$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: DvL9TOnxgEgfMOSxgwi73P6SV5tb4nL2H79WnltMB0Y= Subject key identifier: 47:2D:5B:B5:30:FF:39:24:FB:01:A7:7E:FF:11:55:46:6C:78:14:B8 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584F7E7DD0E6FBABE87DB6388DC0 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:d0:e6:fb:ab:e8:7d:b6:38:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=b1075266-680f-44ea-9de9-5f8538b41e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:20:08:a6:cf:5b:ce:c0:43:70:25:2c:98:0e: 7f:d7:50:93:75:43:8a:84:37:94:7a:a1:de:2b:8d: 27:62:d1:ac:7b:c4:16:3c:d6:97:4e:f2:b1:19:f7: e5:37:17:34:f2:ab:36:4d:bd:56:2a:71:a4:75:fb: 65:fb:7b:83:52:51:4f:b6:a9:5a:93:dc:6c:54:48: f3:28:0c:ac:0a:e6:e9:fe:f8:a0:cd:59:64:19:2b: 8f:18:28:a0:f2:0d:46:1c:d9:64:4a:fd:56:28:d1: 2f:93:bc:fb:e2:02:67:1a:32:3c:bd:a1:7f:78:aa: 9a:cc:aa:3c:06:99:d3:1e:1a:93:c8:03:df:e4:87: bd:9b:d1:4f:7b:87:8a:28:be:02:72:ee:36:07:0f: f3:0b:c3:6d:82:44:b8:3b:bf:a2:7c:de:a2:78:96: b1:dd:fd:f9:cb:63:de:3e:8d:67:0a:be:41:67:40: 68:90:37:df:2a:95:b0:86:1f:6c:d4:91:48:a3:da: 1c:0f:79:04:61:3d:05:15:1a:84:b8:e9:75:40:76: bb:62:04:8e:6a:f0:ad:36:d4:70:4b:e2:a9:59:1d: 15:10:58:fa:47:02:f2:e8:00:af:50:7c:ad:14:e4: 98:41:7f:7a:40:4b:85:c5:09:64:b1:50:96:1a:7b: e5:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:5B:B5:30:FF:39:24:FB:01:A7:7E:FF:11:55:46:6C:78:14:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8c:47:f3:c3:6e:38:67:87:78:cf:49:de:fb:d1:c8:2f:db: 25:16:a7:0b:e4:67:f2:d0:54:f4:a1:ef:3b:6b:f9:b9:7e:26: aa:3f:8d:df:be:e0:7e:c7:63:f9:72:3c:f2:71:0a:60:61:ac: c7:b9:6f:ed:82:16:f3:9d:5e:c1:9b:5a:f8:6b:95:dc:66:5b: cf:e0:48:24:56:1e:ce:86:83:9c:9e:0d:73:a8:89:07:f7:c7: e3:6e:0b:d7:52:52:ff:4d:73:80:a7:9b:3e:1c:33:1e:da:0c: 6c:22:26:55:c8:dd:b6:1a:9e:f5:f5:06:8d:47:9b:27:7c:8e: 6d:ae:8d:5b:7d:c5:ef:b7:4c:71:08:b1:29:c8:62:54:58:19: 05:ea:53:65:ad:cc:87:46:1d:86:21:1b:ce:6f:85:d9:8e:ef: f1:04:b8:26:44:df:a1:bd:52:b2:03:2a:14:3f:28:d0:24:8c: 02:cb:51:78:b4:c1:65:48:19:e7:04:08:56:1a:14:08:ff:c6: f2:b2:d1:c0:c6:3c:97:c8:c9:19:2b:03:9d:b2:50:4d:f1:8d: 51:2d:48:87:53:7c:87:8e:b4:06:6d:10:dc:3b:1c:10:3f:81: a3:65:09:ab:48:63:2a:95:86:8a:f6:ef:ff:1e:ed:e3:2b:2d: 6a:2f:b3:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fdDm+6vofbY4jcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk YjEwNzUyNjYtNjgwZi00NGVhLTlkZTktNWY4NTM4YjQxZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCAIps9bzsBDcCUsmA5/11CTdUOKhDeUeqHe K40nYtGse8QWPNaXTvKxGfflNxc08qs2Tb1WKnGkdftl+3uDUlFPtqlak9xsVEjz KAysCubp/vigzVlkGSuPGCig8g1GHNlkSv1WKNEvk7z74gJnGjI8vaF/eKqazKo8 BpnTHhqTyAPf5Ie9m9FPe4eKKL4Ccu42Bw/zC8NtgkS4O7+ifN6ieJax3f35y2Pe Po1nCr5BZ0BokDffKpWwhh9s1JFIo9ocD3kEYT0FFRqEuOl1QHa7YgSOavCtNtRw S+KpWR0VEFj6RwLy6ACvUHytFOSYQX96QEuFxQlksVCWGnvlHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEctW7Uw/zkk+wGnfv8RVUZseBS4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqMR/PDbjhnh3jPSd770cgv2yUWpwvkZ/LQVPSh7ztr+bl+Jqo/jd++ 4H7HY/lyPPJxCmBhrMe5b+2CFvOdXsGbWvhrldxmW8/gSCRWHs6Gg5yeDXOoiQf3 x+NuC9dSUv9Nc4Cnmz4cMx7aDGwiJlXI3bYanvX1Bo1Hmyd8jm2ujVt9xe+3THEI sSnIYlRYGQXqU2WtzIdGHYYhG85vhdmO7/EEuCZE36G9UrIDKhQ/KNAkjALLUXi0 wWVIGecECFYaFAj/xvKy0cDGPJfIyRkrA52yUE3xjVEtSIdTfIeOtAZtENw7HBA/ gaNlCatIYyqVhor27/8e7eMrLWovs6U= -----END CERTIFICATE-----Generated at Thu Oct 15 10:56:39 2026 by rpki-client