$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: /M21p/0AUjEzuF9QY0Jpfdfb4B+ICd5sDdv2Fg/ld8A= Subject key identifier: 66:FF:9B:0C:4B:BC:70:AF:5C:58:C8:0F:0C:31:1C:36:C1:57:29:9C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E9D4A6490607E2BD7218D77C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:64:90:60:7e:2b:d7:21:8d:77:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=7a4addcb-4986-4394-84f0-511e79302f82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:11:97:43:8f:9e:15:7e:cd:2d:8d:a7:dd:94: 45:55:c3:42:84:63:6b:97:43:e6:7f:a6:5a:6d:67: 5f:c4:bd:cf:9c:dc:e5:31:b1:9b:1c:8c:b0:7c:12: 26:83:da:33:87:da:14:a4:a8:b8:60:3c:2d:a6:15: 4c:1b:2e:74:a0:20:50:fc:0e:b8:f6:d8:c0:9f:50: 05:96:d3:ae:73:0f:b0:84:f1:aa:dd:5a:da:a7:7f: 1f:ad:2d:4c:6a:97:c3:91:7a:cb:91:e1:2e:2a:c8: 51:72:fa:83:9e:f7:b8:db:23:a8:f5:93:73:d0:fa: 8f:95:ef:6c:09:62:d0:52:ed:f2:f5:93:e5:9e:ba: 7e:af:bb:d5:77:a8:11:92:82:b8:95:4d:56:10:e7: e4:2a:57:4a:54:7b:02:11:78:74:82:40:8d:5a:62: d4:e8:64:5c:6b:1d:26:af:99:62:c0:dc:e9:43:ac: c6:e4:bd:05:36:e8:84:90:1e:e5:33:ef:a5:2d:10: 73:58:34:36:b9:97:47:4b:7f:c5:7f:c7:a3:f5:2a: f9:07:30:eb:2a:ce:8c:ba:6b:a7:1c:82:72:d5:f7: af:a1:72:02:f4:c6:b7:1b:41:76:44:ba:12:6c:93: ee:3c:e2:dc:19:27:50:a1:12:96:e5:ce:00:e1:65: aa:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FF:9B:0C:4B:BC:70:AF:5C:58:C8:0F:0C:31:1C:36:C1:57:29:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:51:6f:c5:3c:57:f3:0b:ef:ba:59:d6:5a:6a:b1:66:82:c4: e6:55:5c:49:ae:15:a8:33:77:0e:2f:9c:1b:0b:60:5c:8e:23: 6c:b5:3b:b5:74:8b:d1:57:c0:8b:0a:91:f9:05:bb:04:d4:63: f3:18:6e:91:a7:89:42:06:10:3c:c4:a3:06:b8:c2:1a:c2:03: e2:8b:ba:77:49:ff:42:c7:84:91:ff:d4:d6:64:ba:aa:04:6a: 6f:05:5b:f1:db:45:ed:65:0c:62:c8:7f:f9:dc:88:84:a4:6c: 81:ca:86:8c:ae:79:40:3c:8a:12:49:c9:6b:53:1c:da:6c:07: f4:be:2d:0f:fd:01:83:a5:95:44:63:01:72:d8:01:e9:37:e6: a1:51:6d:03:4d:d0:47:65:36:ad:26:9c:03:f0:88:82:de:85: 8d:ca:2a:91:11:9d:ca:c2:a6:2f:17:56:3b:ca:ca:03:42:60: e2:8c:fa:ec:ab:f8:b1:26:13:28:7c:1d:55:9a:4a:30:b1:7b: 8a:fe:82:cb:2a:ef:f7:fe:31:ee:35:36:df:d2:83:09:2b:8b: 36:6f:79:40:46:0d:e5:ae:f1:fe:ed:96:84:38:bc:b2:47:49: 68:40:d0:98:44:f1:ab:ad:3e:34:4d:f5:70:9a:10:44:0a:30: 51:da:9b:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSmSQYH4r1yGNd8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk N2E0YWRkY2ItNDk4Ni00Mzk0LTg0ZjAtNTExZTc5MzAyZjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhGXQ4+eFX7NLY2n3ZRFVcNChGNrl0Pmf6Za bWdfxL3PnNzlMbGbHIywfBImg9ozh9oUpKi4YDwtphVMGy50oCBQ/A649tjAn1AF ltOucw+whPGq3Vrap38frS1MapfDkXrLkeEuKshRcvqDnve42yOo9ZNz0PqPle9s CWLQUu3y9ZPlnrp+r7vVd6gRkoK4lU1WEOfkKldKVHsCEXh0gkCNWmLU6GRcax0m r5liwNzpQ6zG5L0FNuiEkB7lM++lLRBzWDQ2uZdHS3/Ff8ej9Sr5BzDrKs6Mumun HIJy1fevoXIC9Ma3G0F2RLoSbJPuPOLcGSdQoRKW5c4A4WWqGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb/mwxLvHCvXFjIDwwxHDbBVymcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZRb8U8V/ML77pZ1lpqsWaCxOZVXEmuFagzdw4vnBsLYFyOI2y1O7V0 i9FXwIsKkfkFuwTUY/MYbpGniUIGEDzEowa4whrCA+KLundJ/0LHhJH/1NZkuqoE am8FW/HbRe1lDGLIf/nciISkbIHKhoyueUA8ihJJyWtTHNpsB/S+LQ/9AYOllURj AXLYAek35qFRbQNN0EdlNq0mnAPwiILehY3KKpERncrCpi8XVjvKygNCYOKM+uyr +LEmEyh8HVWaSjCxe4r+gssq7/f+Me41Nt/SgwkrizZveUBGDeWu8f7tloQ4vLJH SWhA0JhE8autPjRN9XCaEEQKMFHam/A= -----END CERTIFICATE-----Generated at Tue Jul 28 20:51:40 2026 by rpki-client