$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f05cab39-a2f0-3262-ad86-1d700d1c555d.roa File: f05cab39-a2f0-3262-ad86-1d700d1c555d.roa (raw, json) Hash identifier: dRtP5rW7XLuiUYfi8d9c66SEsZI+qo8YyaSL0QTds1c= Subject key identifier: 97:A6:25:F5:6F:D7:9B:D7:E2:E7:F3:68:9F:37:58:94:13:A3:40:E9 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E4588FD74CD0C61F787684A80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f05cab39-a2f0-3262-ad86-1d700d1c555d.roa Signing time: Tue 23 Jun 2026 22:35:18 +0000 ROA not before: Tue 23 Jun 2026 22:35:18 +0000 ROA not after: Mon 21 Sep 2026 22:35:18 +0000 asID: 5650 IP address blocks: 172.108.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:88:fd:74:cd:0c:61:f7:87:68:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:18 2026 GMT Not After : Sep 21 22:35:18 2026 GMT Subject: CN=a0f761d2-cf88-477a-815c-0486c66a68bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a5:76:79:c9:5e:55:be:77:0e:e9:39:34:54: c7:76:5f:8d:f1:cd:34:4e:2f:7f:d4:65:a8:fa:2b: d7:a4:ac:83:43:c5:53:32:ac:86:94:e8:e5:52:2c: 12:90:32:6c:b1:aa:f1:3c:46:95:e4:7e:42:67:a4: b2:5f:0d:d0:d7:9d:6f:68:77:a3:17:63:2d:4c:1e: f7:30:d0:08:32:9a:a6:9b:27:2b:0f:da:e3:26:a8: f0:7e:f4:f3:f7:97:96:eb:3c:b5:4d:c0:50:fa:69: cf:16:f3:c9:8c:ca:07:91:34:70:3b:ab:9a:13:05: 04:a5:3f:86:86:fd:64:72:da:3e:95:3a:a2:54:10: ff:06:c4:5e:6a:4c:f4:f5:f8:5a:69:c7:3e:bb:8c: 02:b2:b1:75:fd:37:ca:60:e3:29:ea:b2:4b:1e:ab: 2a:66:2f:e4:bd:be:ae:2f:c3:49:bc:05:4f:7d:d8: 23:94:d2:8d:56:16:1f:b6:76:4e:ec:51:51:b0:44: fb:50:61:a0:bf:16:2a:61:1c:a7:fa:50:52:5c:fa: c8:a6:22:e3:58:0e:90:a4:13:42:43:57:ad:a9:be: 5c:4c:54:34:6f:e3:cb:17:41:63:49:c5:f4:e1:d3: 6c:2a:55:57:86:89:0f:88:c8:a5:ad:c8:6f:a5:41: bd:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A6:25:F5:6F:D7:9B:D7:E2:E7:F3:68:9F:37:58:94:13:A3:40:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f05cab39-a2f0-3262-ad86-1d700d1c555d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:3a:d6:98:1e:42:03:fd:74:67:7d:3c:85:6e:7a:dc:0e:f5: 0a:cc:ec:10:8a:3a:65:4b:60:11:55:db:bc:ca:18:99:67:6d: 5a:6a:58:98:f3:06:0a:77:31:f1:17:23:08:76:83:e4:05:4e: 29:a3:d4:88:c4:43:62:8e:7a:96:0f:9c:b2:a2:aa:9e:69:cb: e9:bd:50:c3:81:39:6d:89:c5:95:c3:fc:2a:b1:96:98:6c:8a: 53:9b:ec:12:f1:c0:6a:6d:d3:3f:f3:95:7d:9b:30:b0:72:b4: 86:60:0b:78:f8:ad:45:ce:8c:ee:06:a6:10:15:db:ac:3b:9e: 88:22:2e:06:3a:5a:44:81:2c:26:a4:19:02:53:82:b6:da:59: 1f:3e:94:05:f4:a4:2e:8b:53:31:d1:5b:ba:94:b9:39:0b:ec: 13:21:c0:2c:24:5b:8c:91:b5:38:f3:4c:52:e6:b7:06:ca:8c: 0d:b8:b3:52:5e:21:4d:48:39:51:c0:0d:93:c2:74:88:a8:9b: 2a:cf:c3:7b:d5:65:db:a2:8e:b2:9a:b0:81:41:2d:49:95:6f: c1:1d:f0:71:d1:54:43:0b:dc:e7:5c:d6:c2:df:c3:97:83:05: 73:39:43:80:83:9b:85:ac:10:ae:67:dd:78:e7:9f:6f:78:56: d1:57:20:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiP10zQxh94doSoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUxOFoXDTI2MDkyMTIyMzUxOFowLzEtMCsGA1UEAxMk YTBmNzYxZDItY2Y4OC00NzdhLTgxNWMtMDQ4NmM2NmE2OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaV2ecleVb53Duk5NFTHdl+N8c00Ti9/1GWo +ivXpKyDQ8VTMqyGlOjlUiwSkDJssarxPEaV5H5CZ6SyXw3Q151vaHejF2MtTB73 MNAIMpqmmycrD9rjJqjwfvTz95eW6zy1TcBQ+mnPFvPJjMoHkTRwO6uaEwUEpT+G hv1kcto+lTqiVBD/BsReakz09fhaacc+u4wCsrF1/TfKYOMp6rJLHqsqZi/kvb6u L8NJvAVPfdgjlNKNVhYftnZO7FFRsET7UGGgvxYqYRyn+lBSXPrIpiLjWA6QpBNC Q1etqb5cTFQ0b+PLF0FjScX04dNsKlVXhokPiMilrchvpUG9VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJemJfVv15vX4ufzaJ83WJQTo0DpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjA1Y2FiMzktYTJmMC0z MjYyLWFkODYtMWQ3MDBkMWM1NTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACg61pgeQgP9dGd9PIVuetwO9QrM7BCKOmVLYBFV27zKGJlnbVpqWJjz Bgp3MfEXIwh2g+QFTimj1IjEQ2KOepYPnLKiqp5py+m9UMOBOW2JxZXD/Cqxlphs ilOb7BLxwGpt0z/zlX2bMLBytIZgC3j4rUXOjO4GphAV26w7nogiLgY6WkSBLCak GQJTgrbaWR8+lAX0pC6LUzHRW7qUuTkL7BMhwCwkW4yRtTjzTFLmtwbKjA24s1Je IU1IOVHADZPCdIiomyrPw3vVZduijrKasIFBLUmVb8Ed8HHRVEML3Odc1sLfw5eD BXM5Q4CDm4WsEK5n3Xjnn294VtFXIEc= -----END CERTIFICATE-----Generated at Mon Jul 20 13:47:14 2026 by rpki-client