$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa File: 31f66624-a6b9-3acd-938b-89b2386f5b28.roa (raw, json) Hash identifier: tF0V+qwKuDPREF/0nnbVNV6gfibLCXKppPrw1UxAHUw= Subject key identifier: 5F:D2:71:C7:24:FF:2F:90:8E:A2:06:86:E9:83:1F:B1:C6:6F:56:FA Certificate issuer: /CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Certificate serial: 010D0C9F4328584E9BE515301D4F7AD40C2737E0 Authority key identifier: B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa Signing time: Fri 24 Jul 2026 21:00:12 +0000 ROA not before: Fri 24 Jul 2026 21:00:12 +0000 ROA not after: Thu 22 Oct 2026 21:00:12 +0000 asID: 40788 IP address blocks: 108.168.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9b:e5:15:30:1d:4f:7a:d4:0c:27:37:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c29a0be-72a8-4894-8c0c-f4d26e3ae059 Validity Not Before: Jul 24 21:00:12 2026 GMT Not After : Oct 22 21:00:12 2026 GMT Subject: CN=8c9e6c75-5029-4b46-a25c-f077b28ea8fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b2:db:f8:dc:9f:f1:28:b3:58:2e:b4:5e:4a: 07:44:56:d5:e3:4f:a8:d9:4b:62:87:4c:f0:20:6d: 2b:5c:cc:73:ee:09:c5:f1:3c:d7:80:de:a9:8c:71: f7:e1:21:05:7f:ce:c8:e2:29:01:60:1d:f6:c8:f0: de:96:c3:61:91:4f:3b:61:70:b2:40:b3:74:dd:20: d6:2e:bb:e4:18:1c:6f:ee:8a:99:d3:d9:ad:b3:78: c1:5a:4d:c5:fe:62:dc:f2:59:60:17:11:a4:39:67: 97:cf:a3:ac:61:7b:87:6d:3c:60:3b:74:09:94:7e: 63:7a:91:8b:51:4c:0d:25:f1:ed:99:e2:93:ed:eb: 89:33:44:3d:b2:2e:e2:3a:b8:31:e7:b3:fb:5b:9e: eb:d6:63:0d:82:38:24:8f:58:b2:87:07:47:38:15: 6f:cd:75:17:fa:54:19:0c:29:b8:ca:2a:4a:aa:4b: 28:4f:6c:b7:f0:86:a2:d3:d5:78:19:13:da:e7:cc: 48:80:c6:0d:8a:48:c3:c7:37:04:7e:30:dd:54:98: 96:d5:92:7c:92:e9:04:1f:c2:4b:5b:f5:5c:c4:24: 62:78:91:ed:8d:6d:9d:f3:e4:a8:86:a9:a1:bf:e1: 7f:4c:f3:7a:c6:28:7d:49:d7:5f:30:40:2e:f6:a5: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:D2:71:C7:24:FF:2F:90:8E:A2:06:86:E9:83:1F:B1:C6:6F:56:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/31f66624-a6b9-3acd-938b-89b2386f5b28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.crl X509v3 Authority Key Identifier: keyid:B7:E9:47:87:73:DE:ED:46:AD:72:C6:3F:12:6D:10:AE:B1:56:99:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1c29a0be-72a8-4894-8c0c-f4d26e3ae059.cer sbgp-ipAddrBlock: critical IPv4: 108.168.