$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa File: 98da9661-0d10-3896-a771-a2ee1d490a36.roa (raw, json) Hash identifier: r7bPBC8RQpjVMUkMcyA1F2CJ5OuxeTWyAzHjlHEQ640= Subject key identifier: 43:BC:FF:0B:0C:66:BF:D6:10:31:3E:1C:7E:6A:BA:52:A6:F4:27:55 Certificate issuer: /CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Certificate serial: 010D0C9F4328584EA7872D9FF0310785E9C21F00 Authority key identifier: 7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 29867 IP address blocks: 72.10.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:87:2d:9f:f0:31:07:85:e9:c2:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38fbc481-a2c7-4379-b2c0-de4df060e2b4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c31d1180-e7f3-41cd-95d1-364f9176030c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c5:ce:31:a9:94:01:f5:83:bd:2d:1b:be:0e: 93:ff:f5:fa:0f:ab:1f:25:60:0c:63:21:f5:3b:01: 01:90:3d:49:5b:ef:e3:97:bf:af:07:8d:f7:b8:1e: 6f:0f:3c:3e:5f:12:6b:c1:b9:72:89:2d:2b:49:8c: a4:30:76:37:db:7e:8f:06:44:14:f1:55:9b:13:3d: 9d:68:70:d1:d2:35:3b:dd:3a:4b:00:a6:ae:e9:43: 4f:4f:df:a8:2f:c5:a0:2c:5a:83:60:ba:62:95:d6: 87:30:a4:54:af:a0:d3:6a:97:2c:63:56:31:98:42: 95:ed:e8:76:d2:8a:fc:a3:22:1e:53:49:42:29:f8: a7:b0:af:cb:c9:a9:4e:90:48:bb:31:a5:7d:ca:89: 90:e5:04:eb:a1:11:ec:9d:68:a9:8e:11:fb:c2:ab: 52:86:ab:0f:6f:c3:57:ef:b5:30:41:22:70:43:5a: fa:dd:7a:6f:66:9b:86:12:3b:ea:c6:23:38:63:a8: f6:0f:a8:45:59:61:3c:c2:68:2a:6a:b0:62:ae:49: c1:c1:f7:38:aa:e2:6a:34:fa:9a:5e:88:c5:a3:4a: 9d:08:64:d9:c0:70:d5:ae:b5:49:ae:ac:f5:3b:51: 60:7e:5b:62:2f:ad:91:ec:29:8d:83:bc:00:7f:59: f9:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:BC:FF:0B:0C:66:BF:D6:10:31:3E:1C:7E:6A:BA:52:A6:F4:27:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/98da9661-0d10-3896-a771-a2ee1d490a36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4/38fbc481-a2c7-4379-b2c0-de4df060e2b4.crl X509v3 Authority Key Identifier: keyid:7B:B5:AC:45:B2:E5:0E:0A:BB:EE:06:BC:E3:48:23:10:1B:27:0B:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38fbc481-a2c7-4379-b2c0-de4df060e2b4.cer sbgp-ipAddrBlock: critical IPv4: 72.10.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:07:ec:0e:a5:fd:a1:38:22:0a:56:6c:6b:31:ea:15:16:23: 4c:30:2b:18:99:7e:46:af:a9:31:f5:fb:9e:e8:81:1f:e4:4e: 77:1b:49:42:e6:ae:b2:66:1b:2d:39:7e:bb:ae:0d:67:71:91: dd:98:d5:68:dd:f0:75:d4:6d:18:23:48:49:1f:99:8b:ba:b6: 77:6b:8b:40:59:2a:41:0f:f1:96:97:dd:98:97:7b:5c:b8:c8: 6a:b6:8d:39:ab:97:cd:f3:04:d4:b5:5e:2d:9a:55:c0:75:9c: 9e:5b:6d:d7:8a:17:cb:33:44:a5:40:cc:36:5c:b1:38:33:5e: 80:5b:8f:40:2a:2a:c7:1a:6b:b0:54:e9:6d:31:bf:9e:d8:36: 33:07:44:f0:0c:b1:8a:47:07:5d:7e:dd:bd:a4:d4:b4:0c:6f: f4:41:9c:9f:dd:36:01:55:77:6b:f5:b8:05:01:63:45:3f:c0: 07:26:89:2d:85:46:aa:74:bd:17:16:9d:2f:55:ef:c7:02:ab: 6c:cc:bb:6a:1a:1b:64:a9:86:63:62:1d:80:96:e0:78:9a:9e: 62:e4:0f:68:d2:f1:f9:6c:20:bf:e5:d1:49:17:e9:69:ac:a5: ab:33:80:67:3e:5a:6c:34:6d:8b:e0:8f:38:85:de:83:e6:86: dd:cf:76:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nhy2f8DEHhenCHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhmYmM0ODEtYTJjNy00Mzc5LWIyYzAtZGU0ZGYwNjBl MmI0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzMxZDExODAtZTdmMy00MWNkLTk1ZDEtMzY0ZjkxNzYwMzBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8XOMamUAfWDvS0bvg6T//X6D6sfJWAMYyH1 OwEBkD1JW+/jl7+vB433uB5vDzw+XxJrwblyiS0rSYykMHY3236PBkQU8VWbEz2d aHDR0jU73TpLAKau6UNPT9+oL8WgLFqDYLpildaHMKRUr6DTapcsY1YxmEKV7eh2 0or8oyIeU0lCKfinsK/LyalOkEi7MaV9yomQ5QTroRHsnWipjhH7wqtShqsPb8NX 77UwQSJwQ1r63XpvZpuGEjvqxiM4Y6j2D6hFWWE8wmgqarBirknBwfc4quJqNPqa XojFo0qdCGTZwHDVrrVJrqz1O1FgfltiL62R7CmNg7wAf1n5zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEO8/wsMZr/WEDE+HH5qulKm9CdVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZi YzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRkZjA2MGUyYjQvOThkYTk2NjEtMGQxMC0z ODk2LWE3NzEtYTJlZTFkNDkwYTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzhmYmM0ODEtYTJjNy00Mzc5LWIy YzAtZGU0ZGYwNjBlMmI0LzM4ZmJjNDgxLWEyYzctNDM3OS1iMmMwLWRlNGRmMDYw ZTJiNC5jcmwwHwYDVR0jBBgwFoAUe7WsRbLlDgq77ga840gjEBsnCwwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zOGZiYzQ4MS1hMmM3LTQzNzktYjJjMC1kZTRk ZjA2MGUyYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASApsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoH7A6l/aE4IgpWbGsx6hUWI0wwKxiZfkavqTH1+57ogR/kTncbSULm rrJmGy05fruuDWdxkd2Y1Wjd8HXUbRgjSEkfmYu6tndri0BZKkEP8ZaX3ZiXe1y4 yGq2jTmrl83zBNS1Xi2aVcB1nJ5bbdeKF8szRKVAzDZcsTgzXoBbj0AqKscaa7BU 6W0xv57YNjMHRPAMsYpHB11+3b2k1LQMb/RBnJ/dNgFVd2v1uAUBY0U/wAcmiS2F Rqp0vRcWnS9V78cCq2zMu2oaG2SphmNiHYCW4HianmLkD2jS8flsIL/l0UkX6Wms paszgGc+Wmw0bYvgjziF3oPmht3Pdmg= -----END CERTIFICATE-----Generated at Wed Jul 29 06:58:07 2026 by rpki-client