$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa File: dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa (raw, json) Hash identifier: dTbg/ej50RaAVE23+x1j7vsLyVKFIu2GfNQzIGcQ8T4= Subject key identifier: 7A:30:F1:AE:3B:3F:9A:CF:36:36:84:A5:EA:F4:5E:DC:C6:5D:F0:CC Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A6888373764832400F4DFC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.44.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:88:37:37:64:83:24:00:f4:df:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=30b1f473-d11f-469e-97aa-7a5c7c8968da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b4:69:31:d2:b9:11:18:30:60:ca:7e:25:2e: a1:b3:e9:5b:d5:3e:e9:a5:43:e8:45:5f:c0:d4:54: 62:89:95:6e:cd:95:c3:4b:cc:10:9f:ed:54:7b:56: 54:e3:fc:0b:b5:c7:b3:64:48:36:e0:16:93:6d:46: 21:8b:75:ae:da:15:18:60:34:3a:87:68:d6:04:68: 89:fa:d7:05:9e:46:24:1d:1c:7d:83:d8:a0:8c:23: 5e:26:c5:c2:9d:c5:f2:9e:55:b1:92:59:f3:e0:7d: 43:aa:cc:54:08:43:68:61:4c:14:5f:4b:e5:77:ce: 32:cc:03:cc:b9:3c:0b:60:24:60:ed:8b:90:22:a4: 69:96:2d:05:7f:86:53:b9:0c:c5:b4:ae:88:ae:19: d5:29:8d:a7:cd:7e:f8:28:08:84:ab:6a:d8:68:e5: f5:27:eb:02:40:76:f7:44:fa:c9:47:79:a4:87:97: b2:f4:ef:0c:7d:59:0a:cd:54:b8:36:60:1d:19:3e: a6:67:35:eb:ce:42:4c:3d:46:e8:a6:4a:fb:f5:aa: b1:da:33:0f:68:61:c6:10:a2:71:11:71:09:48:b6: 8b:9e:1e:33:ad:bc:47:15:94:47:d6:0e:62:52:1b: 7d:34:73:9f:18:35:26:72:d1:f1:92:20:8a:3f:ea: f1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:30:F1:AE:3B:3F:9A:CF:36:36:84:A5:EA:F4:5E:DC:C6:5D:F0:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/dfd968cd-f41b-3964-8ce9-0b6a4e17d2d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.44.0.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d5:ca:36:5c:b8:3e:1b:e9:18:4a:17:25:22:c9:8a:86:82: 90:81:97:42:81:4a:70:4f:19:85:ab:6e:19:70:68:0a:cd:2d: ad:ea:6a:ea:38:aa:7d:d8:4d:e1:f1:ae:5e:e7:ff:50:9e:71: cd:30:69:8d:02:d1:a2:0d:d8:3a:7f:53:3a:dd:72:7e:bc:58: 66:10:ff:a6:ec:91:94:10:da:7f:bf:d7:f0:17:65:cd:b7:91: 10:96:fc:bf:83:16:77:f6:26:4b:d0:b1:3f:b4:d1:77:be:c6: f5:08:dc:89:1e:e9:ab:78:31:cd:a7:b2:2b:fc:97:f2:6b:cc: 08:68:f3:c9:e1:83:92:87:68:2a:8d:9c:cc:1d:c5:c7:76:a6: bb:35:20:33:85:54:27:4a:82:df:fc:82:dd:6e:84:0b:e1:3b: 90:af:a7:8c:01:d0:86:09:b6:f5:58:6c:03:61:cd:0f:2e:bc: 2a:bb:65:fa:21:96:2f:68:bd:4d:e0:b5:63:d1:14:24:be:f5: e6:15:b6:07:95:6e:6b:8e:12:18:f5:ac:1c:c7:5e:ea:eb:2d: 6f:f4:b7:70:cf:77:6e:0c:96:66:c5:57:ac:f5:5c:a0:be:1e: c4:fb:8f:b7:aa:c8:95:80:30:32:74:81:db:cc:13:64:f8:ce: 02:b0:e4:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaIg3N2SDJAD038AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk MzBiMWY0NzMtZDExZi00NjllLTk3YWEtN2E1YzdjODk2OGRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrRpMdK5ERgwYMp+JS6hs+lb1T7ppUPoRV/A 1FRiiZVuzZXDS8wQn+1Ue1ZU4/wLtcezZEg24BaTbUYhi3Wu2hUYYDQ6h2jWBGiJ +tcFnkYkHRx9g9igjCNeJsXCncXynlWxklnz4H1DqsxUCENoYUwUX0vld84yzAPM uTwLYCRg7YuQIqRpli0Ff4ZTuQzFtK6IrhnVKY2nzX74KAiEq2rYaOX1J+sCQHb3 RPrJR3mkh5ey9O8MfVkKzVS4NmAdGT6mZzXrzkJMPUbopkr79aqx2jMPaGHGEKJx EXEJSLaLnh4zrbxHFZRH1g5iUht9NHOfGDUmctHxkiCKP+rxUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHow8a47P5rPNjaEper0XtzGXfDMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZGZkOTY4Y2QtZjQxYi0z OTY0LThjZTktMGI2YTRlMTdkMmQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGbCwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPVyjZcuD4b6RhKFyUiyYqGgpCBl0KBSnBPGYWrbhlwaArNLa3qauo4 qn3YTeHxrl7n/1Cecc0waY0C0aIN2Dp/Uzrdcn68WGYQ/6bskZQQ2n+/1/AXZc23 kRCW/L+DFnf2JkvQsT+00Xe+xvUI3Ike6at4Mc2nsiv8l/JrzAho88nhg5KHaCqN nMwdxcd2prs1IDOFVCdKgt/8gt1uhAvhO5Cvp4wB0IYJtvVYbANhzQ8uvCq7Zfoh li9ovU3gtWPRFCS+9eYVtgeVbmuOEhj1rBzHXurrLW/0t3DPd24MlmbFV6z1XKC+ HsT7j7eqyJWAMDJ0gdvME2T4zgKw5LQ= -----END CERTIFICATE-----Generated at Sun Nov 1 22:19:58 2026 by rpki-client