$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa File: 323c2fc7-9009-33ce-aa09-64b232426f68.roa (raw, json) Hash identifier: QvCNp2gPUN790dnB7AQvPFLn9wXGONkHow86QQdQsQ4= Subject key identifier: 40:20:05:11:0B:67:F3:CB:3C:B1:7E:DE:41:7F:46:92:7F:21:28:11 Certificate issuer: /CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Certificate serial: 010D0C9F4328584F506D48F22F281844F8DB8F20 Authority key identifier: E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 398999 IP address blocks: 172.98.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:48:f2:2f:28:18:44:f8:db:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e470eb4e-d214-41dc-8f0d-9a1936ecc778 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=a5c29546-a9b3-4cf6-94e6-2fe4654ddd7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:49:de:ab:70:a0:07:64:69:5f:cf:39:e8:c4: 30:7f:b1:95:10:98:80:5b:3f:42:9a:09:00:bf:17: a0:89:b0:04:9f:aa:ea:f9:73:52:9c:c2:3d:a1:cc: 25:07:ee:fd:e1:a4:ff:3e:11:8a:8b:8d:ff:dc:0f: 17:71:88:8e:a9:1f:76:ad:4c:88:67:8e:c9:f6:5f: 27:cd:89:9c:f1:8e:3c:6c:1f:c1:ff:ba:95:f4:07: 19:fc:f1:ee:d2:18:48:29:76:4c:5a:4c:a4:5a:18: 3b:23:28:f8:9a:5f:e3:91:16:01:3d:92:76:f7:ad: a3:a2:1e:15:c0:59:f8:de:44:c2:29:bd:2d:8a:7f: 6b:2c:76:d8:16:8d:cc:9a:c6:fe:0a:a2:7b:df:95: 8e:79:8a:00:25:f8:ce:ee:3c:a4:3a:e2:70:85:b7: c1:0e:ef:d9:2e:51:43:a9:46:42:e2:95:e5:83:9c: f7:48:50:b1:7c:71:7d:9c:3c:e4:04:37:db:55:7a: 86:72:96:1b:c2:d3:48:a4:3a:94:cb:10:b4:31:e5: b0:c7:7c:15:93:68:63:06:14:2a:1d:7c:e3:e4:d1: cb:47:6f:d6:57:30:4b:e5:0c:1f:fa:de:45:5d:28: 6a:fd:51:d0:54:41:ca:f9:90:7d:f2:8e:90:35:74: c6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:20:05:11:0B:67:F3:CB:3C:B1:7E:DE:41:7F:46:92:7F:21:28:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/323c2fc7-9009-33ce-aa09-64b232426f68.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778/e470eb4e-d214-41dc-8f0d-9a1936ecc778.crl X509v3 Authority Key Identifier: keyid:E4:B0:A1:F8:61:B4:92:CD:93:0E:AB:E2:65:AF:BE:A5:B5:67:B6:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e470eb4e-d214-41dc-8f0d-9a1936ecc778.cer sbgp-ipAddrBlock: critical IPv4: 172.98.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:3b:ba:bc:29:fa:d2:b4:db:80:a2:93:99:9a:0f:7b:4f:15: b2:53:92:99:5b:74:27:a3:e4:74:30:9e:81:00:80:b3:9e:34: 9f:04:d7:86:6b:a6:0f:93:29:d4:f7:65:d4:07:6c:ca:d0:14: 1c:00:ff:5a:7a:ff:f3:a0:29:1b:ad:75:69:4d:8f:c1:22:db: 2c:73:5c:79:31:04:64:f3:ce:08:65:e8:32:fa:53:0f:f5:9b: 69:9a:25:2b:d2:cb:94:c6:c3:41:79:bd:30:4c:dc:35:47:fb: 24:f8:e1:50:92:56:63:a5:ed:21:94:5c:78:d7:7f:16:2b:72: 04:29:c6:ba:9e:65:6e:17:11:64:3d:46:26:8f:4d:68:11:01: f4:b4:30:84:2b:4e:c4:d0:c5:70:81:ef:c7:29:a1:74:9b:c8: 02:8d:e6:19:ee:31:28:d9:f7:29:b9:14:48:59:91:b2:89:70: fc:33:ee:09:65:a7:25:4e:91:5e:37:4a:ec:14:98:3f:39:5b: df:e5:fd:1d:23:8d:99:12:d1:7a:cb:79:56:37:e9:53:5c:f3: c5:53:51:2f:ea:cf:66:18:73:e6:b5:2c:ec:7c:14:12:74:6b: 3e:3a:02:cd:53:1d:b6:12:dc:f0:b5:2b:81:e3:10:19:8f:64: 6b:cd:e5:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbUjyLygYRPjbjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ3MGViNGUtZDIxNC00MWRjLThmMGQtOWExOTM2ZWNj Nzc4MB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YTVjMjk1NDYtYTliMy00Y2Y2LTk0ZTYtMmZlNDY1NGRkZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Uneq3CgB2RpX8856MQwf7GVEJiAWz9CmgkA vxegibAEn6rq+XNSnMI9ocwlB+794aT/PhGKi43/3A8XcYiOqR92rUyIZ47J9l8n zYmc8Y48bB/B/7qV9AcZ/PHu0hhIKXZMWkykWhg7Iyj4ml/jkRYBPZJ2962joh4V wFn43kTCKb0tin9rLHbYFo3Mmsb+CqJ735WOeYoAJfjO7jykOuJwhbfBDu/ZLlFD qUZC4pXlg5z3SFCxfHF9nDzkBDfbVXqGcpYbwtNIpDqUyxC0MeWwx3wVk2hjBhQq HXzj5NHLR2/WVzBL5Qwf+t5FXShq/VHQVEHK+ZB98o6QNXTGpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEAgBRELZ/PLPLF+3kF/RpJ/ISgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcw ZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5MzZlY2M3NzgvMzIzYzJmYzctOTAwOS0z M2NlLWFhMDktNjRiMjMyNDI2ZjY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTQ3MGViNGUtZDIxNC00MWRjLThm MGQtOWExOTM2ZWNjNzc4L2U0NzBlYjRlLWQyMTQtNDFkYy04ZjBkLTlhMTkzNmVj Yzc3OC5jcmwwHwYDVR0jBBgwFoAU5LCh+GG0ks2TDqviZa++pbVntvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lNDcwZWI0ZS1kMjE0LTQxZGMtOGYwZC05YTE5 MzZlY2M3NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHE7urwp+tK024Cik5maD3tPFbJTkplbdCej5HQwnoEAgLOeNJ8E14Zr pg+TKdT3ZdQHbMrQFBwA/1p6//OgKRutdWlNj8Ei2yxzXHkxBGTzzghl6DL6Uw/1 m2maJSvSy5TGw0F5vTBM3DVH+yT44VCSVmOl7SGUXHjXfxYrcgQpxrqeZW4XEWQ9 RiaPTWgRAfS0MIQrTsTQxXCB78cpoXSbyAKN5hnuMSjZ9ym5FEhZkbKJcPwz7gll pyVOkV43SuwUmD85W9/l/R0jjZkS0XrLeVY36VNc88VTUS/qz2YYc+a1LOx8FBJ0 az46As1THbYS3PC1K4HjEBmPZGvN5TE= -----END CERTIFICATE-----Generated at Tue Sep 29 02:46:56 2026 by rpki-client