$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: SzEpjZmMXgE4EPBiglt23I2ilf3dDQUyGqDOxP4Bh5s= Subject key identifier: 0E:3F:66:50:29:AD:85:E6:18:F3:9E:70:71:64:A3:F2:2E:6A:15:87 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584EDC9210DE7A068526CCF74680 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:92:10:de:7a:06:85:26:cc:f7:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=77419e69-4621-476d-be7f-21919c310faf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f7:1d:5d:62:b1:be:a4:ba:f2:8e:62:34:71: 1a:01:c8:28:5e:ae:98:2e:35:15:29:98:4c:b3:1c: b6:18:27:c8:27:c9:36:4d:93:24:91:7d:2c:97:5f: d2:3f:15:8e:b4:ff:75:d1:30:ee:5c:e8:80:cf:c4: 85:be:6f:f4:f6:52:50:7b:d4:09:cc:ad:2a:4c:2d: 6c:e9:58:5f:bf:8e:13:5a:94:77:24:6b:89:e8:df: 58:f6:2c:88:66:dc:9f:af:73:98:3d:b4:95:83:01: 1b:9c:e1:29:ca:45:b3:76:7d:9b:34:13:56:2a:f9: bd:b2:0d:00:c9:78:3e:67:4f:ad:58:50:46:d4:78: bc:f2:9f:d4:29:0a:84:76:2b:95:1b:32:0c:73:59: ad:bd:47:36:7d:ec:b1:4b:95:de:85:41:eb:c8:30: 2a:6f:aa:d9:32:f5:bd:61:36:9a:56:c0:e3:d1:80: d9:45:8b:85:b2:8e:89:b6:06:37:dc:d0:65:55:3e: dc:29:8e:dd:42:b6:da:41:c5:c9:41:1d:5b:29:ee: 89:71:ce:c8:e0:9e:85:c8:77:a6:64:15:a5:51:6b: 1f:28:7d:db:d3:b9:cd:0a:62:f4:28:14:10:4a:3f: 0b:a9:fd:76:da:39:27:90:9b:60:22:ee:bc:b8:81: 39:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:3F:66:50:29:AD:85:E6:18:F3:9E:70:71:64:A3:F2:2E:6A:15:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:62:92:ce:53:ce:c6:35:fd:b1:a9:bf:05:37:03:ce:44:76: 84:13:56:92:94:b5:7d:c3:dc:1d:03:2b:83:d4:24:05:15:3d: 4b:af:b4:62:d9:d7:c3:54:98:f8:d4:f3:a9:7a:96:e8:ff:ff: aa:f7:e8:01:d3:60:0b:b3:d1:5f:af:23:74:29:9a:3b:4d:be: c9:db:5b:c2:cd:f7:4b:54:da:b8:b0:9c:b5:25:f3:64:78:62: db:ea:4a:49:15:86:9f:41:b7:7d:8a:0b:27:0b:7b:b1:fa:46: d1:ca:c1:12:f6:8b:1e:e3:0a:e4:6a:40:1f:58:0e:ab:93:c0: f8:b2:ae:10:e3:4e:4a:df:52:93:8f:71:e1:70:2b:3f:7d:11: 87:07:6c:c6:b3:15:35:9d:e2:40:2a:f5:61:7b:38:5f:89:40: 53:2d:2f:e2:3a:d7:93:fe:1c:c6:3e:4c:76:72:cb:44:20:49: 79:03:da:91:6f:e8:95:d3:03:74:9f:7d:33:1b:07:ed:df:4a: 13:4a:8b:29:57:41:21:e8:92:b4:da:84:f4:08:a5:3c:9d:d5: 98:e9:75:03:fc:d4:1f:c2:fc:80:15:46:d3:56:53:af:e9:6b: 93:4d:da:d0:70:ed:4a:12:38:3d:ac:2d:d6:4c:7a:3e:b4:f2: ce:6e:0f:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckhDeegaFJsz3RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk Nzc0MTllNjktNDYyMS00NzZkLWJlN2YtMjE5MTljMzEwZmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/cdXWKxvqS68o5iNHEaAcgoXq6YLjUVKZhM sxy2GCfIJ8k2TZMkkX0sl1/SPxWOtP910TDuXOiAz8SFvm/09lJQe9QJzK0qTC1s 6Vhfv44TWpR3JGuJ6N9Y9iyIZtyfr3OYPbSVgwEbnOEpykWzdn2bNBNWKvm9sg0A yXg+Z0+tWFBG1Hi88p/UKQqEdiuVGzIMc1mtvUc2feyxS5XehUHryDAqb6rZMvW9 YTaaVsDj0YDZRYuFso6JtgY33NBlVT7cKY7dQrbaQcXJQR1bKe6Jcc7I4J6FyHem ZBWlUWsfKH3b07nNCmL0KBQQSj8Lqf122jknkJtgIu68uIE5RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4/ZlAprYXmGPOecHFko/IuahWHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxiks5TzsY1/bGpvwU3A85EdoQTVpKUtX3D3B0DK4PUJAUVPUuvtGLZ 18NUmPjU86l6luj//6r36AHTYAuz0V+vI3QpmjtNvsnbW8LN90tU2riwnLUl82R4 YtvqSkkVhp9Bt32KCycLe7H6RtHKwRL2ix7jCuRqQB9YDquTwPiyrhDjTkrfUpOP ceFwKz99EYcHbMazFTWd4kAq9WF7OF+JQFMtL+I615P+HMY+THZyy0QgSXkD2pFv 6JXTA3SffTMbB+3fShNKiylXQSHokrTahPQIpTyd1ZjpdQP81B/C/IAVRtNWU6/p a5NN2tBw7UoSOD2sLdZMej608s5uD6c= -----END CERTIFICATE-----Generated at Thu Sep 10 18:09:42 2026 by rpki-client