$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa File: d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa (raw, json) Hash identifier: 90zR99yXMMxZAsKsGlLh/oXnc5KGM5zgHLsHbY+xDFY= Subject key identifier: 7A:0D:11:65:92:AE:16:62:83:97:6F:BE:C8:4E:35:07:97:9A:3C:D5 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A68A6B1271C1AA887F28900 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.17.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:a6:b1:27:1c:1a:a8:87:f2:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=2ebe71e7-e6d1-41b8-9e55-c694c0994a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:01:54:ef:32:48:f4:14:1c:a4:7b:28:c0:14: 09:e7:26:5a:ec:62:93:3d:23:7a:c5:82:60:5d:f9: a7:83:ca:c1:dd:66:6d:09:81:da:bc:11:49:f1:ac: 93:a3:69:6e:15:18:f3:9e:b7:e2:da:86:ad:75:94: a3:96:e8:bd:2b:fa:88:b5:3d:1e:90:71:4a:e1:b7: 38:65:3a:90:54:a6:88:a5:fb:4a:73:24:ee:43:b3: a4:d1:9f:b2:43:24:59:46:fc:71:20:15:27:5a:e2: b4:20:71:e9:2c:89:c1:a5:86:b1:46:e2:31:06:ea: da:5d:25:0a:0c:ce:0e:45:b4:bc:06:c5:14:04:6e: 78:4c:f0:18:32:cb:57:eb:f8:26:62:9c:ef:ab:b0: 39:1e:c1:3e:74:ac:e9:cb:f1:5f:06:76:f0:1f:0b: 2e:bf:95:a2:f3:aa:37:4d:ff:6c:b3:bb:d3:ee:ff: 8b:81:37:58:9c:67:4a:9a:5c:01:83:05:c0:31:87: 02:49:48:23:40:56:b8:21:b9:aa:f2:c2:ea:b5:35: 3a:26:07:6d:c0:7a:97:26:19:ae:ce:c5:6a:60:48: aa:b2:80:a0:7e:36:71:02:fb:4e:17:3d:8d:6c:a8: 59:1a:99:54:8b:85:b3:18:af:fc:c7:4e:68:4e:37: 06:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:0D:11:65:92:AE:16:62:83:97:6F:BE:C8:4E:35:07:97:9A:3C:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4f4c453-9edf-3fe7-b56e-6348d4db1839.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.17.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:c3:a1:98:85:ff:0f:f0:05:46:7e:f4:2e:e7:d9:b1:2b:c7: 8f:36:57:f0:6b:11:0f:d7:dc:ff:c5:25:27:80:10:20:2d:e5: 78:d9:18:25:fa:51:d2:8e:9d:2b:50:8a:76:b3:14:88:ef:86: 97:25:d1:7c:22:3b:f7:f6:48:9e:5b:0d:1d:68:ea:f2:a3:ee: 40:bf:04:96:c9:ce:f6:5d:64:58:72:a9:1a:eb:e7:f2:ca:06: e6:e7:53:43:9a:b8:86:5c:3c:e2:fd:c5:33:8c:3f:79:1d:e4: d4:e7:cc:4c:ed:e4:fd:72:45:2a:88:23:f1:8f:51:fb:e4:19: 9b:7d:31:b7:b9:e9:d8:88:0b:3b:e2:44:3f:07:d8:e5:bf:4c: ed:0d:4a:94:9a:94:4e:83:ef:d1:b6:0b:04:ce:d5:2e:4b:9e: 64:82:22:1c:fd:5b:24:23:71:c5:b8:48:fa:d8:71:39:86:0e: 3b:f0:3c:52:0a:e2:ee:4c:f1:86:1a:a4:77:ff:b8:b8:cf:88: ef:db:98:0d:e9:56:e8:d5:45:a8:52:93:a2:b0:c5:e0:1c:19: 4a:08:56:f3:53:c6:01:c9:bc:5e:2c:ba:e7:40:bf:f2:58:2f: e1:64:e5:f4:26:ae:9e:c3:6f:73:1a:a3:4a:a6:3e:23:23:c8: dd:87:b9:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaKaxJxwaqIfyiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MmViZTcxZTctZTZkMS00MWI4LTllNTUtYzY5NGMwOTk0YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgFU7zJI9BQcpHsowBQJ5yZa7GKTPSN6xYJg Xfmng8rB3WZtCYHavBFJ8ayTo2luFRjznrfi2oatdZSjlui9K/qItT0ekHFK4bc4 ZTqQVKaIpftKcyTuQ7Ok0Z+yQyRZRvxxIBUnWuK0IHHpLInBpYaxRuIxBuraXSUK DM4ORbS8BsUUBG54TPAYMstX6/gmYpzvq7A5HsE+dKzpy/FfBnbwHwsuv5Wi86o3 Tf9ss7vT7v+LgTdYnGdKmlwBgwXAMYcCSUgjQFa4Ibmq8sLqtTU6JgdtwHqXJhmu zsVqYEiqsoCgfjZxAvtOFz2NbKhZGplUi4WzGK/8x05oTjcGnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHoNEWWSrhZig5dvvshONQeXmjzVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDRmNGM0NTMtOWVkZi0z ZmU3LWI1NmUtNjM0OGQ0ZGIxODM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbBGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjDoZiF/w/wBUZ+9C7n2bErx482V/BrEQ/X3P/FJSeAECAt5XjZGCX6 UdKOnStQinazFIjvhpcl0XwiO/f2SJ5bDR1o6vKj7kC/BJbJzvZdZFhyqRrr5/LK BubnU0OauIZcPOL9xTOMP3kd5NTnzEzt5P1yRSqII/GPUfvkGZt9Mbe56diICzvi RD8H2OW/TO0NSpSalE6D79G2CwTO1S5LnmSCIhz9WyQjccW4SPrYcTmGDjvwPFIK 4u5M8YYapHf/uLjPiO/bmA3pVujVRahSk6KwxeAcGUoIVvNTxgHJvF4suudAv/JY L+Fk5fQmrp7Db3Mao0qmPiMjyN2HuaY= -----END CERTIFICATE-----Generated at Mon Nov 2 06:59:17 2026 by rpki-client