93:1a:a9:e6:21:28:17:2b:8d:d7:08:3a:bc:43:7a: 8a:f2:e7:48:67:04:c4:fd:0c:b8:c2:78:28:c5:cb: 7c:9d:90:88:24:80:2d:30:2e:ed:e0:c5:c7:61:2d: a3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:CE:47:20:EA:D4:38:B4:30:14:14:1E:79:AF:D2:F6:2D:CE:79:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9b04685c-198f-3930-8130-bd1a003c13da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.11.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:b6:c3:8d:bf:7e:16:ee:a5:bc:f3:01:16:3c:aa:83:09:47: 18:4c:98:4a:f7:74:3e:5c:2f:50:39:d7:ed:4c:f2:61:b0:74: 3d:a4:71:c8:bb:ea:10:41:71:b4:59:e8:64:1f:ba:cd:3e:53: 04:9d:28:33:db:4d:72:f9:ec:67:29:dc:0c:7a:c8:ac:b3:f0: a6:6b:16:69:d0:76:e0:23:aa:e7:e2:03:4a:62:bb:33:87:6a: ab:a9:d0:80:8b:97:a4:4f:f1:2a:45:27:72:93:76:22:8e:be: b1:09:0f:66:1e:11:5f:b4:9b:62:56:b3:a2:a5:b3:0c:97:df: 49:a0:6e:de:31:51:3f:a8:fd:0f:82:76:79:f4:a1:51:49:2b: f4:03:57:dc:5e:f4:41:85:97:b7:43:b2:f4:e3:b6:42:52:3c: 75:19:85:a6:35:75:8f:db:f9:7b:a6:9a:22:39:a0:72:1e:6d: b3:a3:29:08:35:21:4e:e2:99:64:3e:08:76:6e:04:bd:d0:5e: a8:b9:6e:53:8e:13:95:3f:dd:eb:c0:64:30:d0:90:43:a6:f7: 4b:b2:cc:4d:92:cb:e8:fa:fe:7d:c1:ac:1b:15:9e:e7:dc:96: 70:89:c9:31:ad:ec:67:0d:83:17:f5:a1:f6:24:9c:59:33:58: c0:1e:b9:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIYHPixyIRj34gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk YjNiZjgyNDEtYzE2NS00MzBmLTgzZWQtMzRlNDBkNTg2ZDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkkKgQTgkaqmL01IuGAgsyLaaBlMBfLpzBzH fLEBNJiL05NgN2AFHnZc/sPT8iWN9Vyqh5ym/tJvz+nLObgd00OIM9h7Q8pQL4NX sdSZEyxhvGHygt0KbBcf6hvg8k6vtx73Xj9+BZtuPkvJBHun6h53H+5fbprCkoDU WIlctjIZLEI0xt8nLH26CtgAaXaegB3R0hYbhOZcHhgEyBSghigtCmtHus1Srqgg nkGcSadeRnRcfREzCucf6OxuU5CfyEt3CAEuWq7ANX7HyX+q/luTGqnmISgXK43X CDq8Q3qK8udIZwTE/Qy4wngoxct8nZCIJIAtMC7t4MXHYS2jJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLXORyDq1Di0MBQUHnmv0vYtznlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvOWIwNDY4NWMtMTk4Zi0z OTMwLTgxMzAtYmQxYTAwM2MxM2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK2w42/fhbupbzzARY8qoMJRxhMmEr3dD5cL1A51+1M8mGwdD2kcci7 6hBBcbRZ6GQfus0+UwSdKDPbTXL57Gcp3Ax6yKyz8KZrFmnQduAjqufiA0piuzOH aqup0ICLl6RP8SpFJ3KTdiKOvrEJD2YeEV+0m2JWs6KlswyX30mgbt4xUT+o/Q+C dnn0oVFJK/QDV9xe9EGFl7dDsvTjtkJSPHUZhaY1dY/b+XummiI5oHIebbOjKQg1 IU7imWQ+CHZuBL3QXqi5blOOE5U/3evAZDDQkEOm90uyzE2Sy+j6/n3BrBsVnufc lnCJyTGt7GcNgxf1ofYknFkzWMAeuQ0= -----END CERTIFICATE-----Generated at Sun Nov 1 13:13:20 2026 by rpki-client