
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
File: f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa (raw, json)
Hash identifier: atOa/ierpsViim7JB833IkYxWBN/D+s+fUVApJsnNp8=
Subject key identifier: 60:B8:2E:83:D8:51:3D:B2:7E:E3:08:E6:2A:F9:63:28:4C:4E:AF:DF
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584EF7176B9620553D04C75C5AC0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
Signing time: Wed 26 Aug 2026 13:00:12 +0000
ROA not before: Wed 26 Aug 2026 13:00:12 +0000
ROA not after: Tue 24 Nov 2026 14:00:12 +0000
asID: 701
IP address blocks: 108.22.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 15 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:f7:17:6b:96:20:55:3d:04:c7:5c:5a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Aug 26 13:00:12 2026 GMT
Not After : Nov 24 14:00:12 2026 GMT
Subject: CN=c1dbed23-cc4f-489b-a028-f351ff3b4945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:61:18:ba:bc:e9:cb:14:71:03:fc:3c:65:64:
8b:04:e0:2c:3e:d5:cf:a3:6c:2f:3a:ff:5c:e3:f3:
41:d1:ed:d9:9a:58:14:eb:02:32:fa:76:6f:e6:df:
67:af:93:93:5e:07:1b:71:30:68:8d:44:87:5c:09:
1d:e1:2b:4c:ef:6b:62:e4:24:06:d0:c4:7f:f4:30:
ca:2e:2a:33:16:44:12:cd:d3:02:1a:e7:c8:21:e4:
1b:72:90:06:3d:8b:84:b0:b3:4e:0b:e0:37:45:47:
40:3a:76:64:e4:73:d4:38:4e:b8:f6:7a:06:09:52:
05:6c:ba:aa:a1:59:9a:fb:55:97:4a:ec:e8:bd:f3:
42:01:7b:4c:1a:13:1b:49:34:89:71:73:ab:a3:d1:
7f:3d:7e:84:61:c0:a9:d1:e6:95:92:64:41:a8:b8:
6c:61:4f:a1:8f:f0:1c:de:a1:9e:89:d3:87:fe:10:
be:c2:0d:9c:89:0d:8d:2a:7c:5d:4c:61:31:13:f6:
19:b8:f4:1f:55:e7:50:8a:74:83:99:6a:6a:bd:8e:
8b:5b:2e:7d:70:c2:fc:cf:41:22:0a:8d:55:2c:92:
34:8a:df:6f:a9:3d:7a:96:c6:64:02:50:fd:33:3e:
80:a8:b8:99:22:b4:75:0d:82:20:58:24:08:77:45:
9f:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B8:2E:83:D8:51:3D:B2:7E:E3:08:E6:2A:F9:63:28:4C:4E:AF:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f7ac0d29-96d6-329d-a0fa-f81f09fbdeb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv4:
108.22.10.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:27:4d:f0:d5:c0:df:87:b1:f8:d8:e4:2a:20:2a:dd:27:e5:
9c:e7:4d:9c:3a:d7:ff:28:b3:28:6a:76:7f:ff:d8:a1:22:62:
6a:c9:4e:ec:8e:32:9b:a6:e3:21:a0:e5:d5:5f:f8:32:0d:f5:
9f:d0:43:a8:ca:27:b1:77:62:01:ee:53:83:59:85:f4:51:8c:
6e:e2:54:fb:1f:ad:f4:d9:18:ba:6d:cc:53:3b:9f:c5:b3:b4:
d5:02:00:73:e2:fd:a0:22:0f:ae:2d:01:08:69:88:92:c6:6b:
a8:c8:1c:25:30:6f:1b:d8:fe:fd:2d:6c:2c:0f:bd:07:a5:66:
ce:20:26:dc:76:ae:c2:9a:16:56:53:29:b7:f1:33:28:98:a3:
cd:c5:93:8d:9c:ce:66:93:e0:d0:60:7f:3c:ae:1e:44:5a:6e:
ca:6c:2a:a1:d8:43:dc:6a:d2:cb:07:e5:fc:7e:51:d7:5a:68:
05:31:f5:81:35:5f:53:2a:46:6e:55:5b:ab:8a:58:1d:15:30:
6f:29:e7:0b:2e:32:33:41:53:5d:84:a2:72:81:a2:5b:cf:9d:
6b:9e:c2:de:76:2b:43:fb:d4:9b:94:c4:12:a7:94:e3:f1:4f:
ca:a8:11:8c:1b:69:93:11:4b:53:72:ec:22:2a:a0:9d:74:77:
a3:87:ed:15
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2uWIFU9BMdcWsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk
YzFkYmVkMjMtY2M0Zi00ODliLWEwMjgtZjM1MWZmM2I0OTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGEYurzpyxRxA/w8ZWSLBOAsPtXPo2wvOv9c
4/NB0e3ZmlgU6wIy+nZv5t9nr5OTXgcbcTBojUSHXAkd4StM72ti5CQG0MR/9DDK
LiozFkQSzdMCGufIIeQbcpAGPYuEsLNOC+A3RUdAOnZk5HPUOE649noGCVIFbLqq
oVma+1WXSuzovfNCAXtMGhMbSTSJcXOro9F/PX6EYcCp0eaVkmRBqLhsYU+hj/Ac
3qGeidOH/hC+wg2ciQ2NKnxdTGExE/YZuPQfVedQinSDmWpqvY6LWy59cML8z0Ei
Co1VLJI0it9vqT16lsZkAlD9Mz6AqLiZIrR1DYIgWCQId0WflQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGC4LoPYUT2yfuMI5ir5YyhMTq/fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjdhYzBkMjktOTZkNi0z
MjlkLWEwZmEtZjgxZjA5ZmJkZWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbBYKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYnTfDVwN+HsfjY5CogKt0n5ZznTZw61/8osyhqdn//2KEiYmrJTuyO
Mpum4yGg5dVf+DIN9Z/QQ6jKJ7F3YgHuU4NZhfRRjG7iVPsfrfTZGLptzFM7n8Wz
tNUCAHPi/aAiD64tAQhpiJLGa6jIHCUwbxvY/v0tbCwPvQelZs4gJtx2rsKaFlZT
KbfxMyiYo83Fk42czmaT4NBgfzyuHkRabspsKqHYQ9xq0ssH5fx+UddaaAUx9YE1
X1MqRm5VW6uKWB0VMG8p5wsuMjNBU12EonKBolvPnWuewt52K0P71JuUxBKnlOPx
T8qoEYwbaZMRS1Ny7CIqoJ10d6OH7RU=
-----END CERTIFICATE-----
Generated at Sun Sep 13 17:27:50 2026 by rpki-client