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:55:18:31:14:58:cb:73:e9:d5:df:65:e9:59:4a:c2:e2:1d: 93:1c:22:bf:8c:52:5d:56:9d:ad:ec:52:30:d5:99:bd:ae:7e: 2c:b0:00:64:cc:5c:df:05:8c:86:12:07:10:26:d0:50:5d:73: d2:b8:c1:f8:3e:3b:71:39:95:f0:23:d1:6e:fb:f6:0d:dc:c6: 9c:b6:fc:61:d8:90:d5:99:8b:bd:08:16:34:9f:63:29:1a:d1: f3:07:2e:f7:ea:96:1b:54:27:67:48:94:7d:23:f6:9c:81:58: 5a:b3:1a:1b:1d:81:e6:83:40:e2:4b:9c:f6:11:1a:8c:19:9c: 74:2b:b2:d2:b4:f3:c8:44:8d:90:a3:b9:2e:69:f9:fc:36:2e: fc:77:00:d6:34:a3:0a:2c:ca:a0:4e:31:3d:14:31:23:d4:e7: 77:99:bd:50:ea:65:29:a5:2d:a7:40:b0:e3:1d:f3:0a:c6:43: 03:78:b4:e8:aa:f2:92:96:cc:d8:e6:53:59:94:28:f8:c2:27: d3:87:eb:d7:c6:5a:8f:f1:13:41:b3:99:d3:19:a9:8e:3c:34: 13:ca:6e:1a:e2:d1:08:83:0b:7f:1f:35:1d:76:1b:1b:35:90: d5:79:76:dc:df:96:31:b4:ca:82:fa:71:70:fa:05:83:a5:74: 15:80:8c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6b5RUwHU961AwnN+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWMyOWEwYmUtNzJhOC00ODk0LThjMGMtZjRkMjZlM2Fl MDU5MB4XDTI2MDcyNDIxMDAxMloXDTI2MTAyMjIxMDAxMlowLzEtMCsGA1UEAxMk OGM5ZTZjNzUtNTAyOS00YjQ2LWEyNWMtZjA3N2IyOGVhOGZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Lb+Nyf8SizWC60XkoHRFbV40+o2Utih0zw IG0rXMxz7gnF8TzXgN6pjHH34SEFf87I4ikBYB32yPDelsNhkU87YXCyQLN03SDW LrvkGBxv7oqZ09mts3jBWk3F/mLc8llgFxGkOWeXz6OsYXuHbTxgO3QJlH5jepGL UUwNJfHtmeKT7euJM0Q9si7iOrgx57P7W57r1mMNgjgkj1iyhwdHOBVvzXUX+lQZ DCm4yipKqksoT2y38Iai09V4GRPa58xIgMYNikjDxzcEfjDdVJiW1ZJ8kukEH8JL W/VcxCRieJHtjW2d8+Sohqmhv+F/TPN6xih9SddfMEAu9qVk7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/Sccck/y+QjqIGhumDH7HGb1b6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5 YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQyNmUzYWUwNTkvMzFmNjY2MjQtYTZiOS0z YWNkLTkzOGItODliMjM4NmY1YjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWMyOWEwYmUtNzJhOC00ODk0LThj MGMtZjRkMjZlM2FlMDU5LzFjMjlhMGJlLTcyYTgtNDg5NC04YzBjLWY0ZDI2ZTNh ZTA1OS5jcmwwHwYDVR0jBBgwFoAUt+lHh3Pe7UatcsY/Em0QrrFWmR4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xYzI5YTBiZS03MmE4LTQ4OTQtOGMwYy1mNGQy NmUzYWUwNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHbKgAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJVGDEUWMtz6dXfZelZSsLiHZMcIr+MUl1Wna3sUjDVmb2ufiywAGTM XN8FjIYSBxAm0FBdc9K4wfg+O3E5lfAj0W779g3cxpy2/GHYkNWZi70IFjSfYyka 0fMHLvfqlhtUJ2dIlH0j9pyBWFqzGhsdgeaDQOJLnPYRGowZnHQrstK088hEjZCj uS5p+fw2Lvx3ANY0owosyqBOMT0UMSPU53eZvVDqZSmlLadAsOMd8wrGQwN4tOiq 8pKWzNjmU1mUKPjCJ9OH69fGWo/xE0GzmdMZqY48NBPKbhri0QiDC38fNR12Gxs1 kNV5dtzfljG0yoL6cXD6BYOldBWAjP4= -----END CERTIFICATE-----Generated at Wed Jul 29 05:13:32 2026 by rpki-client