$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa File: fde6d706-c935-303a-8a12-c12364df7823.roa (raw, json) Hash identifier: adwbXTBdjzWC9xBD+VvZ/kNeoYbIH5SzkDzvAe+TcpQ= Subject key identifier: E7:A0:97:2D:FA:71:FD:75:C4:1F:3E:8C:FD:02:7C:EE:66:EC:5C:B0 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E458906424DC50C99F874C6C0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa Signing time: Tue 23 Jun 2026 22:35:23 +0000 ROA not before: Tue 23 Jun 2026 22:35:23 +0000 ROA not after: Mon 21 Sep 2026 22:35:23 +0000 asID: 5650 IP address blocks: 172.108.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:45:89:06:42:4d:c5:0c:99:f8:74:c6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jun 23 22:35:23 2026 GMT Not After : Sep 21 22:35:23 2026 GMT Subject: CN=b0a038f9-bd53-4dcd-befb-7e1a4cea46f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:c7:9c:57:46:f9:f9:6e:ec:9a:26:b9:71:a7: 46:e0:6f:89:05:02:6c:b6:da:ab:12:3c:a6:ac:b4: 16:1e:f2:91:5d:a2:2f:6f:9a:dc:e9:7b:65:79:6f: 1a:54:8d:e3:14:f6:be:c3:57:d3:df:1c:0d:a1:29: 4e:95:ac:45:cd:d8:23:e7:9a:43:9e:be:62:f4:fb: 08:a7:b7:ef:47:45:73:38:fb:3f:ed:3c:d5:42:98: 97:48:dc:c6:e7:ba:21:94:da:50:1e:2f:87:0b:b5: 22:34:82:15:6e:21:54:7a:05:28:b3:a6:b0:93:47: 05:dd:e1:fa:79:0d:1d:56:fe:c7:a8:91:1a:8b:74: e7:dc:00:b2:ac:b2:d1:97:ed:15:ff:57:d0:cf:04: fc:e8:5c:87:ce:b9:b4:79:8d:f4:dc:b8:ee:13:8c: b6:41:fd:b8:a4:7c:df:23:d1:85:c7:b3:39:07:2e: 7e:ab:86:9c:28:0f:bf:b6:05:b7:c5:f4:46:20:8a: 2a:4c:2f:91:01:8e:47:b5:de:c2:29:e8:f9:04:92: 7f:86:a0:cf:68:b7:18:71:14:ab:63:9e:12:8b:a0: 04:0f:72:d5:35:43:2c:bd:4a:f3:39:5e:f7:0c:b7: 36:99:ab:3d:11:88:b1:bf:05:ae:92:e2:ca:5c:b6: e0:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A0:97:2D:FA:71:FD:75:C4:1F:3E:8C:FD:02:7C:EE:66:EC:5C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:5c:01:bf:48:e0:41:2a:8b:9d:38:c2:e8:2d:de:76:51:ba: 81:7b:e5:5d:2e:29:c8:c0:06:93:82:a6:a9:e8:54:2e:a7:3a: 94:61:d1:4f:d1:b6:0c:85:dd:26:f5:05:63:b8:b4:0d:ce:37: 09:c7:81:36:42:d5:71:83:0f:fb:65:df:00:33:2c:8f:2d:de: d3:ea:dc:5e:14:93:30:34:0a:be:d4:db:ae:22:58:68:a6:ab: 9d:00:61:5a:32:b9:cf:72:7a:82:56:97:4f:c6:42:18:02:86: f5:af:48:4c:f0:9c:71:01:47:2e:ff:88:c8:db:2e:43:b3:bf: 23:7a:dc:37:de:46:c2:c3:97:a6:dc:d2:c5:12:b5:0d:ac:21: 6a:44:ae:cb:0c:31:d9:3c:1d:66:e7:ea:16:78:30:bf:91:38: f2:bc:02:b9:7d:c1:cf:17:f2:cd:5b:26:17:9c:68:ea:15:bf: f2:c6:33:94:2c:87:0e:f5:f1:31:1a:f1:b4:9f:cd:a9:20:22: 79:7a:5f:3c:9d:7c:2b:71:2e:64:53:f5:ca:e3:5a:f9:45:d8: b6:11:0a:b3:15:e0:8f:c6:1a:08:8d:33:ec:03:69:52:3a:c4: 01:53:32:0a:4a:cb:8d:95:f5:ec:f5:8f:85:66:69:e5:c3:00: e9:0a:ad:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5FiQZCTcUMmfh0xsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDYyMzIyMzUyM1oXDTI2MDkyMTIyMzUyM1owLzEtMCsGA1UEAxMk YjBhMDM4ZjktYmQ1My00ZGNkLWJlZmItN2UxYTRjZWE0NmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9secV0b5+W7smia5cadG4G+JBQJsttqrEjym rLQWHvKRXaIvb5rc6XtleW8aVI3jFPa+w1fT3xwNoSlOlaxFzdgj55pDnr5i9PsI p7fvR0VzOPs/7TzVQpiXSNzG57ohlNpQHi+HC7UiNIIVbiFUegUos6awk0cF3eH6 eQ0dVv7HqJEai3Tn3ACyrLLRl+0V/1fQzwT86FyHzrm0eY303LjuE4y2Qf24pHzf I9GFx7M5By5+q4acKA+/tgW3xfRGIIoqTC+RAY5Htd7CKej5BJJ/hqDPaLcYcRSr Y54Si6AED3LVNUMsvUrzOV73DLc2mas9EYixvwWukuLKXLbg2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOegly36cf11xB8+jP0CfO5m7FywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmRlNmQ3MDYtYzkzNS0z MDNhLThhMTItYzEyMzY0ZGY3ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdcAb9I4EEqi504wugt3nZRuoF75V0uKcjABpOCpqnoVC6nOpRh0U/R tgyF3Sb1BWO4tA3ONwnHgTZC1XGDD/tl3wAzLI8t3tPq3F4UkzA0Cr7U264iWGim q50AYVoyuc9yeoJWl0/GQhgChvWvSEzwnHEBRy7/iMjbLkOzvyN63DfeRsLDl6bc 0sUStQ2sIWpErssMMdk8HWbn6hZ4ML+ROPK8Arl9wc8X8s1bJhecaOoVv/LGM5Qs hw718TEa8bSfzakgInl6XzydfCtxLmRT9crjWvlF2LYRCrMV4I/GGgiNM+wDaVI6 xAFTMgpKy42V9ez1j4VmaeXDAOkKrcg= -----END CERTIFICATE-----Generated at Mon Jul 20 13:47:14 2026 by rpki-client