$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa File: ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa (raw, json) Hash identifier: 0NDi9NnudGIEoxsyrwjrQJs+Dw67FxpC8ZnUO4M5yhE= Subject key identifier: 24:F8:BE:CF:21:C9:01:32:2D:C3:BB:9E:24:D4:BE:E5:FD:E0:22:65 Certificate issuer: /CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Certificate serial: 010D0C9F4328584F4976494F40D7E06DF9D66980 Authority key identifier: 1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399521 IP address blocks: 172.98.8.0/24 maxlen: 24 172.98.9.0/24 maxlen: 24 172.98.10.0/24 maxlen: 24 172.98.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:49:4f:40:d7:e0:6d:f9:d6:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3be7133e-7e46-4fc6-9410-e18bafb885d8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7867cbe-c0e5-44b4-beac-a6642d6f6bcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:36:f4:4e:58:4c:a2:29:75:ca:ff:95:74:88: 57:ac:80:19:3e:1a:7d:25:56:08:7c:62:a1:f2:40: 0c:51:dd:eb:6a:61:ac:dd:30:6e:a4:f3:e0:dc:30: 7c:94:9b:f7:d2:82:b1:94:1d:91:39:d1:4d:36:74: 8b:9c:24:b3:e5:67:83:f5:0e:26:0e:db:20:a1:9a: 12:29:29:30:54:7c:2a:80:15:25:7f:5c:8b:db:4c: 1e:43:5e:c4:6a:45:a4:90:74:4c:7b:24:71:7b:d5: 38:cb:ee:88:68:34:cf:28:54:3e:de:8e:7d:97:b9: 52:6d:a4:05:4c:f2:e9:b2:da:80:2d:e2:5b:01:34: 4c:e4:cf:12:03:9f:3e:0e:e4:18:11:6f:7e:ec:ce: 7d:5a:a8:a9:39:b1:f3:84:a1:85:b1:08:ba:0b:9d: 93:30:b6:0f:22:e4:2d:45:1b:50:4c:d1:d3:9d:b0: c2:84:e0:6b:c0:54:4c:72:21:c6:14:31:e0:fa:bf: 41:45:4f:4a:b4:71:15:bd:33:7c:4c:2c:f0:64:93: ae:9a:7e:bf:47:60:a8:6f:32:cf:a4:0b:f1:5d:cf: 22:42:3b:9d:3b:32:f3:71:d4:b7:55:be:a3:74:37: 63:f3:cf:d8:b7:a6:b3:6b:65:1f:cb:20:69:f1:9e: d7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:F8:BE:CF:21:C9:01:32:2D:C3:BB:9E:24:D4:BE:E5:FD:E0:22:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/ef5b4f84-fcd9-3e5f-b986-6114bc1ef0b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8/3be7133e-7e46-4fc6-9410-e18bafb885d8.crl X509v3 Authority Key Identifier: keyid:1B:CD:05:03:12:EB:FC:D7:92:D6:FE:AA:B9:96:69:FA:0D:6C:B0:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3be7133e-7e46-4fc6-9410-e18bafb885d8.cer sbgp-ipAddrBlock: critical IPv4: 172.98.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:36:49:b5:58:79:d1:a9:1b:21:66:d2:3a:b3:81:49:62:45: 4c:b5:4e:b1:6e:a2:27:bc:fe:2f:05:14:f0:03:e4:ca:32:45: ea:a6:44:45:7e:b3:e2:71:19:93:20:22:d0:03:29:f9:b5:db: f1:02:91:3d:03:d3:af:62:43:cf:e6:28:42:c8:a8:96:0f:17: 6a:46:02:58:10:3c:fa:76:84:a2:63:d9:b6:31:44:ac:92:59: 37:53:42:49:62:38:cb:eb:5b:ea:96:9d:26:86:e9:2b:b3:b4: d1:91:86:49:d8:e3:24:9f:9e:38:fa:92:1b:bf:6c:dc:da:de: b2:94:b6:03:d9:eb:2a:51:f7:cd:e2:60:30:8b:d6:6c:8f:eb: 84:d6:86:7d:ac:a8:5e:e4:c2:0a:5c:d3:a2:db:66:fa:d9:8b: c3:91:cc:91:4e:04:2c:89:5c:e9:02:66:64:f8:57:73:4f:bb: fd:2d:b7:05:8d:cb:5c:9c:84:e3:5e:94:ff:59:32:b6:0d:c3: 95:52:ec:c1:26:06:d0:b1:74:c3:3e:62:69:73:38:75:cf:4a: 7f:86:1e:a5:10:96:2a:5e:0a:20:fa:8a:44:d0:77:ca:67:52: 39:71:b2:ec:1f:11:38:26:8f:ed:c6:21:9f:c5:85:4c:4d:77: a9:cb:61:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdklPQNfgbfnWaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2JlNzEzM2UtN2U0Ni00ZmM2LTk0MTAtZTE4YmFmYjg4 NWQ4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjc4NjdjYmUtYzBlNS00NGI0LWJlYWMtYTY2NDJkNmY2YmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTb0TlhMoil1yv+VdIhXrIAZPhp9JVYIfGKh 8kAMUd3ramGs3TBupPPg3DB8lJv30oKxlB2ROdFNNnSLnCSz5WeD9Q4mDtsgoZoS KSkwVHwqgBUlf1yL20weQ17EakWkkHRMeyRxe9U4y+6IaDTPKFQ+3o59l7lSbaQF TPLpstqALeJbATRM5M8SA58+DuQYEW9+7M59WqipObHzhKGFsQi6C52TMLYPIuQt RRtQTNHTnbDChOBrwFRMciHGFDHg+r9BRU9KtHEVvTN8TCzwZJOumn6/R2CobzLP pAvxXc8iQjudOzLzcdS3Vb6jdDdj88/Yt6aza2UfyyBp8Z7XMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCT4vs8hyQEyLcO7niTUvuX94CJlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3 MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThiYWZiODg1ZDgvZWY1YjRmODQtZmNkOS0z ZTVmLWI5ODYtNjExNGJjMWVmMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2JlNzEzM2UtN2U0Ni00ZmM2LTk0 MTAtZTE4YmFmYjg4NWQ4LzNiZTcxMzNlLTdlNDYtNGZjNi05NDEwLWUxOGJhZmI4 ODVkOC5jcmwwHwYDVR0jBBgwFoAUG80FAxLr/NeS1v6quZZp+g1ssMAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zYmU3MTMzZS03ZTQ2LTRmYzYtOTQxMC1lMThi YWZiODg1ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGIIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo2SbVYedGpGyFm0jqzgUliRUy1TrFuoie8/i8FFPAD5MoyReqmREV+ s+JxGZMgItADKfm12/ECkT0D069iQ8/mKELIqJYPF2pGAlgQPPp2hKJj2bYxRKyS WTdTQkliOMvrW+qWnSaG6SuztNGRhknY4ySfnjj6khu/bNza3rKUtgPZ6ypR983i YDCL1myP64TWhn2sqF7kwgpc06LbZvrZi8ORzJFOBCyJXOkCZmT4V3NPu/0ttwWN y1ychONelP9ZMrYNw5VS7MEmBtCxdMM+YmlzOHXPSn+GHqUQlipeCiD6ikTQd8pn UjlxsuwfETgmj+3GIZ/FhUxNd6nLYSw= -----END CERTIFICATE-----Generated at Tue Sep 29 12:38:31 2026 by rpki-client