$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4484fb7-b4db-369f-8a6d-e8c4663f4d5a.roa File: d4484fb7-b4db-369f-8a6d-e8c4663f4d5a.roa (raw, json) Hash identifier: CXE/00qHcBJOPQWolsAgHKeETsnKtvx84b1dHr9ZxT8= Subject key identifier: DB:EB:B3:07:BC:8B:36:E8:F5:C9:72:E7:C1:21:7A:02:50:24:0E:23 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD37EDC09D19E24C8EFC0 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4484fb7-b4db-369f-8a6d-e8c4663f4d5a.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.108.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:7e:dc:09:d1:9e:24:c8:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=2cbfa0f4-1331-4ba0-b00f-42779bbe12c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:fa:4b:9f:da:61:d6:84:e4:75:42:f5:5e: e5:14:7c:c6:5d:5a:b8:88:33:c3:94:4a:4d:07:c5: 55:a3:0d:af:cc:a5:d2:cc:fa:4e:4d:cc:70:a6:b4: 3a:75:23:70:48:7e:ec:91:d8:7a:61:ee:1e:38:d3: 46:ca:d6:94:a1:5d:51:ee:56:28:68:c5:2a:21:86: 47:00:f3:3d:d0:d1:ea:f2:04:46:aa:59:76:79:fd: e8:9f:ec:32:93:e4:a3:51:43:1d:f0:80:25:b7:cd: 00:c4:9c:e6:fa:5d:50:35:29:50:c3:d5:3b:b4:43: 66:23:67:2e:a6:b8:3a:9f:4e:c7:d2:65:e1:1f:bd: 78:2b:6e:82:d1:92:f2:4a:b3:ef:b6:ec:d8:4d:eb: 16:19:dd:7f:76:99:7b:08:49:45:6b:4b:5a:b7:96: 8d:6e:ea:21:81:b2:58:90:18:fc:31:01:2a:51:7b: ef:47:7d:11:98:14:49:6f:3d:b8:ca:b3:e9:58:60: 9a:c6:90:06:78:9f:73:c3:69:5f:a1:53:58:23:6d: 28:de:42:de:5a:51:2e:c2:61:a0:b8:3d:2e:ec:69: e4:a7:ae:aa:09:c7:06:67:c4:44:55:92:aa:15:4d: e9:39:64:5f:ba:31:af:f7:06:c3:97:75:58:b8:7b: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:EB:B3:07:BC:8B:36:E8:F5:C9:72:E7:C1:21:7A:02:50:24:0E:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d4484fb7-b4db-369f-8a6d-e8c4663f4d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:63:0e:91:e5:81:12:88:48:01:1e:31:5d:b6:c8:30:05:0f: 46:1b:98:b9:b9:73:b6:9d:30:f3:a3:1f:14:e5:31:6b:ff:1f: e8:21:bb:f1:39:41:67:18:30:7c:9b:f3:b0:b0:97:0e:43:ce: f4:12:e6:6e:b0:df:d7:c3:7a:f3:70:a2:50:09:f6:e4:d4:29: b0:ef:64:59:c4:88:16:e2:08:7d:98:a3:6e:a1:c9:a5:80:a8: d9:8b:67:6b:22:4d:0a:ab:68:fd:eb:18:ea:5d:10:4b:35:8d: aa:53:0e:1a:fe:8f:e5:e2:32:87:4a:64:ab:44:27:6d:a5:22: 5a:6d:08:8d:7a:e3:4c:de:e6:e0:9e:67:23:42:b4:1f:fa:22: ca:61:dd:1f:40:c2:2a:49:f1:fc:64:cb:ff:00:fc:96:3e:b1: 6c:77:94:6e:3d:2e:dd:84:a8:f3:c4:a6:cf:08:1f:94:63:7d: aa:61:93:0d:df:d2:70:c3:71:5e:ee:51:9b:45:73:6a:b9:bb: 9f:a1:5d:0a:80:fa:7b:ba:18:7f:4f:f8:bb:7f:26:e3:ed:b1: 1e:25:34:33:f3:26:01:93:4d:42:5b:31:cb:ae:c9:3d:0f:d5: 34:7f:8b:59:b4:db:30:c8:f1:d3:47:f1:cf:98:51:5d:95:44: 4d:4e:ba:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNN+3AnRniTI78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk MmNiZmEwZjQtMTMzMS00YmEwLWIwMGYtNDI3NzliYmUxMmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTb6S5/aYdaE5HVC9V7lFHzGXVq4iDPDlEpN B8VVow2vzKXSzPpOTcxwprQ6dSNwSH7skdh6Ye4eONNGytaUoV1R7lYoaMUqIYZH APM90NHq8gRGqll2ef3on+wyk+SjUUMd8IAlt80AxJzm+l1QNSlQw9U7tENmI2cu prg6n07H0mXhH714K26C0ZLySrPvtuzYTesWGd1/dpl7CElFa0tat5aNbuohgbJY kBj8MQEqUXvvR30RmBRJbz24yrPpWGCaxpAGeJ9zw2lfoVNYI20o3kLeWlEuwmGg uD0u7Gnkp66qCccGZ8REVZKqFU3pOWRfujGv9wbDl3VYuHsHVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvrswe8izbo9cly58EhegJQJA4jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDQ0ODRmYjctYjRkYi0z NjlmLThhNmQtZThjNDY2M2Y0ZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE5jDpHlgRKISAEeMV22yDAFD0YbmLm5c7adMPOjHxTlMWv/H+ghu/E5 QWcYMHyb87Cwlw5DzvQS5m6w39fDevNwolAJ9uTUKbDvZFnEiBbiCH2Yo26hyaWA qNmLZ2siTQqraP3rGOpdEEs1japTDhr+j+XiModKZKtEJ22lIlptCI1640ze5uCe ZyNCtB/6Isph3R9AwipJ8fxky/8A/JY+sWx3lG49Lt2EqPPEps8IH5Rjfaphkw3f 0nDDcV7uUZtFc2q5u5+hXQqA+nu6GH9P+Lt/JuPtsR4lNDPzJgGTTUJbMcuuyT0P 1TR/i1m02zDI8dNH8c+YUV2VRE1Ouh4= -----END CERTIFICATE-----Generated at Thu Sep 24 05:29:43 2026 by rpki-client