$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: uS9K9sPM6mmBsl+5XUZoByCnL3aclNRuYjC7MYaL/r8= Subject key identifier: E0:6A:B0:D9:61:49:65:CA:43:19:81:74:E2:88:46:47:E2:C7:09:69 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584BB2F7AF3EA399522AEBBA5840 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:af:3e:a3:99:52:2a:eb:ba:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=6320d766-19c3-4278-84b2-764113c2cac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:21:09:75:1c:89:86:cd:63:9c:de:75:9a:75: b8:26:41:f9:57:d5:90:0a:70:f2:d5:a6:1a:dc:3d: 77:7d:6a:3a:d4:1f:ef:26:f2:d1:85:f6:8e:ff:27: 97:1b:a2:3b:14:c2:cd:df:97:8c:dc:6b:68:8c:4e: 71:3b:17:72:7b:66:cb:da:fb:c1:62:19:c8:39:58: 76:31:a7:18:ce:a3:4a:f7:a1:e8:25:fe:83:8e:96: ea:e5:cf:60:4e:0d:9e:e6:e9:be:90:17:2c:9a:95: d9:ae:70:d4:47:c5:94:bc:49:a0:e3:c4:b7:7a:42: c2:de:87:bc:1e:e3:df:f0:fe:bd:7b:e6:27:45:ad: be:98:81:d6:87:a7:ed:7c:42:c0:32:c4:d9:c6:b6: af:a1:ca:4f:97:6e:70:f8:96:39:2f:2c:5c:0c:b5: 42:76:fd:b7:4b:03:f8:5d:b2:6d:78:65:8f:40:9a: 6b:05:fc:ea:f6:d7:78:98:65:92:8d:4e:ed:1f:ae: 12:f3:fa:6b:55:ab:9a:1a:00:e9:82:79:50:0f:0d: ec:8d:a3:14:56:0a:54:3d:ee:3d:b6:1c:e9:c3:47: cd:06:fd:e9:b1:12:b4:03:8a:da:87:6b:af:f3:f6: ed:9c:a1:70:2c:15:63:b6:cc:76:da:c3:99:54:95: e8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:6A:B0:D9:61:49:65:CA:43:19:81:74:E2:88:46:47:E2:C7:09:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:eb:54:97:06:4f:99:38:e0:e1:c4:ac:43:f4:e4:84:d7:8b: 3c:08:ab:8f:f1:3b:0c:c8:a9:71:f3:dc:4f:01:3e:d9:d5:5d: 43:f9:47:1b:95:7d:d3:4d:d4:8e:43:db:0e:16:f1:4e:d2:57: 47:32:8c:01:7f:99:70:af:9a:60:33:9c:f1:5d:49:cd:3a:e6: 9f:73:4a:b7:1b:cd:6e:fe:bf:ed:ae:92:8e:9c:96:1c:6c:04: 88:57:65:36:ad:96:11:e0:13:5f:55:25:fa:04:56:a0:51:c6: ee:92:be:f3:f3:d8:dc:d2:66:78:e4:9a:d0:6d:74:f8:da:7e: 94:cc:1e:fa:5f:14:43:89:f0:fc:0d:d1:6e:40:f2:37:ab:98: 8c:d5:82:e9:6b:a1:28:19:59:f0:72:77:fc:d6:76:e0:32:8e: 6f:bc:3d:3c:82:97:c6:c2:9e:23:6c:53:be:83:b8:c2:6c:9b: ac:48:86:06:d2:e8:ec:8d:38:f5:60:59:88:42:82:50:55:4c: e7:b3:f1:64:2d:ed:92:75:8f:b8:72:0f:ce:5e:5e:9e:4d:5f: 80:e5:3e:74:e5:c1:b5:36:01:e5:31:d8:af:42:08:cf:85:19: a7:73:78:4b:4a:d6:13:de:ff:43:40:b5:0a:79:8b:1e:bd:2a: 5b:49:13:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy968+o5lSKuu6WEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk NjMyMGQ3NjYtMTljMy00Mjc4LTg0YjItNzY0MTEzYzJjYWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriEJdRyJhs1jnN51mnW4JkH5V9WQCnDy1aYa 3D13fWo61B/vJvLRhfaO/yeXG6I7FMLN35eM3GtojE5xOxdye2bL2vvBYhnIOVh2 MacYzqNK96HoJf6Djpbq5c9gTg2e5um+kBcsmpXZrnDUR8WUvEmg48S3ekLC3oe8 HuPf8P69e+YnRa2+mIHWh6ftfELAMsTZxravocpPl25w+JY5LyxcDLVCdv23SwP4 XbJteGWPQJprBfzq9td4mGWSjU7tH64S8/prVauaGgDpgnlQDw3sjaMUVgpUPe49 thzpw0fNBv3psRK0A4rah2uv8/btnKFwLBVjtsx22sOZVJXo5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOBqsNlhSWXKQxmBdOKIRkfixwlpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHrVJcGT5k44OHErEP05ITXizwIq4/xOwzIqXHz3E8BPtnVXUP5RxuV fdNN1I5D2w4W8U7SV0cyjAF/mXCvmmAznPFdSc065p9zSrcbzW7+v+2uko6clhxs BIhXZTatlhHgE19VJfoEVqBRxu6SvvPz2NzSZnjkmtBtdPjafpTMHvpfFEOJ8PwN 0W5A8jermIzVgulroSgZWfByd/zWduAyjm+8PTyCl8bCniNsU76DuMJsm6xIhgbS 6OyNOPVgWYhCglBVTOez8WQt7ZJ1j7hyD85eXp5NX4DlPnTlwbU2AeUx2K9CCM+F GadzeEtK1hPe/0NAtQp5ix69KltJEzc= -----END CERTIFICATE-----Generated at Tue Nov 4 20:47:24 2025 by rpki-client