$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa File: a0b57f6e-b364-3e5f-a287-5570d9c98658.roa (raw, json) Hash identifier: aFge8y/0PGXjNXhhd8AnQd9TPPXrxa/tnwdXbXmdODc= Subject key identifier: AD:09:F5:11:BA:0E:75:5F:16:50:77:6D:09:81:9F:B2:DD:99:4F:D9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717845635B112D575961C00 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.3.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:84:56:35:b1:12:d5:75:96:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=70d1e94f-cf67-4ae7-a6a4-2babf7017800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:0d:4c:d5:07:6a:13:0a:11:60:49:cb:5b:77: 2d:0a:9b:86:7a:9a:23:95:0e:a7:21:a9:46:1c:bc: 7d:e9:21:be:f6:fc:fd:5e:91:9c:3f:89:28:5b:d3: 3d:d0:8b:24:36:56:7c:ab:c2:f8:61:21:80:10:b1: 4e:af:1f:da:30:fb:44:9f:df:03:bd:62:7d:53:ef: b1:62:37:33:8f:3b:59:5b:11:c4:5d:f5:3b:94:36: 1b:86:16:71:5c:7e:98:e9:dd:d6:fb:0d:75:90:f5: 50:f1:e5:39:d7:94:09:71:18:da:f9:c1:b2:5d:42: fe:6e:aa:de:5f:e6:9f:1c:a3:7c:0e:5d:36:b9:15: 2c:dd:e8:3e:73:fb:4f:4f:ac:dc:7a:ad:ee:14:74: 4e:ca:7e:05:f8:f7:1b:2e:cc:6f:80:1e:96:19:87: e1:30:d5:6e:2d:8a:4c:a6:e6:ba:26:d4:89:9b:52: 99:62:f6:28:af:fa:fa:24:64:7d:2a:50:02:2f:e5: 36:6a:29:3a:d5:bb:3d:8d:32:5b:39:11:e3:f4:5e: 07:a2:0b:df:cc:75:bd:48:b6:d2:97:db:c6:a0:7a: ae:ca:6f:ba:ca:2d:27:f5:9e:82:06:fb:9a:4a:79: 38:8e:6a:b9:79:51:ea:f3:86:e2:f3:d8:60:20:d1: 74:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:09:F5:11:BA:0E:75:5F:16:50:77:6D:09:81:9F:B2:DD:99:4F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a0b57f6e-b364-3e5f-a287-5570d9c98658.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.3.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ba:cc:46:0c:a4:00:d3:9b:aa:d4:df:cd:f7:d4:48:16:a6: 20:a8:67:f7:24:7e:8b:33:fa:4c:8a:d1:32:d1:99:b0:e4:43: 0a:d9:17:cf:23:8b:b6:ee:a3:0e:8c:d5:3f:f8:73:e2:d9:42: f4:c8:5c:e0:51:89:9a:79:66:01:f2:f2:6b:13:b6:d3:c7:33: 33:44:78:54:21:d1:2d:13:e3:a2:53:a7:eb:3d:be:0e:78:90: 20:cc:ac:ac:23:3a:cb:5b:f3:25:3e:2c:91:ae:b1:4e:22:06: 23:32:94:af:1f:ba:fc:ac:4a:9f:5c:07:e8:0b:85:64:8e:b8: 7d:24:51:8d:fa:1c:06:7a:85:e1:23:9b:51:a9:cc:8a:6b:0a: 6b:11:29:d2:56:8c:43:34:25:00:d7:56:34:08:c7:28:c9:be: 95:e5:d6:9a:ed:22:3b:34:24:19:94:54:a6:8a:28:0a:3d:ad: 7d:41:47:e0:73:4f:58:f4:89:a7:7c:5f:91:dc:3e:8b:23:9d: be:8a:91:d8:58:b8:ef:42:8b:fc:61:f6:1f:1a:99:cc:7d:b8: 12:fe:32:08:f6:3c:52:b8:5f:23:2f:91:44:d5:64:dc:e3:dd: f3:ab:d3:ae:e9:6c:c6:0b:67:f0:34:b1:12:e6:69:c0:61:92: d0:e0:26:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F4RWNbES1XWWHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NzBkMWU5NGYtY2Y2Ny00YWU3LWE2YTQtMmJhYmY3MDE3ODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvA1M1QdqEwoRYEnLW3ctCpuGepojlQ6nIalG HLx96SG+9vz9XpGcP4koW9M90IskNlZ8q8L4YSGAELFOrx/aMPtEn98DvWJ9U++x YjczjztZWxHEXfU7lDYbhhZxXH6Y6d3W+w11kPVQ8eU515QJcRja+cGyXUL+bqre X+afHKN8Dl02uRUs3eg+c/tPT6zceq3uFHROyn4F+PcbLsxvgB6WGYfhMNVuLYpM pua6JtSJm1KZYvYor/r6JGR9KlACL+U2aik61bs9jTJbORHj9F4HogvfzHW9SLbS l9vGoHquym+6yi0n9Z6CBvuaSnk4jmq5eVHq84bi89hgINF0yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0J9RG6DnVfFlB3bQmBn7LdmU/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTBiNTdmNmUtYjM2NC0z ZTVmLWEyODctNTU3MGQ5Yzk4NjU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbAOAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADq6zEYMpADTm6rU38331EgWpiCoZ/ckfosz+kyK0TLRmbDkQwrZF88j i7buow6M1T/4c+LZQvTIXOBRiZp5ZgHy8msTttPHMzNEeFQh0S0T46JTp+s9vg54 kCDMrKwjOstb8yU+LJGusU4iBiMylK8fuvysSp9cB+gLhWSOuH0kUY36HAZ6heEj m1GpzIprCmsRKdJWjEM0JQDXVjQIxyjJvpXl1prtIjs0JBmUVKaKKAo9rX1BR+Bz T1j0iad8X5HcPosjnb6KkdhYuO9Ci/xh9h8amcx9uBL+Mgj2PFK4XyMvkUTVZNzj 3fOr067pbMYLZ/A0sRLmacBhktDgJjg= -----END CERTIFICATE-----Generated at Sun Sep 13 16:41:31 2026 by rpki-client