$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa File: ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa (raw, json) Hash identifier: HlNbkHcnjclkq8IVLkkL3sGQmCXInTCUPsDlcSCf4B0= Subject key identifier: A8:FF:3C:74:8D:B8:CE:BC:AD:22:19:65:39:7C:9B:75:9C:1C:ED:79 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EF717A3B715B2C0AEE8D46380 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 701 IP address blocks: 108.39.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:a3:b7:15:b2:c0:ae:e8:d4:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=88bdaf3b-76e4-4e3e-b227-a543b2a4f8af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:67:7b:59:22:c5:09:20:84:ad:ee:27:c3:aa: 7e:64:00:ad:3b:18:e0:40:7b:7c:f6:c7:84:8a:b5: 86:2b:f9:c8:9a:72:9e:95:fc:fa:62:91:25:a0:dc: 36:eb:dd:db:e8:42:51:e6:32:ac:c2:32:2a:24:20: c0:9a:a6:3f:2f:16:d9:f2:3a:58:0f:da:45:22:c0: ce:18:03:da:fa:fd:5a:13:ed:00:e7:45:35:f3:ec: 2f:8e:c8:51:ee:04:6a:aa:91:cb:ad:d8:52:e9:89: 52:3f:a4:61:38:ca:5e:c8:b5:b7:e3:de:f4:1f:fb: 65:0e:a7:ed:e9:da:3d:f1:f5:de:68:1e:57:95:4f: 79:c5:da:9e:d8:bd:f1:8a:a4:b4:cd:09:fd:b5:0e: 68:96:07:50:71:ad:b4:39:91:20:2b:e0:1f:b5:00: 5e:ee:f7:de:91:79:37:c6:0e:33:87:b9:25:c0:36: 01:04:70:97:2a:a6:23:70:97:5e:58:55:67:6d:6b: 73:9b:f4:40:dd:31:3b:a3:83:42:e5:65:fc:62:2c: 35:27:d1:1f:60:36:9b:66:2d:0f:c6:46:fa:20:b0: 53:57:65:fd:a5:21:be:21:06:84:b6:64:76:f5:31: 39:07:77:a1:0b:2d:04:89:98:39:80:c6:8e:3a:6f: 98:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:FF:3C:74:8D:B8:CE:BC:AD:22:19:65:39:7C:9B:75:9C:1C:ED:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ba98bb5f-0e3d-39b6-a783-50dfe7237324.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.39.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:83:8b:c9:5c:90:1c:f7:f5:0a:bc:b6:bc:8d:89:ed:42:7e: 23:50:db:c8:d0:8b:e8:a1:0a:bd:30:93:89:be:c2:3b:8f:d2: 03:27:6c:fb:39:d9:1d:25:4f:6a:e0:8f:37:d4:ef:ff:d3:63: 84:81:a0:ad:51:45:f6:4e:1a:c3:cb:a2:85:cc:e9:7a:21:85: 80:dd:e4:51:9f:cf:3f:b2:0f:e5:51:e4:88:67:c5:f9:4d:2d: de:b7:10:c7:bc:bf:64:b5:f8:de:af:11:8f:c2:08:51:17:59: 31:a0:9f:3a:4b:d5:15:8a:b5:1b:16:10:f3:17:77:cb:f5:97: 2c:8b:9a:ad:76:d1:2a:70:2e:8a:d4:82:50:9e:3d:46:76:0d: 0d:c6:6e:65:6e:16:ae:28:f6:85:d9:46:50:40:a7:17:71:f9: 81:80:32:9c:dd:23:09:35:8a:14:e2:3d:e2:81:8a:7c:8c:2a: d4:02:56:25:3c:8c:32:15:b6:f2:d4:85:3c:73:0c:bb:40:54: 3c:11:01:24:8c:04:10:c9:64:47:87:ad:78:db:84:53:32:06: 86:2d:92:b7:c6:a0:b5:13:ef:21:fa:1e:ad:f0:6b:48:d8:87: 57:ea:cf:7f:c6:4a:6a:13:a0:43:92:14:12:11:97:52:3a:d5: 0e:ca:55:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F6O3FbLArujUY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ODhiZGFmM2ItNzZlNC00ZTNlLWIyMjctYTU0M2IyYTRmOGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGd7WSLFCSCEre4nw6p+ZACtOxjgQHt89seE irWGK/nImnKelfz6YpEloNw2693b6EJR5jKswjIqJCDAmqY/LxbZ8jpYD9pFIsDO GAPa+v1aE+0A50U18+wvjshR7gRqqpHLrdhS6YlSP6RhOMpeyLW34970H/tlDqft 6do98fXeaB5XlU95xdqe2L3xiqS0zQn9tQ5olgdQca20OZEgK+AftQBe7vfekXk3 xg4zh7klwDYBBHCXKqYjcJdeWFVnbWtzm/RA3TE7o4NC5WX8Yiw1J9EfYDabZi0P xkb6ILBTV2X9pSG+IQaEtmR29TE5B3ehCy0EiZg5gMaOOm+YpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKj/PHSNuM68rSIZZTl8m3WcHO15MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYmE5OGJiNWYtMGUzZC0z OWI2LWE3ODMtNTBkZmU3MjM3MzI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+Di8lckBz39Qq8tryNie1CfiNQ28jQi+ihCr0wk4m+wjuP0gMnbPs5 2R0lT2rgjzfU7//TY4SBoK1RRfZOGsPLooXM6XohhYDd5FGfzz+yD+VR5IhnxflN Ld63EMe8v2S1+N6vEY/CCFEXWTGgnzpL1RWKtRsWEPMXd8v1lyyLmq120SpwLorU glCePUZ2DQ3GbmVuFq4o9oXZRlBApxdx+YGAMpzdIwk1ihTiPeKBinyMKtQCViU8 jDIVtvLUhTxzDLtAVDwRASSMBBDJZEeHrXjbhFMyBoYtkrfGoLUT7yH6Hq3wa0jY h1fqz3/GSmoToEOSFBIRl1I61Q7KVfM= -----END CERTIFICATE-----Generated at Sun Sep 13 19:43:46 2026 by rpki-client