$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: 6Ylfpe73RGxL+XyzvWkVbxOZhrOYyUmSgCmN92t/1uE= Subject key identifier: 65:FF:45:44:5B:84:C7:83:6F:89:AA:CC:05:79:A6:70:52:8B:84:B4 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584EF71763C30E25C4B37E838D00 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:63:c3:0e:25:c4:b3:7e:83:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=e432a365-125a-4923-a927-091d290e5b75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:0f:c9:b6:b1:38:35:d1:44:bd:ed:ac:28: c6:45:a9:2e:7a:d7:10:c8:e9:69:e7:3e:f1:86:8a: 08:01:52:12:49:f3:07:8f:42:e3:47:36:bf:dd:0b: 62:f1:fe:5d:61:2e:da:f8:d3:5d:75:21:f0:82:9f: 50:e2:a6:f5:29:2e:17:28:f3:9e:b3:c3:d7:d9:11: 38:eb:75:11:9a:3b:be:85:53:f2:7e:b3:44:3b:58: fd:de:d3:32:1d:fd:91:75:97:ad:93:02:3c:df:4d: bb:71:cb:84:26:fe:1e:b2:29:58:e3:97:2f:79:ae: 21:09:0c:7c:69:06:61:ca:c8:5a:5d:c7:28:c2:1c: 99:ec:7b:0d:12:fc:a0:7f:69:a8:c2:57:0b:e9:39: 94:34:09:98:5a:ba:6e:6d:2d:54:8f:66:d3:3e:cc: 7e:8f:31:ab:9c:94:78:3b:e5:5e:ce:bf:cc:88:33: 7f:85:6e:49:8b:70:92:cf:86:ef:bc:8b:b7:92:52: 85:95:43:de:ea:38:fd:18:b8:dc:76:06:58:48:8b: 96:43:ec:8f:aa:e2:94:06:cc:4b:c1:6f:ad:8b:78: ef:a5:95:0c:6b:50:16:61:99:78:b2:c0:6f:3f:a6: 44:df:6c:0b:7f:1c:83:4c:83:be:83:e9:c1:3e:91: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FF:45:44:5B:84:C7:83:6F:89:AA:CC:05:79:A6:70:52:8B:84:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d2:c4:f8:51:9b:6a:5d:9c:a0:bc:68:85:63:1e:2e:e9:8a: 99:77:47:f7:8f:82:54:f3:1a:3d:9b:80:1e:bb:7f:9d:3d:b7: 63:03:9b:1a:c0:3d:17:4a:e0:f3:fa:62:9a:09:21:8c:a1:ed: 22:0f:0b:2b:b6:54:6c:7e:80:e9:cc:04:9a:46:09:63:14:74: a3:19:0e:94:17:bc:a2:ff:fe:b9:bb:ba:e7:03:14:cf:39:b9: 30:42:eb:d3:dc:7b:d5:40:a0:f8:c6:44:96:91:ff:40:e7:64: 1b:aa:52:0d:a9:92:de:eb:84:71:31:31:c0:83:04:a2:78:ca: 42:ad:86:39:fb:41:75:cb:ac:04:16:0b:7d:4a:ce:24:04:ce: 0f:c2:9f:5a:de:ba:3d:64:43:ee:73:9e:fb:31:fa:f5:d2:bd: fd:ba:2c:bd:6a:3d:f4:53:9b:0c:64:3e:45:32:bf:76:f7:a9: 77:3a:16:d0:e8:d1:4e:dc:fa:e3:a0:c6:6f:0b:c1:bd:7b:87: 7d:f0:ec:75:40:84:ce:35:62:e2:c1:cc:89:d5:4a:0e:c6:24: 11:3a:24:71:1f:38:39:88:8e:4b:55:21:90:66:5c:b3:e9:ec: e4:68:7a:68:46:8a:03:30:fb:6c:04:c1:ed:26:eb:16:65:b7: bc:00:24:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2PDDiXEs36DjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk ZTQzMmEzNjUtMTI1YS00OTIzLWE5MjctMDkxZDI5MGU1Yjc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJIPybaxODXRRL3trCjGRakuetcQyOlp5z7x hooIAVISSfMHj0LjRza/3Qti8f5dYS7a+NNddSHwgp9Q4qb1KS4XKPOes8PX2RE4 63URmju+hVPyfrNEO1j93tMyHf2RdZetkwI83027ccuEJv4esilY45cvea4hCQx8 aQZhyshaXccowhyZ7HsNEvygf2mowlcL6TmUNAmYWrpubS1Uj2bTPsx+jzGrnJR4 O+Vezr/MiDN/hW5Ji3CSz4bvvIu3klKFlUPe6jj9GLjcdgZYSIuWQ+yPquKUBsxL wW+ti3jvpZUMa1AWYZl4ssBvP6ZE32wLfxyDTIO+g+nBPpFr0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGX/RURbhMeDb4mqzAV5pnBSi4S0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPSxPhRm2pdnKC8aIVjHi7pipl3R/ePglTzGj2bgB67f509t2MDmxrA PRdK4PP6YpoJIYyh7SIPCyu2VGx+gOnMBJpGCWMUdKMZDpQXvKL//rm7uucDFM85 uTBC69Pce9VAoPjGRJaR/0DnZBuqUg2pkt7rhHExMcCDBKJ4ykKthjn7QXXLrAQW C31KziQEzg/Cn1reuj1kQ+5znvsx+vXSvf26LL1qPfRTmwxkPkUyv3b3qXc6FtDo 0U7c+uOgxm8Lwb17h33w7HVAhM41YuLBzInVSg7GJBE6JHEfODmIjktVIZBmXLPp 7ORoemhGigMw+2wEwe0m6xZlt7wAJM8= -----END CERTIFICATE-----Generated at Fri Sep 11 01:16:07 2026 by rpki-client