$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa File: a5a24476-a36b-3ebc-a070-85d57a2a0786.roa (raw, json) Hash identifier: qztqNypmb1DfDxGlliPlrKre5eyMVXrHuL6T6tXBUII= Subject key identifier: 19:40:21:06:A4:72:62:DD:57:75:7B:96:61:9E:48:70:E6:CE:A9:76 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584E3A2F3D589D419BA706A49B40 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa Signing time: Fri 19 Jun 2026 21:00:12 +0000 ROA not before: Fri 19 Jun 2026 21:00:12 +0000 ROA not after: Thu 17 Sep 2026 21:00:12 +0000 asID: 6206 IP address blocks: 172.98.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:3a:2f:3d:58:9d:41:9b:a7:06:a4:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Jun 19 21:00:12 2026 GMT Not After : Sep 17 21:00:12 2026 GMT Subject: CN=703fee9a-4a96-4438-9570-8d6bcf6c9ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:73:49:4a:1e:a4:8b:d2:a6:22:d5:66:90:8c: 09:39:ad:13:51:6c:dd:e1:b2:09:35:b7:ab:aa:50: c5:26:8c:ab:89:8f:4b:8f:13:eb:cc:1d:c5:a5:a5: 80:f2:aa:be:21:49:14:fb:46:94:47:4e:d8:80:cb: e0:73:e6:35:73:93:a4:21:b2:42:03:8a:47:8a:ef: d7:23:47:e2:32:01:c3:2b:db:10:7c:d0:12:e7:7e: cb:68:24:9d:e0:84:b3:13:1a:5f:2e:03:57:18:f5: f2:cc:09:37:0e:f3:cf:83:7e:16:07:b7:82:cb:a0: a2:4f:18:b2:34:62:2c:10:13:99:09:2d:87:ce:5a: e3:1a:71:4b:74:b7:a1:cf:0a:f7:e6:25:b7:0d:08: c3:d1:67:bd:fb:c0:c3:fb:cf:1c:4b:89:11:3a:f7: 0b:2d:ca:69:f3:d4:5b:b0:99:23:8a:bf:12:a6:68: 3f:b8:65:61:8f:4c:e2:8d:6a:ca:31:12:77:15:46: 13:21:2c:ec:55:61:ec:08:01:98:db:8b:52:9c:94: 85:ca:97:04:39:eb:38:ba:f1:f6:a5:95:5e:35:ec: 8b:c2:e0:65:28:2d:da:c5:0b:de:2a:87:7f:0e:cc: 91:9c:7a:19:9f:4d:33:b2:42:87:4f:1e:26:a5:48: 49:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:40:21:06:A4:72:62:DD:57:75:7B:96:61:9E:48:70:E6:CE:A9:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/a5a24476-a36b-3ebc-a070-85d57a2a0786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 172.98.34.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:06:7e:a6:64:26:9e:09:f6:83:4c:6a:7d:85:6d:7e:e5:e5: b4:73:bd:40:5e:a3:6a:0a:19:b3:80:03:57:9a:eb:66:02:22: 72:b6:b7:1d:dd:5e:be:a9:9c:4e:86:21:30:f0:61:c7:46:18: ca:5e:7d:32:d8:c2:58:28:d2:11:2b:62:a5:8f:d1:5d:a6:46: 05:ca:34:3e:fc:fe:f0:7c:8c:d4:23:ba:69:89:d7:a1:14:9f: cd:6b:6e:b8:a3:b2:68:cc:c3:11:fe:56:43:64:68:28:19:4b: 79:b0:a3:e2:6f:c7:7f:c3:11:35:a0:2a:95:a2:65:f6:f6:d3: 89:1f:ce:9c:ce:0a:e7:aa:e7:6f:f7:17:5d:b5:18:6a:59:66: 1a:b0:5e:c4:c4:84:dd:ac:56:22:88:8d:7c:1c:47:19:52:fd: fa:57:cc:59:2d:eb:4f:83:e2:ba:07:82:14:50:05:28:7f:f1: 9a:3a:07:04:c1:27:8d:8a:fc:0a:b8:b2:6b:72:0b:0a:d0:60: 2f:86:83:39:33:45:9c:92:8c:95:81:db:b2:4e:05:12:12:d0: 0a:3b:18:be:48:ec:ca:88:2b:29:4b:b3:8b:69:ce:b2:7b:1f: eb:5b:fc:bb:98:64:d0:de:c5:8d:82:30:28:02:c5:ed:b8:ad: ed:ca:7f:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE46Lz1YnUGbpwakm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MDYxOTIxMDAxMloXDTI2MDkxNzIxMDAxMlowLzEtMCsGA1UEAxMk NzAzZmVlOWEtNGE5Ni00NDM4LTk1NzAtOGQ2YmNmNmM5ZWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nNJSh6ki9KmItVmkIwJOa0TUWzd4bIJNber qlDFJoyriY9LjxPrzB3FpaWA8qq+IUkU+0aUR07YgMvgc+Y1c5OkIbJCA4pHiu/X I0fiMgHDK9sQfNAS537LaCSd4ISzExpfLgNXGPXyzAk3DvPPg34WB7eCy6CiTxiy NGIsEBOZCS2HzlrjGnFLdLehzwr35iW3DQjD0We9+8DD+88cS4kROvcLLcpp89Rb sJkjir8Spmg/uGVhj0zijWrKMRJ3FUYTISzsVWHsCAGY24tSnJSFypcEOes4uvH2 pZVeNeyLwuBlKC3axQveKod/DsyRnHoZn00zskKHTx4mpUhJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlAIQakcmLdV3V7lmGeSHDmzql2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvYTVhMjQ0NzYtYTM2Yi0z ZWJjLWEwNzAtODVkNTdhMmEwNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIGfqZkJp4J9oNMan2FbX7l5bRzvUBeo2oKGbOAA1ea62YCInK2tx3d Xr6pnE6GITDwYcdGGMpefTLYwlgo0hErYqWP0V2mRgXKND78/vB8jNQjummJ16EU n81rbrijsmjMwxH+VkNkaCgZS3mwo+Jvx3/DETWgKpWiZfb204kfzpzOCueq52/3 F121GGpZZhqwXsTEhN2sViKIjXwcRxlS/fpXzFkt60+D4roHghRQBSh/8Zo6BwTB J42K/Aq4smtyCwrQYC+GgzkzRZySjJWB27JOBRIS0Ao7GL5I7MqIKylLs4tpzrJ7 H+tb/LuYZNDexY2CMCgCxe24re3Kf1Y= -----END CERTIFICATE-----Generated at Thu Jul 23 19:13:30 2026 by rpki-client