$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: mqEXbB05VB75FYn45n+EBRzJ6XOKiKa/ALhwIES67uI= Subject key identifier: 44:F6:90:93:B1:EB:6C:34:C6:C3:A7:4E:44:BE:D6:61:6D:30:E1:A9 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D037D02CCA17C042F1613DDE0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Sat 28 Feb 2026 14:00:40 +0000 ROA not before: Sat 28 Feb 2026 14:00:40 +0000 ROA not after: Fri 29 May 2026 13:00:40 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:03:7d:02:cc:a1:7c:04:2f:16:13:dd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 28 14:00:40 2026 GMT Not After : May 29 13:00:40 2026 GMT Subject: CN=c8de73c4-00b7-4016-ab36-06b528d2a51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:70:54:ed:8c:db:23:1d:23:cc:88:23:92: e2:32:c6:db:ed:12:57:ae:d3:6d:88:c3:82:0d:66: 04:d6:83:4d:19:2a:9e:8e:b7:a1:16:20:af:0d:f6: 09:e1:7d:b0:92:a4:04:86:53:19:4a:c0:71:64:e5: 04:b7:6b:de:db:8f:6b:f5:88:5b:71:31:f9:ad:af: 7f:f0:54:60:31:59:93:4a:67:40:b2:9f:b0:9c:9f: 4b:8a:99:18:f1:e1:b5:72:99:b5:d2:7a:79:2d:3a: d5:42:6b:07:80:6a:fb:48:20:ff:c0:4f:63:be:16: ee:44:ac:b5:5a:72:28:14:5f:77:c7:bb:70:14:c9: 54:aa:15:4b:ca:aa:7e:13:6e:a1:55:ee:9d:11:c6: 8a:97:db:dd:f3:b0:3f:8f:ec:fe:f5:26:f5:a0:d6: e7:62:07:9e:81:cd:b7:3b:0f:9b:9f:75:5b:f2:d9: 43:71:4f:d4:d1:33:63:ba:b8:25:bd:71:b2:77:ef: 82:3a:5a:d3:95:bf:c6:17:60:5b:21:45:b1:80:af: a5:74:41:3b:a4:54:6f:a6:03:e9:17:83:aa:7b:af: 69:c6:10:85:2a:8b:4b:f1:a7:19:4c:99:fc:af:de: 8a:bc:e0:43:b6:37:aa:70:15:80:55:ed:93:c9:17: e1:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:F6:90:93:B1:EB:6C:34:C6:C3:A7:4E:44:BE:D6:61:6D:30:E1:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:75:ba:e5:a5:ef:3c:17:6a:e7:2d:22:bf:dc:1f:71:b0:ed: c7:6f:e3:86:2b:dd:00:f6:4b:b0:95:b5:8a:b9:81:83:10:be: e0:fa:c3:0d:65:49:63:13:c5:25:d1:23:95:0b:dc:74:7e:02: 3d:80:72:56:7c:bf:d0:ce:b1:10:9c:3f:f2:a7:c0:b6:4f:9c: 76:2d:c4:ed:ef:ca:26:50:f0:63:79:5c:d3:37:19:83:0b:bb: 7d:43:06:09:9e:6c:51:ab:0e:f7:1c:37:8d:bb:4d:b0:8f:c4: 46:3f:a5:05:3e:9a:45:0f:30:30:a8:1d:0f:d3:c0:aa:21:1d: f7:c7:61:0b:83:c0:79:18:0e:b7:d8:d8:34:a0:cb:47:26:6f: 1c:a1:a1:e9:94:64:8e:d1:35:68:b1:a0:bb:5a:b8:43:f8:ae: 2b:c3:50:25:60:9e:17:13:71:bf:17:86:1f:d5:09:92:45:c7: 74:40:c4:d4:cb:a0:05:86:64:9c:6e:92:6d:24:de:7c:59:d5: 00:90:36:a5:44:bf:4f:25:3d:d5:d0:f1:08:b5:ed:c3:04:c0: 3b:9d:ac:3e:2f:2e:28:a1:29:9a:f9:1e:46:97:78:88:f3:99: 43:b8:49:74:b2:59:e7:4a:9e:e2:1c:41:9b:db:5f:08:b3:9a: 9e:de:d4:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0DfQLMoXwELxYT3eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk YzhkZTczYzQtMDBiNy00MDE2LWFiMzYtMDZiNTI4ZDJhNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmVwVO2M2yMdI8yII5LiMsbb7RJXrtNtiMOC DWYE1oNNGSqejrehFiCvDfYJ4X2wkqQEhlMZSsBxZOUEt2ve249r9YhbcTH5ra9/ 8FRgMVmTSmdAsp+wnJ9LipkY8eG1cpm10np5LTrVQmsHgGr7SCD/wE9jvhbuRKy1 WnIoFF93x7twFMlUqhVLyqp+E26hVe6dEcaKl9vd87A/j+z+9Sb1oNbnYgeegc23 Ow+bn3Vb8tlDcU/U0TNjurglvXGyd++COlrTlb/GF2BbIUWxgK+ldEE7pFRvpgPp F4Oqe69pxhCFKotL8acZTJn8r96KvOBDtjeqcBWAVe2TyRfhfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFET2kJOx62w0xsOnTkS+1mFtMOGpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIp1uuWl7zwXauctIr/cH3Gw7cdv44Yr3QD2S7CVtYq5gYMQvuD6ww1l SWMTxSXRI5UL3HR+Aj2AclZ8v9DOsRCcP/KnwLZPnHYtxO3vyiZQ8GN5XNM3GYML u31DBgmebFGrDvccN427TbCPxEY/pQU+mkUPMDCoHQ/TwKohHffHYQuDwHkYDrfY 2DSgy0cmbxyhoemUZI7RNWixoLtauEP4rivDUCVgnhcTcb8Xhh/VCZJFx3RAxNTL oAWGZJxukm0k3nxZ1QCQNqVEv08lPdXQ8Qi17cMEwDudrD4vLiihKZr5HkaXeIjz mUO4SXSyWedKnuIcQZvbXwizmp7e1Mo= -----END CERTIFICATE-----Generated at Mon Mar 2 07:51:46 2026 by rpki-client