$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa File: 576102ce-aaa4-376a-8685-00b6e6cb9e91.roa (raw, json) Hash identifier: 4KGo+fpsjCUBXm0OpvEcra4pL/vd3G0vAX5K3PNpWn4= Subject key identifier: F2:3D:DF:57:99:C0:DA:9E:CD:33:33:23:34:8A:B4:F4:E4:E9:39:A8 Certificate issuer: /CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f Certificate serial: 010D0C9F4328584F612D65240951E8A00B23A000 Authority key identifier: B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 393950 IP address blocks: 172.98.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:65:24:09:51:e8:a0:0b:23:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=734331b5-ba25-4d2e-ad3a-ce9ff6524e1f Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=dbc0da1c-9580-4701-b5ec-b3893d226463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:ae:df:cd:38:01:d6:87:44:65:11:0e:36:57: cb:57:bc:5d:c1:8a:9d:59:5c:e1:61:46:7f:41:41: 79:ad:32:dc:18:96:d7:64:e8:1e:15:f5:c6:d3:13: 65:39:00:5d:7f:cf:de:68:b3:6b:9c:16:e4:16:05: 6a:79:f7:89:73:a9:96:d4:d8:41:f0:b5:a7:80:6d: 67:24:3c:c5:8d:b4:3c:ee:8c:55:97:39:d7:3b:fe: 0c:7f:b5:a9:cc:39:95:93:bf:47:df:b7:8e:d6:38: 3d:62:f6:b1:ed:a6:fb:44:99:f1:b1:91:77:6c:d6: 6e:96:90:69:70:d5:29:f8:2c:2a:05:3e:27:3b:2d: 2e:f9:ab:02:fc:f4:86:a7:c5:d2:d3:b6:da:00:1e: e1:4a:e9:2a:70:3d:7c:71:70:a5:5c:2e:3e:81:17: 51:bf:f2:1a:54:a8:a8:ba:8c:a3:d2:a6:e8:b1:80: 8f:95:00:7a:7a:7b:23:0a:e0:a7:ec:94:20:d6:0b: e9:d2:27:56:57:4d:f6:86:f8:27:fa:51:39:15:b7: 55:ec:92:64:5a:93:aa:7d:6e:fe:79:6b:9a:2d:61: 53:4b:a1:5a:d2:8e:a7:33:00:e2:57:64:3c:97:10: 8f:14:17:f8:4f:c0:b7:36:02:d2:48:f1:e8:fa:74: 9e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3D:DF:57:99:C0:DA:9E:CD:33:33:23:34:8A:B4:F4:E4:E9:39:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/576102ce-aaa4-376a-8685-00b6e6cb9e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.crl X509v3 Authority Key Identifier: keyid:B4:37:CD:B6:90:F1:2D:53:ED:DE:17:C7:CE:9A:22:44:93:0E:EA:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/734331b5-ba25-4d2e-ad3a-ce9ff6524e1f.cer sbgp-ipAddrBlock: critical IPv4: 172.98.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:a8:d5:bf:72:7c:55:58:c1:50:b7:f5:80:b2:b5:d2:1c:3c: 91:1f:61:b1:55:5e:9f:60:13:96:ed:58:de:21:9a:7f:1f:f6: 59:3a:89:a6:9b:87:87:49:41:70:c4:a2:9f:a3:6b:a2:b7:06: 2c:13:d4:cc:2e:47:63:79:b7:c5:3b:70:9b:f4:be:8c:83:a8: ef:61:5f:dd:ca:d5:92:e5:05:16:4d:ab:26:8c:7a:93:94:11: a9:81:60:26:ba:51:1d:02:73:70:aa:88:f0:43:ec:69:ce:a4: 7e:67:f8:a3:01:81:6e:93:48:cf:2f:3f:c0:5f:68:61:c3:eb: 9a:eb:09:58:7e:8b:7f:8b:3b:9b:7b:8f:9d:8d:24:79:76:7f: 30:08:98:a9:16:1a:4b:ea:81:79:25:8e:59:08:96:03:76:bd: 95:18:fb:91:82:7a:22:86:6f:92:24:aa:a0:fc:bb:c7:06:ed: 18:70:c3:14:df:1a:bf:c3:e1:4e:c2:3d:61:15:c4:aa:1a:a7: 39:80:cd:76:96:93:eb:4c:42:54:d5:0f:b8:50:63:8f:14:3d: 05:18:ba:47:f1:75:8d:86:56:84:77:9a:45:82:d7:61:a6:a4: a0:8f:8c:aa:b2:72:19:b6:21:08:8a:d6:e2:7e:57:a5:51:cc: 17:2a:e0:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWUkCVHooAsjoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzM0MzMxYjUtYmEyNS00ZDJlLWFkM2EtY2U5ZmY2NTI0 ZTFmMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZGJjMGRhMWMtOTU4MC00NzAxLWI1ZWMtYjM4OTNkMjI2NDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK7fzTgB1odEZREONlfLV7xdwYqdWVzhYUZ/ QUF5rTLcGJbXZOgeFfXG0xNlOQBdf8/eaLNrnBbkFgVqefeJc6mW1NhB8LWngG1n JDzFjbQ87oxVlznXO/4Mf7WpzDmVk79H37eO1jg9Yvax7ab7RJnxsZF3bNZulpBp cNUp+CwqBT4nOy0u+asC/PSGp8XS07baAB7hSukqcD18cXClXC4+gRdRv/IaVKio uoyj0qbosYCPlQB6ensjCuCn7JQg1gvp0idWV032hvgn+lE5FbdV7JJkWpOqfW7+ eWuaLWFTS6Fa0o6nMwDiV2Q8lxCPFBf4T8C3NgLSSPHo+nSeOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI931eZwNqezTMzIzSKtPTk6TmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83MzQz MzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlmZjY1MjRlMWYvNTc2MTAyY2UtYWFhNC0z NzZhLTg2ODUtMDBiNmU2Y2I5ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNzM0MzMxYjUtYmEyNS00ZDJlLWFk M2EtY2U5ZmY2NTI0ZTFmLzczNDMzMWI1LWJhMjUtNGQyZS1hZDNhLWNlOWZmNjUy NGUxZi5jcmwwHwYDVR0jBBgwFoAUtDfNtpDxLVPt3hfHzpoiRJMO6vYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC83MzQzMzFiNS1iYTI1LTRkMmUtYWQzYS1jZTlm ZjY1MjRlMWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErGKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuo1b9yfFVYwVC39YCytdIcPJEfYbFVXp9gE5btWN4hmn8f9lk6iaab h4dJQXDEop+ja6K3BiwT1MwuR2N5t8U7cJv0voyDqO9hX93K1ZLlBRZNqyaMepOU EamBYCa6UR0Cc3CqiPBD7GnOpH5n+KMBgW6TSM8vP8BfaGHD65rrCVh+i3+LO5t7 j52NJHl2fzAImKkWGkvqgXkljlkIlgN2vZUY+5GCeiKGb5IkqqD8u8cG7RhwwxTf Gr/D4U7CPWEVxKoapzmAzXaWk+tMQlTVD7hQY48UPQUYukfxdY2GVoR3mkWC12Gm pKCPjKqychm2IQiK1uJ+V6VRzBcq4Nk= -----END CERTIFICATE-----Generated at Wed Nov 4 17:03:53 2026 by rpki-client