$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa File: 78d25783-4242-3135-bbff-5e8d4fe93a38.roa (raw, json) Hash identifier: iRVmEoOofpWgt7X+jJB/piuZJvlqQ0KyNVtxSewAy0U= Subject key identifier: 34:04:B4:D1:CF:66:63:B3:89:84:76:01:63:04:3C:9A:FE:BC:A6:8A Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584AD23BB355A4FF6638A15F2CA0 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa Signing time: Mon 11 Aug 2025 13:00:40 +0000 ROA not before: Mon 11 Aug 2025 13:00:40 +0000 ROA not after: Sun 09 Nov 2025 14:00:40 +0000 asID: 396356 IP address blocks: 172.98.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d2:3b:b3:55:a4:ff:66:38:a1:5f:2c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Aug 11 13:00:40 2025 GMT Not After : Nov 9 14:00:40 2025 GMT Subject: CN=ec0bf122-3202-49cb-a7f9-eeaf255ca7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:85:65:9a:a4:d1:bd:a7:eb:8f:58:71:41:95: 01:f6:7d:af:9b:6c:b7:e3:59:06:26:c0:26:91:ae: 1f:d0:07:19:d5:2b:73:43:4e:b5:8d:4f:f9:af:39: 92:7a:f9:e2:5c:ed:62:df:52:b6:05:05:6b:99:ec: dd:88:05:67:70:49:38:7a:71:dc:a5:73:da:ab:66: b3:87:b8:09:64:6f:cc:96:26:0a:a4:cc:47:cc:9f: d5:92:9a:0d:4b:eb:85:b1:86:d7:a4:00:19:6a:b1: f6:f6:ed:9a:1f:c7:52:dc:da:d5:7a:f5:82:0c:49: 78:0c:42:77:2a:0d:1b:aa:d4:d7:e5:8a:e2:8a:a7: 71:77:88:21:fd:d7:fb:9c:d6:42:f1:2f:86:ee:76: 21:72:3e:a2:c7:5e:bf:89:00:04:dd:77:c0:35:ac: d6:76:3d:8a:a1:c1:81:8c:e3:22:f9:b2:8d:1c:91: 74:13:77:f8:c2:33:58:ab:89:01:4d:cb:f7:5e:9d: 21:84:0c:70:05:c1:bf:fd:15:6a:6e:83:3d:fc:b7: 10:93:62:71:48:42:c8:ac:2f:59:1d:ef:b2:d4:40: 95:30:e3:99:41:84:b8:08:68:9e:62:a6:5e:3e:73: 7f:cb:d6:c9:15:6a:07:31:97:ae:67:09:f7:76:e0: be:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:B4:D1:CF:66:63:B3:89:84:76:01:63:04:3C:9A:FE:BC:A6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/78d25783-4242-3135-bbff-5e8d4fe93a38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:16:2f:d9:54:0c:52:6d:c3:46:89:30:26:d3:e9:7e:02:92: 9f:0e:87:b5:4f:10:5c:73:fa:ef:2b:b3:bb:cc:b0:2f:76:13: 17:2f:74:60:71:24:4b:9f:6b:db:55:a6:fe:23:4f:11:58:c3: 00:97:f8:e0:7a:2b:fb:2d:57:4d:49:d8:b9:35:3e:03:48:30: ed:b6:df:3c:d3:d3:f7:20:6f:e8:51:f0:f7:89:51:40:27:68: 4f:4a:60:0f:7a:9e:ef:8d:f1:18:02:6f:59:bc:db:06:c8:8e: 9f:85:1d:e3:db:ee:3d:85:16:7a:b7:2a:2a:f0:c6:a3:29:c1: ae:bb:d3:e2:48:bb:c3:19:09:c5:12:95:78:34:88:53:79:c6: 4c:b6:5f:a7:da:33:16:7e:37:7f:99:ce:9b:5d:99:22:36:39: 14:a8:81:33:90:1e:61:68:14:df:c9:0c:1c:cb:b6:da:a0:fd: 4d:98:af:02:ea:f5:ad:bb:c0:16:9c:e0:80:dd:be:37:3c:d5: 8e:71:3d:f9:b1:49:d7:0c:25:5a:c9:6c:89:9f:fc:d2:81:09: 5f:4f:0e:99:a5:4f:64:db:67:b5:c7:be:59:e6:8f:58:b9:be: e8:1f:aa:0c:cd:f7:c6:78:34:1e:c4:51:6e:b9:7f:0d:18:64: f2:af:74:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO7NVpP9mOKFfLKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk ZWMwYmYxMjItMzIwMi00OWNiLWE3ZjktZWVhZjI1NWNhN2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYVlmqTRvafrj1hxQZUB9n2vm2y341kGJsAm ka4f0AcZ1StzQ061jU/5rzmSevniXO1i31K2BQVrmezdiAVncEk4enHcpXPaq2az h7gJZG/MliYKpMxHzJ/VkpoNS+uFsYbXpAAZarH29u2aH8dS3NrVevWCDEl4DEJ3 Kg0bqtTX5Yriiqdxd4gh/df7nNZC8S+G7nYhcj6ix16/iQAE3XfANazWdj2KocGB jOMi+bKNHJF0E3f4wjNYq4kBTcv3Xp0hhAxwBcG//RVqboM9/LcQk2JxSELIrC9Z He+y1ECVMOOZQYS4CGieYqZePnN/y9bJFWoHMZeuZwn3duC++QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQEtNHPZmOziYR2AWMEPJr+vKaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvNzhkMjU3ODMtNDI0Mi0z MTM1LWJiZmYtNWU4ZDRmZTkzYTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgWL9lUDFJtw0aJMCbT6X4Ckp8Oh7VPEFxz+u8rs7vMsC92ExcvdGBx JEufa9tVpv4jTxFYwwCX+OB6K/stV01J2Lk1PgNIMO223zzT0/cgb+hR8PeJUUAn aE9KYA96nu+N8RgCb1m82wbIjp+FHePb7j2FFnq3KirwxqMpwa670+JIu8MZCcUS lXg0iFN5xky2X6faMxZ+N3+ZzptdmSI2ORSogTOQHmFoFN/JDBzLttqg/U2YrwLq 9a27wBac4IDdvjc81Y5xPfmxSdcMJVrJbImf/NKBCV9PDpmlT2TbZ7XHvlnmj1i5 vugfqgzN98Z4NB7EUW65fw0YZPKvdHg= -----END CERTIFICATE-----Generated at Sat Aug 23 19:53:44 2025 by rpki-client