$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef33c6e7-b3bb-3b31-b392-816942f35647.roa File: ef33c6e7-b3bb-3b31-b392-816942f35647.roa (raw, json) Hash identifier: 0mq7Y2iMiAyl3ajY+KbMKO4xavwUsNcQyC6teVAqD0g= Subject key identifier: BF:ED:67:DD:28:9A:E2:F8:B4:F9:A6:53:0A:8A:82:5A:B3:26:7A:39 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D747007B8D1B580C61A62EE80 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef33c6e7-b3bb-3b31-b392-816942f35647.roa Signing time: Fri 10 Apr 2026 01:00:24 +0000 ROA not before: Fri 10 Apr 2026 01:00:24 +0000 ROA not after: Thu 09 Jul 2026 01:00:24 +0000 asID: 701 IP address blocks: 108.49.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:74:70:07:b8:d1:b5:80:c6:1a:62:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Apr 10 01:00:24 2026 GMT Not After : Jul 9 01:00:24 2026 GMT Subject: CN=4ab58738-e645-4653-9a24-500964c0bfc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c8:5c:80:fd:32:6c:90:ca:c9:e9:98:b4:b9: 46:80:d4:06:ff:58:5d:99:68:94:03:c0:f1:e7:41: 00:1d:b8:5d:c2:36:7d:c4:d4:f5:9e:fb:48:4f:1c: 98:7b:a6:c6:be:9f:78:2d:0d:26:67:6b:16:14:1d: e9:32:fc:38:fa:2d:f5:78:56:7c:e9:3e:df:57:dc: 8c:36:d8:0d:b8:80:ae:4e:d9:56:bf:80:12:67:13: 57:01:8e:bb:d4:1a:04:e8:40:ed:77:95:9f:47:fa: f0:31:0d:3d:af:4f:6e:0f:3f:26:18:c9:de:21:bc: d1:21:67:58:b2:59:8c:41:38:2f:f4:6b:f9:87:d1: 27:b8:b3:a9:a8:96:af:bb:69:c1:0b:54:0e:7c:0f: cb:88:1b:ab:fc:19:0a:fe:67:04:0c:74:f7:6e:7c: 51:ee:6f:8b:0d:b4:31:35:86:49:28:47:ab:65:e1: 8f:11:85:bc:75:9b:81:b3:c0:9c:ac:b2:f6:37:a5: 9b:97:eb:4f:cb:fa:cc:a9:64:c3:14:0b:8b:07:5d: 1c:c3:c0:9d:91:3d:f1:5b:53:ab:7f:89:c9:97:a9: 37:64:8f:ab:a4:f2:ce:ea:4e:56:cc:e6:56:45:a2: 72:a9:d9:52:36:48:72:17:fd:d0:78:58:5f:ca:cd: 8f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:ED:67:DD:28:9A:E2:F8:B4:F9:A6:53:0A:8A:82:5A:B3:26:7A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ef33c6e7-b3bb-3b31-b392-816942f35647.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 108.49.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:f4:5e:bc:ba:92:e2:99:2f:ef:dd:f0:fb:51:8f:b0:0a:e1: 14:13:3a:e3:ef:61:0b:ab:37:07:8d:d6:a8:11:d2:9f:04:07: 9f:b8:dc:96:2b:48:7b:5d:a6:a8:26:72:8c:c6:27:14:26:36: 73:54:80:94:83:b9:ca:b8:27:8a:e0:f0:65:2e:98:72:2c:f1: 6d:5d:a3:1e:52:bb:7c:6a:e6:41:44:6e:a3:c4:c7:e6:ec:17: b2:80:24:5d:33:e2:3a:6d:73:30:1c:b5:a9:f5:9e:c8:4f:81: be:d3:c8:e1:92:28:90:f2:cb:e6:a5:f3:57:d6:91:04:2e:ac: 23:7d:94:5f:e1:8d:4c:a2:ae:b6:f8:a0:ed:b1:20:f6:f4:31: 1e:78:fe:01:ea:42:f0:1c:1c:f3:4c:e5:33:d5:a5:f2:a4:f6: ed:b8:f6:bc:1d:4a:f4:14:cb:a3:a0:cc:1c:66:c4:6c:99:37: bb:ee:cc:f7:41:96:3f:58:6d:56:fd:51:e7:4a:5b:08:66:3c: 90:3b:0b:97:bc:10:c9:16:d1:16:dc:81:47:bb:fb:81:f3:67: ff:af:33:8c:35:8a:68:a3:39:b6:cd:fd:41:4a:67:d7:3c:ff: 93:e5:a5:e8:00:ff:ee:b9:d3:7c:2e:f7:0d:78:42:d6:97:81: 48:bd:f4:d2 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE10cAe40bWAxhpi7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDQxMDAxMDAyNFoXDTI2MDcwOTAxMDAyNFowLzEtMCsGA1UEAxMk NGFiNTg3MzgtZTY0NS00NjUzLTlhMjQtNTAwOTY0YzBiZmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8hcgP0ybJDKyemYtLlGgNQG/1hdmWiUA8Dx 50EAHbhdwjZ9xNT1nvtITxyYe6bGvp94LQ0mZ2sWFB3pMvw4+i31eFZ86T7fV9yM NtgNuICuTtlWv4ASZxNXAY671BoE6EDtd5WfR/rwMQ09r09uDz8mGMneIbzRIWdY slmMQTgv9Gv5h9EnuLOpqJavu2nBC1QOfA/LiBur/BkK/mcEDHT3bnxR7m+LDbQx NYZJKEerZeGPEYW8dZuBs8CcrLL2N6Wbl+tPy/rMqWTDFAuLB10cw8CdkT3xW1Or f4nJl6k3ZI+rpPLO6k5WzOZWRaJyqdlSNkhyF/3QeFhfys2PdwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFL/tZ90omuL4tPmmUwqKglqzJno5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZWYzM2M2ZTctYjNiYi0z YjMxLWIzOTItODE2OTQyZjM1NjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAbDEwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAqvRevLqS4pkv793w+1GPsArhFBM64+9hC6s3B43WqBHSnwQHn7jclitI e12mqCZyjMYnFCY2c1SAlIO5yrgniuDwZS6YcizxbV2jHlK7fGrmQURuo8TH5uwX soAkXTPiOm1zMBy1qfWeyE+BvtPI4ZIokPLL5qXzV9aRBC6sI32UX+GNTKKutvig 7bEg9vQxHnj+AepC8Bwc80zlM9Wl8qT27bj2vB1K9BTLo6DMHGbEbJk3u+7M90GW P1htVv1R50pbCGY8kDsLl7wQyRbRFtyBR7v7gfNn/68zjDWKaKM5ts39QUpn1zz/ k+Wl6AD/7rnTfC73DXhC1peBSL300g== -----END CERTIFICATE-----Generated at Fri Apr 17 17:24:49 2026 by rpki-client