$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: Ogxtt3hz8qvHZRhHijI4lKq9PVWzSD8bFIUlgdSplxs= Subject key identifier: F0:BC:D9:44:1E:32:A1:49:39:A6:6F:89:30:3A:0B:86:5A:72:CD:92 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584B99D7ADBE64ADC9C0BC3EC280 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:ad:be:64:ad:c9:c0:bc:3e:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=c3e49d8d-2140-48b8-9fbe-863dd1ad45c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:01:47:68:7d:a9:cd:2b:06:ad:33:14:aa: b3:ac:5d:56:21:9d:fe:92:8c:56:da:33:2d:4c:e6: fc:fc:d7:44:68:16:3f:a2:53:45:fa:45:90:52:13: 3f:42:a2:ac:26:0b:ac:12:e2:21:81:02:4f:36:68: 04:e3:39:54:0a:99:1c:68:09:b1:03:1d:b8:ec:6a: a3:48:05:33:b2:71:39:f8:1a:b8:f7:3d:4b:80:2d: 9d:ab:b7:04:7c:94:85:75:52:43:08:22:5e:84:e4: 28:f0:b7:55:a9:b2:7e:c9:03:e0:7b:bf:d5:f8:3e: 16:df:4a:55:77:f3:6d:f9:d8:0d:80:85:62:9d:a1: bb:66:ba:84:48:91:19:d2:4e:c7:76:39:08:c7:75: a8:ce:63:ab:e9:bf:c2:bb:69:56:f0:a6:69:f0:c1: f9:ef:99:97:d5:4a:25:78:e5:2c:98:4b:c3:c2:a4: 05:d5:f5:22:68:69:e6:f0:43:90:8b:d8:b9:f5:69: ba:da:d2:7f:eb:83:6f:67:38:47:b3:35:bc:24:e7: e1:89:be:a2:a0:33:cd:d2:ed:a0:c4:43:f4:96:52: 66:28:72:ac:7f:e2:93:22:68:7a:1c:3f:1a:73:d4: 26:a8:8e:0f:b3:5c:e6:77:6a:53:39:88:a2:83:0e: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:BC:D9:44:1E:32:A1:49:39:A6:6F:89:30:3A:0B:86:5A:72:CD:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:00:b9:a3:12:76:a9:4f:47:f3:0d:bf:ab:a9:e8:8d:15:cc: c3:c5:7b:31:49:c1:4b:4d:20:dd:be:f1:3b:b2:25:b3:94:75: 86:cf:85:e8:c0:20:fa:e1:2d:4f:0d:5d:b2:7b:44:9e:a4:18: e1:7e:1d:56:6c:7b:c4:27:22:35:e3:13:84:02:a6:ff:84:e6: 71:2e:29:54:dd:6f:05:50:11:6d:65:69:5c:f8:71:da:28:2b: 32:97:9f:8e:72:b1:0b:64:ab:95:78:46:0b:b0:83:7d:68:68: 55:b8:92:1b:57:a3:80:42:2d:77:ce:d1:60:26:cd:5b:b2:b3: a3:b1:76:83:fc:16:b2:51:22:f9:85:21:65:24:82:d3:5a:86: 3d:a3:7a:c9:05:21:0f:e9:9b:ae:fd:9f:02:cf:75:7c:76:14: 22:29:1f:97:43:e5:85:e3:34:84:27:35:30:02:70:3e:b0:26: 79:a3:af:11:14:ec:c7:d2:61:a9:9c:cf:96:af:70:12:90:7e: 7e:43:05:69:38:db:ab:0f:24:8f:d6:51:23:76:e8:be:50:29: ef:3f:4b:47:8d:51:72:16:ff:a3:48:fe:ca:6d:dc:2a:61:49: 55:cd:d2:a0:00:25:a3:5e:ab:d5:8c:dd:dc:e9:bb:23:82:6d: 9e:9c:a0:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ162+ZK3JwLw+woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk YzNlNDlkOGQtMjE0MC00OGI4LTlmYmUtODYzZGQxYWQ0NWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZQBR2h9qc0rBq0zFKqzrF1WIZ3+koxW2jMt TOb8/NdEaBY/olNF+kWQUhM/QqKsJgusEuIhgQJPNmgE4zlUCpkcaAmxAx247Gqj SAUzsnE5+Bq49z1LgC2dq7cEfJSFdVJDCCJehOQo8LdVqbJ+yQPge7/V+D4W30pV d/Nt+dgNgIVinaG7ZrqESJEZ0k7HdjkIx3WozmOr6b/Cu2lW8KZp8MH575mX1Uol eOUsmEvDwqQF1fUiaGnm8EOQi9i59Wm62tJ/64NvZzhHszW8JOfhib6ioDPN0u2g xEP0llJmKHKsf+KTImh6HD8ac9QmqI4Ps1zmd2pTOYiigw6vYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPC82UQeMqFJOaZviTA6C4Zacs2SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAAuaMSdqlPR/MNv6up6I0VzMPFezFJwUtNIN2+8TuyJbOUdYbPhejA IPrhLU8NXbJ7RJ6kGOF+HVZse8QnIjXjE4QCpv+E5nEuKVTdbwVQEW1laVz4cdoo KzKXn45ysQtkq5V4Rguwg31oaFW4khtXo4BCLXfO0WAmzVuys6OxdoP8FrJRIvmF IWUkgtNahj2jeskFIQ/pm679nwLPdXx2FCIpH5dD5YXjNIQnNTACcD6wJnmjrxEU 7MfSYamcz5avcBKQfn5DBWk426sPJI/WUSN26L5QKe8/S0eNUXIW/6NI/spt3Cph SVXN0qAAJaNeq9WM3dzpuyOCbZ6coII= -----END CERTIFICATE-----Generated at Wed Nov 5 06:17:31 2025 by rpki-client