$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa File: fde6d706-c935-303a-8a12-c12364df7823.roa (raw, json) Hash identifier: AyKA34O3Nn4Mun4grHRDS7/zQ7YlUIDkfZbdr4RVVF0= Subject key identifier: 60:4B:58:97:82:7A:C3:5C:CF:ED:33:EC:AF:14:59:7A:12:16:D6:A7 Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584EE7BCD32CFCF1F43F9976B780 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa Signing time: Fri 21 Aug 2026 01:00:12 +0000 ROA not before: Fri 21 Aug 2026 01:00:12 +0000 ROA not after: Thu 19 Nov 2026 02:00:12 +0000 asID: 5650 IP address blocks: 172.108.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e7:bc:d3:2c:fc:f1:f4:3f:99:76:b7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Aug 21 01:00:12 2026 GMT Not After : Nov 19 02:00:12 2026 GMT Subject: CN=c2a8199c-21f6-4d81-a04e-582028fddf02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:52:bd:43:cd:db:eb:9f:6d:14:3b:cb:aa:66: 0d:ce:9d:b0:00:5b:eb:14:4d:2e:7d:fd:f0:14:62: 2c:0e:bf:8f:57:1b:42:0c:5d:39:35:8c:1a:86:c3: af:b3:1f:88:18:43:46:8a:02:68:d0:a1:1e:40:73: eb:2b:52:5e:63:b3:c2:59:cd:fe:1a:f7:93:fe:03: cd:fb:84:d6:95:77:ef:24:63:d8:85:74:21:71:51: 24:84:26:9e:8c:9b:21:b8:7d:f1:2c:78:55:c6:2d: 84:29:6f:5b:18:a0:e2:fb:da:c0:b2:78:6f:c9:a6: 01:ed:41:42:e8:e5:fe:75:70:51:49:a9:78:54:f3: 1f:49:e3:cc:0c:ee:ec:03:e1:8b:89:43:13:73:96: 63:aa:db:3f:b7:3f:45:7a:93:5a:f2:bd:b0:bd:73: 8c:b0:cf:e3:40:39:c2:39:ed:cc:93:41:3c:c7:ce: f7:d3:08:e8:70:76:e2:d6:09:04:1e:9d:c6:7d:68: 80:a5:e3:0f:30:55:c9:f5:27:c8:5b:ab:89:33:22: 19:4f:4b:ff:ec:a1:90:92:df:15:24:9f:24:6e:d4: 5d:d1:42:53:02:b7:59:cc:74:2c:2a:23:72:49:cc: e8:cb:74:1e:13:3c:db:db:2a:cb:02:4c:ca:be:68: 9b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:4B:58:97:82:7A:C3:5C:CF:ED:33:EC:AF:14:59:7A:12:16:D6:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/fde6d706-c935-303a-8a12-c12364df7823.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 172.108.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:f7:ab:ff:0a:2b:ae:0b:62:ba:9c:2d:b0:bf:90:e0:50:d6: 57:6e:d9:ee:50:cb:34:94:e2:a2:9a:dd:b7:22:45:09:84:3a: cd:20:2a:06:ec:95:83:a1:8d:74:62:23:73:81:11:67:4e:b4: 55:2d:d7:d5:ca:f8:f2:34:76:e3:a0:9f:aa:4a:92:11:14:c5: 4f:53:4f:47:09:b5:08:ae:46:e5:4c:30:84:b8:27:34:42:e4: b3:f1:12:2b:94:0a:01:bf:2c:13:c1:cc:c6:26:28:a3:ff:1e: c3:06:05:4e:c1:3e:fb:07:cd:77:71:6e:9d:32:be:c6:3d:4e: fe:06:a5:f1:2c:16:d5:ca:df:05:8e:c7:19:0d:9d:85:e8:f8: 1d:16:50:77:cd:37:8a:1a:a1:9a:d1:f9:59:97:23:78:74:7b: 13:20:84:07:ae:6b:75:8f:a5:ed:6e:a8:70:98:40:1d:0b:74: 93:6e:19:53:8b:46:89:10:f7:6b:81:93:c5:f7:db:b6:38:3d: ef:28:da:a5:8b:ed:c9:fc:dd:f7:83:59:4e:3e:64:8b:e5:fd: f0:0f:e4:b0:6a:12:7d:ab:06:71:87:70:a7:7f:19:5a:70:d5: 59:93:3c:b3:ac:1c:9e:1b:68:84:ba:7f:2e:04:d4:21:04:c0: 12:fa:d1:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7nvNMs/PH0P5l2t4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDgyMTAxMDAxMloXDTI2MTExOTAyMDAxMlowLzEtMCsGA1UEAxMk YzJhODE5OWMtMjFmNi00ZDgxLWEwNGUtNTgyMDI4ZmRkZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklK9Q83b659tFDvLqmYNzp2wAFvrFE0uff3w FGIsDr+PVxtCDF05NYwahsOvsx+IGENGigJo0KEeQHPrK1JeY7PCWc3+GveT/gPN +4TWlXfvJGPYhXQhcVEkhCaejJshuH3xLHhVxi2EKW9bGKDi+9rAsnhvyaYB7UFC 6OX+dXBRSal4VPMfSePMDO7sA+GLiUMTc5Zjqts/tz9FepNa8r2wvXOMsM/jQDnC Oe3Mk0E8x8730wjocHbi1gkEHp3GfWiApeMPMFXJ9SfIW6uJMyIZT0v/7KGQkt8V JJ8kbtRd0UJTArdZzHQsKiNySczoy3QeEzzb2yrLAkzKvmibpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBLWJeCesNcz+0z7K8UWXoSFtanMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZmRlNmQ3MDYtYzkzNS0z MDNhLThhMTItYzEyMzY0ZGY3ODIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGxtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz3q/8KK64LYrqcLbC/kOBQ1ldu2e5QyzSU4qKa3bciRQmEOs0gKgbs lYOhjXRiI3OBEWdOtFUt19XK+PI0duOgn6pKkhEUxU9TT0cJtQiuRuVMMIS4JzRC 5LPxEiuUCgG/LBPBzMYmKKP/HsMGBU7BPvsHzXdxbp0yvsY9Tv4GpfEsFtXK3wWO xxkNnYXo+B0WUHfNN4oaoZrR+VmXI3h0exMghAeua3WPpe1uqHCYQB0LdJNuGVOL RokQ92uBk8X327Y4Pe8o2qWL7cn83feDWU4+ZIvl/fAP5LBqEn2rBnGHcKd/GVpw 1VmTPLOsHJ4baIS6fy4E1CEEwBL60Vw= -----END CERTIFICATE-----Generated at Tue Sep 29 03:49:02 2026 by rpki-client