$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa File: c8bd980b-a454-3cdb-b080-f933dd7f030b.roa (raw, json) Hash identifier: xnSj5I0R1noj8PAGs56H8bWJu5rZPIDOrLET9d4zs0g= Subject key identifier: F2:14:35:FD:05:63:EA:17:2E:39:E8:5F:A6:5E:0A:46:18:7D:9E:C1 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6888B8C72B6AB703E390C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.40.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:88:b8:c7:2b:6a:b7:03:e3:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=d0f30c7d-c6b8-4b1e-b2bf-a3c3653b1049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:96:05:af:85:df:60:f4:cb:31:af:53:ba:08: 09:e0:1b:55:38:9a:d4:98:a1:a7:27:31:17:25:55: 5c:a3:89:f9:c1:ed:5b:7c:5b:34:5c:78:f4:14:9c: 7f:04:1c:d2:69:68:15:ba:88:1d:55:37:37:71:23: 1d:b1:85:4a:a4:82:c0:1a:e3:4f:25:33:7e:4b:df: f1:f0:dc:27:d0:6d:58:23:9b:2d:9d:8e:d6:45:9a: 46:53:07:f9:95:c2:f0:e9:ad:3b:8a:c3:93:88:01: 94:e5:ba:9b:9d:2d:1e:d9:f8:af:4b:2c:45:8b:a2: 07:1b:ad:d2:e2:f0:18:ee:0f:77:d4:70:9c:e2:01: 5e:ce:f2:78:db:5b:d4:6f:63:03:9c:86:1e:43:a2: ae:72:3f:49:19:bf:5b:be:fe:00:28:1e:22:b6:9e: 39:96:76:c1:e4:66:75:15:8b:3a:06:1d:2c:72:d1: b5:7c:69:ac:c5:24:d3:40:be:b1:6a:ac:db:ee:54: aa:1e:63:05:12:21:92:df:92:25:fc:d9:48:e2:37: ea:e1:46:90:11:7c:c8:6c:86:02:ff:f3:e4:05:bf: 3a:df:28:c4:0a:24:a4:d4:14:a8:75:a6:42:98:b4: cd:30:6a:8c:da:fa:91:5e:67:26:80:02:c2:32:e6: 50:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:14:35:FD:05:63:EA:17:2E:39:E8:5F:A6:5E:0A:46:18:7D:9E:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c8bd980b-a454-3cdb-b080-f933dd7f030b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.40.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:44:e2:3a:82:d1:8d:66:1a:e8:e4:43:3d:b1:ef:ba:39:03: 90:f1:f2:0a:8d:9f:99:63:1c:73:a5:b6:58:29:d3:01:f7:6b: 72:17:ec:b6:d1:06:a6:d0:f5:ad:fc:ef:0e:0f:98:c8:87:a6: bb:1f:4e:ae:e7:cc:72:34:8c:b9:94:8f:e1:83:58:13:f1:2f: 47:b0:8d:65:fa:9a:41:9b:a7:94:e6:b4:d3:79:a6:32:6b:02: 49:67:21:66:55:1b:24:d2:f4:21:db:5f:52:4b:2e:31:17:0e: c1:32:9a:0c:5c:3f:0f:fe:7b:e5:c6:b7:7d:a0:68:ab:77:02: 85:f1:48:42:04:db:41:3b:4f:76:0d:8b:94:30:c3:27:a2:7e: 02:9f:7f:d2:33:4d:a4:61:8e:2d:c1:e1:b1:90:28:b0:4a:aa: 9a:56:79:db:34:82:11:e3:9d:31:28:fa:65:ff:60:20:4e:70: 92:b1:7d:9a:4f:9d:b3:c2:52:16:b0:19:c9:be:24:32:1d:92: 4f:70:ef:29:67:0c:d3:15:04:f4:69:1e:9b:bc:24:45:3f:52: 97:b3:5c:ef:d1:bf:90:16:b2:01:a8:82:81:a4:52:bf:de:96: 15:8a:b5:50:41:7a:66:34:98:f0:ae:65:23:d0:d1:a7:42:42: 3b:8c:93:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIi4xytqtwPjkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZDBmMzBjN2QtYzZiOC00YjFlLWIyYmYtYTNjMzY1M2IxMDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZYFr4XfYPTLMa9TuggJ4BtVOJrUmKGnJzEX JVVco4n5we1bfFs0XHj0FJx/BBzSaWgVuogdVTc3cSMdsYVKpILAGuNPJTN+S9/x 8Nwn0G1YI5stnY7WRZpGUwf5lcLw6a07isOTiAGU5bqbnS0e2fivSyxFi6IHG63S 4vAY7g931HCc4gFezvJ421vUb2MDnIYeQ6Kucj9JGb9bvv4AKB4itp45lnbB5GZ1 FYs6Bh0sctG1fGmsxSTTQL6xaqzb7lSqHmMFEiGS35Il/NlI4jfq4UaQEXzIbIYC //PkBb863yjECiSk1BSodaZCmLTNMGqM2vqRXmcmgALCMuZQpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPIUNf0FY+oXLjnoX6ZeCkYYfZ7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzhiZDk4MGItYTQ1NC0z Y2RiLWIwODAtZjkzM2RkN2YwMzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbCgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChE4jqC0Y1mGujkQz2x77o5A5Dx8gqNn5ljHHOltlgp0wH3a3IX7LbR BqbQ9a387w4PmMiHprsfTq7nzHI0jLmUj+GDWBPxL0ewjWX6mkGbp5TmtNN5pjJr AklnIWZVGyTS9CHbX1JLLjEXDsEymgxcPw/+e+XGt32gaKt3AoXxSEIE20E7T3YN i5QwwyeifgKff9IzTaRhji3B4bGQKLBKqppWeds0ghHjnTEo+mX/YCBOcJKxfZpP nbPCUhawGcm+JDIdkk9w7ylnDNMVBPRpHpu8JEU/UpezXO/Rv5AWsgGogoGkUr/e lhWKtVBBemY0mPCuZSPQ0adCQjuMk1Q= -----END CERTIFICATE-----Generated at Sun Nov 1 21:06:46 2026 by rpki-client