$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa File: 5db54f0f-0d83-308c-8072-e00a60e20012.roa (raw, json) Hash identifier: pMOb3DjfX4DBpgjn1mUfxyRfiXPsjwpO20UrRXfAvhU= Subject key identifier: F1:0E:91:1F:66:9E:88:BE:43:43:75:AA:55:FA:6E:6A:26:03:EB:07 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584E9D4A79250CBF66DD3E747C80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 701 IP address blocks: 108.22.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:79:25:0c:bf:66:dd:3e:74:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=cc37bf34-36d1-4c9d-9c61-27925bb8a6f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c2:1b:6f:d0:74:13:32:fc:d5:7b:d8:79:e1: 95:91:7e:44:dd:94:9a:5c:dd:a1:31:43:5d:e8:e0: 90:25:4c:1c:b8:3c:35:ee:bc:e1:a0:fd:e6:6c:d2: c6:c8:ab:23:36:84:e3:eb:a2:b3:53:8a:a9:38:80: 26:8b:3c:99:a3:80:23:e8:a3:e8:9b:80:b7:70:f8: 6b:f3:15:4c:ee:75:e4:35:28:8c:e5:1a:c9:1f:77: d7:4a:fd:f6:7d:a0:eb:75:95:a4:88:9b:cd:01:46: f7:1a:0f:b4:13:82:db:df:d3:63:bf:f7:a3:54:c1: 8c:0b:b3:3b:d4:71:56:51:9c:56:94:78:87:69:c9: 4b:de:cd:6c:0b:57:e4:ea:8c:b7:94:19:96:84:b1: 44:a0:23:4a:63:84:34:2c:60:56:8c:2e:ad:27:3f: 94:3f:ee:63:2d:93:a0:ed:d8:7f:c3:61:89:ea:59: 98:09:82:35:c7:56:3d:06:3e:73:3d:1c:62:6c:94: ed:ea:a1:de:41:9e:51:df:22:ac:52:8a:f5:da:50: 58:43:89:9e:93:e6:53:6b:cc:9d:d7:83:3b:e0:b8: fb:86:3f:ee:30:90:0b:6a:1f:26:14:1f:ec:5d:d2: 60:6c:25:62:79:64:1f:7c:c4:2c:a8:4b:1f:08:76: f7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0E:91:1F:66:9E:88:BE:43:43:75:AA:55:FA:6E:6A:26:03:EB:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/5db54f0f-0d83-308c-8072-e00a60e20012.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.22.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:37:51:34:c3:db:e8:62:45:03:45:fe:de:63:a2:4f:d4:5c: 98:2f:91:a5:0f:26:fd:74:87:39:68:63:6e:dd:00:ce:4e:cd: e4:53:02:34:30:4a:2a:90:e8:99:31:7e:c7:c6:3b:1a:31:9c: df:4f:3d:8f:da:b6:56:09:4c:32:26:90:19:0e:23:92:0b:f0: 75:32:41:7b:00:b6:0a:f5:3a:0c:92:5a:5a:63:d7:6e:b3:28: c6:29:f8:4b:f3:9a:7d:3c:a7:8d:0a:38:a1:45:87:b1:78:35: e8:1c:7d:b1:d9:9d:fe:bb:d0:f3:b7:f1:76:7e:2e:1f:0b:bc: 01:96:5b:aa:e1:b0:31:64:40:9b:97:ba:9d:d8:86:43:67:75: c0:80:a9:b2:94:f1:77:28:e3:72:5c:aa:ed:d7:91:2d:68:2c: ab:0a:d2:1d:3e:85:d8:af:40:de:f6:b0:d0:04:7b:c2:4d:14: de:c0:4b:2a:7e:50:59:64:92:39:6b:72:c1:97:00:ba:46:45: f3:a6:91:f9:59:d7:d4:73:06:37:f2:a5:57:55:6c:97:6b:2e: 6c:75:bd:72:bb:ae:6d:88:3b:db:50:f9:75:85:41:f7:9f:ae: 5f:26:33:0f:c8:a6:d2:c7:e7:64:fa:e7:9b:d1:0f:96:51:2c: fd:59:32:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnklDL9m3T50fIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk Y2MzN2JmMzQtMzZkMS00YzlkLTljNjEtMjc5MjViYjhhNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcIbb9B0EzL81XvYeeGVkX5E3ZSaXN2hMUNd 6OCQJUwcuDw17rzhoP3mbNLGyKsjNoTj66KzU4qpOIAmizyZo4Aj6KPom4C3cPhr 8xVM7nXkNSiM5RrJH3fXSv32faDrdZWkiJvNAUb3Gg+0E4Lb39Njv/ejVMGMC7M7 1HFWUZxWlHiHaclL3s1sC1fk6oy3lBmWhLFEoCNKY4Q0LGBWjC6tJz+UP+5jLZOg 7dh/w2GJ6lmYCYI1x1Y9Bj5zPRxibJTt6qHeQZ5R3yKsUor12lBYQ4mek+ZTa8yd 14M74Lj7hj/uMJALah8mFB/sXdJgbCVieWQffMQsqEsfCHb3wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEOkR9mnoi+Q0N1qlX6bmomA+sHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNWRiNTRmMGYtMGQ4My0z MDhjLTgwNzItZTAwYTYwZTIwMDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbBYIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA3UTTD2+hiRQNF/t5jok/UXJgvkaUPJv10hzloY27dAM5OzeRTAjQw SiqQ6JkxfsfGOxoxnN9PPY/atlYJTDImkBkOI5IL8HUyQXsAtgr1OgySWlpj126z KMYp+Evzmn08p40KOKFFh7F4NegcfbHZnf670PO38XZ+Lh8LvAGWW6rhsDFkQJuX up3YhkNndcCAqbKU8Xco43Jcqu3XkS1oLKsK0h0+hdivQN72sNAEe8JNFN7ASyp+ UFlkkjlrcsGXALpGRfOmkflZ19RzBjfypVdVbJdrLmx1vXK7rm2IO9tQ+XWFQfef rl8mMw/IptLH52T655vRD5ZRLP1ZMvA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:06:19 2026 by rpki-client