$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d470d7-9d5a-393e-9f2f-a104be7e0209.roa File: a8d470d7-9d5a-393e-9f2f-a104be7e0209.roa (raw, json) Hash identifier: La6CGQyV7woVPSFsbpoB4WnAoIl4xQs3q59Gfv/FfwE= Subject key identifier: 3C:48:82:02:8A:B9:0C:7A:67:EA:2D:A8:27:32:6E:47:F5:65:8E:9D Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588FDD6E6F10DC7173E7670 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d470d7-9d5a-393e-9f2f-a104be7e0209.roa Signing time: Tue 23 Jun 2026 22:35:19 +0000 ROA not before: Tue 23 Jun 2026 22:35:19 +0000 ROA not after: Mon 21 Sep 2026 22:35:19 +0000 asID: 5650 IP address blocks: 172.108.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:fd:d6:e6:f1:0d:c7:17:3e:76:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:19 2026 GMT Not After : Sep 21 22:35:19 2026 GMT Subject: CN=e22cfec0-3383-491e-ad5b-342bd2794b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:df:02:78:fa:3b:b8:dd:fa:0b:41:27:e4: bd:75:d7:dd:76:c9:66:b9:ad:f1:7a:6a:64:6d:80: e6:c6:2e:50:1b:f4:e1:5e:6e:39:c6:8a:9a:39:d6: 0d:e1:95:ae:75:4a:be:04:7a:1e:3b:71:22:7b:f1: b4:66:2e:35:86:3e:60:52:54:b7:d6:b8:d6:2d:f6: 69:31:5d:b1:fb:5b:bd:81:f0:7c:1a:40:09:66:83: e9:45:c6:7b:49:4c:41:fc:60:03:92:5f:f0:77:02: 0c:47:ed:f3:81:66:1f:33:17:e7:44:18:66:14:00: 9a:c0:70:b5:63:1d:4f:bf:bd:b2:8d:2a:2b:5c:fc: 8e:e5:7d:60:36:fc:aa:af:7a:b2:7a:a2:f8:19:ae: dd:fb:27:a0:ed:63:78:5f:6b:8c:18:55:80:04:90: 10:83:37:2f:87:28:c1:d6:50:69:0e:bf:d9:e9:3a: 05:0f:86:cd:94:36:84:68:92:c1:dc:5d:ff:f5:49: d0:7b:ee:4c:27:dd:b9:6e:57:53:a5:e4:9d:ad:f9: 05:f5:9c:5e:66:49:6b:c7:8b:ec:aa:3c:d8:78:9d: 20:74:5e:50:6c:14:f3:f4:45:4e:d1:7b:f5:5d:34: 0b:ac:bd:8c:a0:c6:5d:57:cb:78:be:22:29:4f:4c: 62:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:48:82:02:8A:B9:0C:7A:67:EA:2D:A8:27:32:6E:47:F5:65:8E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a8d470d7-9d5a-393e-9f2f-a104be7e0209.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:4f:e6:31:ed:3f:92:f3:f9:e4:e6:af:4b:29:72:3a:64:f8: 7f:9a:ea:cb:36:21:35:6d:f7:f3:b7:41:44:b2:91:6a:f9:d0: 1f:bd:41:99:d6:bf:99:93:89:20:c0:36:2d:1d:8e:e1:3f:70: 79:da:31:91:fa:7d:79:d7:00:d6:17:74:50:2e:e9:90:44:82: ee:93:a0:d9:b5:73:bd:ec:93:54:ec:e3:b7:ec:2a:6c:89:1b: a6:d8:39:b2:a7:e1:e2:04:41:12:cb:8f:64:e6:57:77:3d:ad: c4:3a:b4:d6:49:d3:71:f5:1b:ca:12:fc:cb:dd:51:5e:0b:cf: a0:a5:4b:ab:d6:d0:68:5b:d8:c3:a4:69:cf:03:b0:98:48:46: 31:3e:d0:e0:a8:89:0d:79:7c:a0:6a:6f:6c:6c:db:17:b6:ed: 53:94:b5:df:4e:5d:2b:d3:53:87:22:52:ec:e9:99:cc:b8:29: 32:9b:5c:57:15:28:07:ec:f9:af:38:71:fb:81:78:9a:d8:8f: 52:03:46:3c:1d:5a:c6:a4:c6:20:d5:33:4d:2c:75:f5:4f:11: 88:9f:3e:ab:24:d5:60:bd:7e:62:bf:fd:ff:c1:85:9b:b2:16: 99:d4:ed:f6:99:f6:b7:81:3b:3d:c5:6e:33:3c:de:e6:54:e3: 51:2f:16:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiP3W5vENxxc+dnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUxOVoXDTI2MDkyMTIyMzUxOVowLzEtMCsGA1UEAxMk ZTIyY2ZlYzAtMzM4My00OTFlLWFkNWItMzQyYmQyNzk0YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQ3fAnj6O7jd+gtBJ+S9ddfddslmua3xempk bYDmxi5QG/ThXm45xoqaOdYN4ZWudUq+BHoeO3Eie/G0Zi41hj5gUlS31rjWLfZp MV2x+1u9gfB8GkAJZoPpRcZ7SUxB/GADkl/wdwIMR+3zgWYfMxfnRBhmFACawHC1 Yx1Pv72yjSorXPyO5X1gNvyqr3qyeqL4Ga7d+yeg7WN4X2uMGFWABJAQgzcvhyjB 1lBpDr/Z6ToFD4bNlDaEaJLB3F3/9UnQe+5MJ925bldTpeSdrfkF9ZxeZklrx4vs qjzYeJ0gdF5QbBTz9EVO0Xv1XTQLrL2MoMZdV8t4viIpT0xiBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxIggKKuQx6Z+otqCcybkf1ZY6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYThkNDcwZDctOWQ1YS0z OTNlLTlmMmYtYTEwNGJlN2UwMjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFP5jHtP5Lz+eTmr0spcjpk+H+a6ss2ITVt9/O3QUSykWr50B+9QZnW v5mTiSDANi0djuE/cHnaMZH6fXnXANYXdFAu6ZBEgu6ToNm1c73sk1Ts47fsKmyJ G6bYObKn4eIEQRLLj2TmV3c9rcQ6tNZJ03H1G8oS/MvdUV4Lz6ClS6vW0Ghb2MOk ac8DsJhIRjE+0OCoiQ15fKBqb2xs2xe27VOUtd9OXSvTU4ciUuzpmcy4KTKbXFcV KAfs+a84cfuBeJrYj1IDRjwdWsakxiDVM00sdfVPEYifPqsk1WC9fmK//f/BhZuy FpnU7faZ9reBOz3FbjM83uZU41EvFu0= -----END CERTIFICATE-----Generated at Mon Jul 13 10:33:05 2026 by rpki-client