$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a50c66ec-2228-3e67-82dc-973b51122e6f.roa File: a50c66ec-2228-3e67-82dc-973b51122e6f.roa (raw, json) Hash identifier: DSYtmtxzoBGJf/LRcz4ycw/HDeEb7Xtw9Uoj3hvW9Wo= Subject key identifier: 07:C3:10:FE:A9:5B:F9:E7:92:3D:4F:CB:4B:42:3A:EB:57:53:3D:D6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD38B54221FA1C1C1BC40 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a50c66ec-2228-3e67-82dc-973b51122e6f.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.108.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:8b:54:22:1f:a1:c1:c1:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=6591d7a3-9a4e-4088-9055-23b30ca17043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:1e:56:3c:02:48:85:45:44:0e:2e:2a:6a: 1b:25:04:9d:9b:0c:6e:0b:fc:32:e5:fe:dc:5f:b0: 56:c9:73:78:39:97:2f:da:c7:eb:43:cb:a0:11:d5: 20:05:6c:da:06:01:3e:5a:81:5d:ba:89:b6:d2:49: 93:e7:b0:64:eb:95:54:99:e8:76:d4:3b:6b:00:a3: 83:17:3d:b3:6d:af:2c:c2:39:b6:68:ad:50:27:5b: 35:2f:22:ca:ad:46:e4:16:73:3b:19:73:a8:98:86: 42:ed:78:c5:7b:7b:02:17:4e:67:e0:70:ad:39:ed: 7a:6a:e0:7c:f9:35:dc:b0:97:09:98:d8:48:5a:23: c2:8a:2f:c6:83:99:a4:0b:51:b3:51:09:de:cf:e6: 9a:e8:18:94:eb:63:27:17:4e:3f:2c:c0:e9:bf:96: 29:ff:ff:7e:78:1f:6f:9d:1c:59:61:19:62:d0:33: 72:66:78:39:f2:93:ec:5c:2f:0d:0b:8e:0a:ab:de: 66:a2:d6:9e:b0:0a:24:b8:bc:16:74:c3:ec:8c:f8: 35:47:e2:fb:af:89:35:bf:11:38:bf:29:fc:a3:03: 6d:b9:b9:b8:56:ac:0a:b8:16:5e:08:93:b3:55:dd: 01:af:41:19:74:af:9e:e2:cb:ae:7e:ed:77:d7:ab: 04:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C3:10:FE:A9:5B:F9:E7:92:3D:4F:CB:4B:42:3A:EB:57:53:3D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a50c66ec-2228-3e67-82dc-973b51122e6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:d1:4f:1f:47:91:f0:25:9e:51:da:4d:ab:ff:1b:29:ea:e2: af:60:df:bc:97:c3:ac:33:c3:b9:e9:14:18:bd:61:50:a4:e1: d1:61:d1:71:a7:df:23:8e:ce:3d:b5:b9:8d:75:55:05:61:6d: ef:f6:a8:35:ad:06:ba:07:10:70:2a:6d:1d:bd:49:75:99:ce: 0e:39:fd:29:c2:be:06:cc:90:a3:fd:02:24:24:20:a6:05:78: 46:9f:2c:ac:e7:7c:86:65:38:f4:93:f8:f4:c8:88:1a:5f:97: c1:1c:da:f9:12:a1:7f:fb:c5:d5:77:96:c3:d4:b1:34:b8:28: fd:c0:77:af:90:e3:9a:20:e7:3a:18:5d:90:b5:20:74:4c:12: 40:11:10:77:f2:18:f3:76:cf:2f:de:2c:d2:75:6a:e6:69:b4: 57:1c:97:9d:8f:96:76:04:52:4a:55:58:69:4f:7d:da:c0:ee: b1:f3:db:ef:c5:59:c6:fc:74:98:52:8b:4f:20:0d:d3:7e:b6: ce:bf:2c:b2:11:6b:9e:3c:9f:23:74:e1:d5:e3:f3:ae:1b:2f: 83:cb:6c:3f:b6:3d:32:23:56:06:0a:d7:4f:ad:ae:58:2e:46: 2a:b3:28:97:c2:79:7b:52:2d:c9:41:6e:f3:43:09:89:8d:aa: 82:51:26:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNOLVCIfocHBvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk NjU5MWQ3YTMtOWE0ZS00MDg4LTkwNTUtMjNiMzBjYTE3MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEweVjwCSIVFRA4uKmobJQSdmwxuC/wy5f7c X7BWyXN4OZcv2sfrQ8ugEdUgBWzaBgE+WoFduom20kmT57Bk65VUmeh21DtrAKOD Fz2zba8swjm2aK1QJ1s1LyLKrUbkFnM7GXOomIZC7XjFe3sCF05n4HCtOe16auB8 +TXcsJcJmNhIWiPCii/Gg5mkC1GzUQnez+aa6BiU62MnF04/LMDpv5Yp//9+eB9v nRxZYRli0DNyZng58pPsXC8NC44Kq95motaesAokuLwWdMPsjPg1R+L7r4k1vxE4 vyn8owNtubm4VqwKuBZeCJOzVd0Br0EZdK+e4suufu1316sE4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfDEP6pW/nnkj1Py0tCOutXUz3WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYTUwYzY2ZWMtMjIyOC0z ZTY3LTgyZGMtOTczYjUxMTIyZTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGx5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPRTx9HkfAlnlHaTav/Gynq4q9g37yXw6wzw7npFBi9YVCk4dFh0XGn 3yOOzj21uY11VQVhbe/2qDWtBroHEHAqbR29SXWZzg45/SnCvgbMkKP9AiQkIKYF eEafLKznfIZlOPST+PTIiBpfl8Ec2vkSoX/7xdV3lsPUsTS4KP3Ad6+Q45og5zoY XZC1IHRMEkAREHfyGPN2zy/eLNJ1auZptFccl52PlnYEUkpVWGlPfdrA7rHz2+/F Wcb8dJhSi08gDdN+ts6/LLIRa548nyN04dXj864bL4PLbD+2PTIjVgYK10+trlgu RiqzKJfCeXtSLclBbvNDCYmNqoJRJgA= -----END CERTIFICATE-----Generated at Thu Aug 27 23:54:37 2026 by rpki-client