$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa File: f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa (raw, json) Hash identifier: vwB0b3WmWFkJpKru+YSn9/zJBCcWxch7xwTpXJXS1sw= Subject key identifier: CA:4B:13:7C:E7:B8:83:AA:69:BF:8A:15:46:67:E5:3C:F2:E3:3E:C6 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584F9A68A96563365AE825B9FBE0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 701 IP address blocks: 108.20.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:a9:65:63:36:5a:e8:25:b9:fb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=51244fb8-8e9c-4384-b586-dc123bde0059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:19:64:b0:5a:fa:6d:c5:be:70:11:70:4c:ce: 44:15:b2:04:9c:08:07:3f:34:a6:ac:ec:12:c0:0d: e5:95:0a:6f:50:98:f8:dd:18:e2:c2:c8:93:f1:8e: 80:f7:61:23:f9:7a:92:45:e3:37:f3:f1:55:80:61: c7:84:40:4b:36:0c:d7:58:1b:d0:7a:e3:e0:c0:98: d0:a5:d6:34:9c:c6:06:ca:15:d2:8d:0b:17:5a:aa: 39:73:a5:f7:1b:b1:f1:7b:3e:4b:a3:50:93:70:f3: 50:5b:1c:43:a7:9e:cd:25:2b:21:15:1b:ac:42:ef: 91:18:07:38:49:96:73:2f:ea:40:13:e5:3a:a5:6f: 15:55:0a:72:e4:9c:69:a2:3d:a4:a2:89:17:1d:6a: f6:1c:ff:9c:43:3c:81:f0:84:52:5c:5c:a0:60:2a: dd:44:fc:c6:30:40:34:16:43:36:34:6f:a9:c1:a6: d0:1d:14:24:0c:be:e2:76:8c:40:f8:01:1c:da:5c: 3d:cb:d9:7b:15:7c:35:06:03:fe:da:97:f4:5a:03: 32:b7:42:76:05:68:6b:e9:1d:03:6f:48:1f:41:dc: 40:14:b2:39:af:31:2b:32:38:5d:19:9e:90:21:56: 85:05:27:31:f0:71:26:94:dd:0d:57:94:75:37:eb: 5b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4B:13:7C:E7:B8:83:AA:69:BF:8A:15:46:67:E5:3C:F2:E3:3E:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/f9e2d9d2-614f-3c2e-afe1-812335cb7a4a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.20.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:a7:bc:ee:68:d6:99:e2:c9:95:4a:0c:20:df:01:57:ad:47: 61:11:2e:dc:ea:35:fe:76:07:9b:af:bf:18:6a:61:8c:05:10: ff:fe:34:20:9b:4d:b2:d5:c2:2f:ce:be:24:91:9a:d5:6b:1b: dc:dd:3b:f8:91:9b:ed:ec:6a:4f:20:25:1e:a7:80:7b:19:6e: d5:97:56:18:bb:13:bb:f0:25:e7:98:e3:7f:b9:e0:c0:32:f2: d9:92:55:89:34:ec:f6:da:b1:e8:17:31:9b:59:dc:5e:82:4f: ee:f1:9d:d6:56:d9:36:fd:ed:28:39:1e:3f:01:bc:ec:6a:f7: ea:d2:4f:64:99:b0:3f:e2:3a:f7:5b:20:cb:0c:84:8c:0a:76: f3:6a:90:e6:da:45:03:a5:dc:51:21:fc:59:46:74:74:6d:48: c7:96:f3:b9:6f:f2:e6:bf:09:1c:b7:70:71:f6:8a:21:88:95: fd:0c:20:22:07:8f:a5:7d:59:98:ff:3d:15:3e:e3:fd:34:95: f0:0e:cb:4e:52:07:8f:d0:7a:ce:de:5f:7c:8a:af:70:5b:8f: ec:80:1f:bb:bc:1f:a7:6a:63:4d:df:45:fb:48:eb:b5:aa:22: 63:e0:9e:89:56:11:f0:9e:25:e3:34:7a:3d:0b:3a:1c:b5:57: 66:bb:97:5b -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE+aaKllYzZa6CW5++AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk NTEyNDRmYjgtOGU5Yy00Mzg0LWI1ODYtZGMxMjNiZGUwMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhlksFr6bcW+cBFwTM5EFbIEnAgHPzSmrOwS wA3llQpvUJj43RjiwsiT8Y6A92Ej+XqSReM38/FVgGHHhEBLNgzXWBvQeuPgwJjQ pdY0nMYGyhXSjQsXWqo5c6X3G7Hxez5Lo1CTcPNQWxxDp57NJSshFRusQu+RGAc4 SZZzL+pAE+U6pW8VVQpy5Jxpoj2kookXHWr2HP+cQzyB8IRSXFygYCrdRPzGMEA0 FkM2NG+pwabQHRQkDL7idoxA+AEc2lw9y9l7FXw1BgP+2pf0WgMyt0J2BWhr6R0D b0gfQdxAFLI5rzErMjhdGZ6QIVaFBScx8HEmlN0NV5R1N+tb2wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFMpLE3znuIOqab+KFUZn5Tzy4z7GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZjllMmQ5ZDItNjE0Zi0z YzJlLWFmZTEtODEyMzM1Y2I3YTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbBQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAtKe87mjWmeLJlUoMIN8BV61HYREu3Oo1/nYHm6+/GGphjAUQ//40IJtN stXCL86+JJGa1Wsb3N07+JGb7exqTyAlHqeAexlu1ZdWGLsTu/Al55jjf7ngwDLy 2ZJViTTs9tqx6Bcxm1ncXoJP7vGd1lbZNv3tKDkePwG87Gr36tJPZJmwP+I691sg ywyEjAp282qQ5tpFA6XcUSH8WUZ0dG1Ix5bzuW/y5r8JHLdwcfaKIYiV/QwgIgeP pX1ZmP89FT7j/TSV8A7LTlIHj9B6zt5ffIqvcFuP7IAfu7wfp2pjTd9F+0jrtaoi Y+CeiVYR8J4l4zR6PQs6HLVXZruXWw== -----END CERTIFICATE-----Generated at Sat Oct 31 21:15:20 2026 by rpki-client