$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa File: d447095a-a96a-37fd-b4a7-9413f42785d3.roa (raw, json) Hash identifier: +c7Znhik9dFRrathxmsxsfKMxARGbZ3hy7t6MtZ/dFs= Subject key identifier: 43:85:92:69:29:C9:02:5C:21:D1:0B:29:2B:94:2E:2A:9B:E6:33:67 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D7470040DE919D9E222C09000 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 108.8.32.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:04:0d:e9:19:d9:e2:22:c0:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=c81445e3-6848-407c-a40c-394386a865ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:be:23:cd:22:94:4e:18:6c:a4:5a:06:ed: b4:69:e8:4d:88:24:14:e0:e8:2e:9e:89:40:a1:e0: 9d:15:55:a2:0e:28:39:9a:5a:1d:33:0d:76:50:ca: ec:9d:85:2d:f4:b8:d4:8e:c6:75:79:4e:8c:8f:ca: 97:80:6a:c4:66:de:e3:b4:07:24:69:df:11:61:b0: 2c:4e:fe:9b:29:66:de:bb:bd:36:cb:36:06:34:26: db:61:61:af:92:69:4d:c6:92:e7:df:ce:bc:42:cf: 85:62:90:8b:3d:81:b7:31:16:d3:3b:43:93:09:8c: 51:15:6d:4b:56:4f:4f:d3:91:9b:72:60:8a:08:03: 34:e2:df:84:0f:5b:20:3e:5e:03:74:df:fd:a3:a9: b8:7f:54:ec:9a:c3:e9:b1:2e:c7:61:74:b1:32:5c: 20:02:43:0b:ac:9d:6c:a2:cb:7e:91:fc:89:ab:14: 22:b8:a0:81:55:52:9a:ee:c8:92:7e:83:32:2c:e7: c1:01:bc:08:7f:b4:46:16:e9:bd:b1:31:88:19:bc: 83:3a:6b:0d:44:db:aa:74:a0:67:e4:91:47:0c:82: 78:a7:bf:dc:fa:86:e2:a9:32:c0:39:6b:d9:fe:fb: 95:7b:38:09:05:42:66:4a:4b:18:cc:7e:02:67:e5: 53:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:85:92:69:29:C9:02:5C:21:D1:0B:29:2B:94:2E:2A:9B:E6:33:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d447095a-a96a-37fd-b4a7-9413f42785d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.8.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:57:4b:48:cb:83:d9:11:94:63:e9:39:3f:40:f2:83:17:0a: 97:b3:8c:79:6a:2a:d0:19:ff:1c:c8:a6:df:84:45:b5:3e:14: 34:8f:a3:ad:e4:36:fc:08:97:c2:bc:dd:a3:cf:2f:f4:51:32: ae:c4:ae:4a:d7:7f:39:03:78:44:9f:01:96:7e:25:34:29:17: 1b:ec:34:de:29:c5:b4:6f:f9:58:3d:58:1d:50:36:91:37:27: db:b0:20:93:63:0f:57:f8:ce:90:15:b0:f3:08:f1:f4:6f:f1: f4:77:42:06:88:7b:87:40:3a:01:f0:c4:44:12:3f:80:01:c2: f6:b9:40:ca:2e:85:59:54:d0:6c:54:6d:6d:50:cf:33:15:da: 45:48:8b:fd:4b:56:77:af:be:a4:66:10:92:02:a4:4a:f5:e2: fe:1a:cd:a5:90:fc:07:c4:dc:ff:b0:03:86:73:17:bd:54:4c: 72:41:dc:d4:de:80:71:38:99:f2:24:36:da:a0:64:d1:83:bb: 2e:c8:e0:b3:86:dc:86:37:c8:61:f5:4c:3a:e9:a7:27:3e:c1: d8:d4:bb:d5:b7:21:81:66:c1:c4:4a:ff:ea:92:e4:22:07:6a: 21:20:e1:ea:0e:5e:8b:0d:23:c5:71:c7:d0:4e:5e:74:01:55: 7e:e9:cc:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE10cAQN6RnZ4iLAkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk YzgxNDQ1ZTMtNjg0OC00MDdjLWE0MGMtMzk0Mzg2YTg2NWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7a+I80ilE4YbKRaBu20aehNiCQU4OgunolA oeCdFVWiDig5mlodMw12UMrsnYUt9LjUjsZ1eU6Mj8qXgGrEZt7jtAckad8RYbAs Tv6bKWbeu702yzYGNCbbYWGvkmlNxpLn3868Qs+FYpCLPYG3MRbTO0OTCYxRFW1L Vk9P05GbcmCKCAM04t+ED1sgPl4DdN/9o6m4f1TsmsPpsS7HYXSxMlwgAkMLrJ1s ost+kfyJqxQiuKCBVVKa7siSfoMyLOfBAbwIf7RGFum9sTGIGbyDOmsNRNuqdKBn 5JFHDIJ4p7/c+obiqTLAOWvZ/vuVezgJBUJmSksYzH4CZ+VTkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOFkmkpyQJcIdELKSuULiqb5jNnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ0NzA5NWEtYTk2YS0z N2ZkLWI0YTctOTQxM2Y0Mjc4NWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFbAggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhXS0jLg9kRlGPpOT9A8oMXCpezjHlqKtAZ/xzIpt+ERbU+FDSPo63k NvwIl8K83aPPL/RRMq7ErkrXfzkDeESfAZZ+JTQpFxvsNN4pxbRv+Vg9WB1QNpE3 J9uwIJNjD1f4zpAVsPMI8fRv8fR3QgaIe4dAOgHwxEQSP4ABwva5QMouhVlU0GxU bW1QzzMV2kVIi/1LVnevvqRmEJICpEr14v4azaWQ/AfE3P+wA4ZzF71UTHJB3NTe gHE4mfIkNtqgZNGDuy7I4LOG3IY3yGH1TDrppyc+wdjUu9W3IYFmwcRK/+qS5CIH aiEg4eoOXosNI8Vxx9BOXnQBVX7pzOE= -----END CERTIFICATE-----Generated at Fri Apr 17 21:48:57 2026 by rpki-client