$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: JVvTb8BiCNIOs18Qy4OgILSi+pNdUkr8iSG1NARxY0M= Subject key identifier: 26:B1:0A:E4:D0:36:B7:62:19:8E:76:57:D2:11:47:A6:09:7F:98:BC Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F3FAD303B0E82EF841CA10280 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:30:3b:0e:82:ef:84:1c:a1:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=d802605a-6499-4c05-997d-e6a3b936db52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:c2:bd:cf:f9:fa:de:ac:7d:11:74:3b:31: b0:80:65:6c:74:2b:b0:3a:89:d4:51:bd:c1:f6:8b: 21:88:b2:69:15:be:64:32:d2:02:87:98:da:3e:71: 70:be:5c:e1:47:4d:29:4f:2f:f0:8e:87:58:bd:53: 03:2d:42:58:4c:a5:8c:d5:60:33:8b:9a:02:85:27: 0a:88:b4:de:42:58:ad:b8:ee:50:d0:e7:f4:b8:7b: 84:d1:3c:22:56:f7:51:23:31:87:29:1b:62:86:b9: f6:b7:0f:c4:19:8e:b4:a2:29:9c:94:79:eb:f9:90: a0:f0:94:40:81:68:b7:dc:7b:97:bb:a6:d4:c0:5d: d1:b5:fe:32:86:71:ff:48:0a:83:6a:1b:f6:b1:9f: 31:6b:eb:27:5e:65:15:c9:7d:b8:f4:05:d3:c1:d8: 09:1a:7d:83:7b:50:6a:67:79:01:85:a4:e5:c3:0e: 24:1d:09:2b:08:2b:81:39:3d:d8:34:33:c0:95:fa: ae:9d:b2:17:2d:77:00:d5:7c:8a:d6:31:f6:e9:d0: 72:11:b3:2c:f1:67:c4:2f:3c:29:7c:81:36:c1:d4: ca:97:98:e4:2a:17:0f:5e:15:e4:10:07:f2:85:cb: 5d:98:69:0c:e1:02:02:8c:c0:86:fe:64:fc:13:eb: f6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:B1:0A:E4:D0:36:B7:62:19:8E:76:57:D2:11:47:A6:09:7F:98:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:40:5d:54:d4:3e:9d:56:72:62:e2:15:96:6d:af:73:1e:53: b2:d1:80:f1:25:28:ef:9f:7f:68:53:fe:c2:80:36:92:ee:4e: 58:4f:fa:bd:8a:12:da:30:bd:f4:c6:f8:b4:c0:2d:2a:3b:34: da:c7:ef:be:de:77:6a:30:af:74:9a:02:f9:12:e5:70:41:8b: 8a:16:21:26:65:74:8f:49:a6:f0:e2:11:68:c3:a8:c4:85:c4: 10:1a:e1:be:50:c5:c9:d1:58:69:1a:53:40:7e:4a:f8:e1:d8: 70:01:4d:1f:29:23:cf:c3:bb:6f:57:52:07:27:bc:5c:72:dc: 0d:5a:a9:e4:35:00:90:69:12:03:b7:8b:3e:e9:13:9b:eb:45: 09:a9:1e:92:2d:ec:17:83:83:43:6a:7a:61:94:27:0a:13:92: a4:8a:30:3f:c7:46:dd:98:a8:1d:8a:70:de:af:0f:64:6c:a4: 95:38:91:f3:27:4c:3a:b9:31:35:a8:a1:07:d1:25:e5:fb:40: f0:a8:13:d4:0d:b6:98:df:9a:0d:b4:f2:61:1d:61:39:a9:56: 75:ab:34:6b:25:81:b0:b3:fd:ad:91:c9:0d:ed:49:22:91:1d: 5c:2c:27:a1:5e:54:78:98:5b:d7:bc:2f:67:34:5f:e4:80:f2: 12:c5:ba:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTA7DoLvhByhAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDgwMjYwNWEtNjQ5OS00YzA1LTk5N2QtZTZhM2I5MzZkYjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJjCvc/5+t6sfRF0OzGwgGVsdCuwOonUUb3B 9oshiLJpFb5kMtICh5jaPnFwvlzhR00pTy/wjodYvVMDLUJYTKWM1WAzi5oChScK iLTeQlituO5Q0Of0uHuE0TwiVvdRIzGHKRtihrn2tw/EGY60oimclHnr+ZCg8JRA gWi33HuXu6bUwF3Rtf4yhnH/SAqDahv2sZ8xa+snXmUVyX249AXTwdgJGn2De1Bq Z3kBhaTlww4kHQkrCCuBOT3YNDPAlfqunbIXLXcA1XyK1jH26dByEbMs8WfELzwp fIE2wdTKl5jkKhcPXhXkEAfyhctdmGkM4QICjMCG/mT8E+v2uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaxCuTQNrdiGY52V9IRR6YJf5i8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVAXVTUPp1WcmLiFZZtr3MeU7LRgPElKO+ff2hT/sKANpLuTlhP+r2K EtowvfTG+LTALSo7NNrH777ed2owr3SaAvkS5XBBi4oWISZldI9JpvDiEWjDqMSF xBAa4b5QxcnRWGkaU0B+Svjh2HABTR8pI8/Du29XUgcnvFxy3A1aqeQ1AJBpEgO3 iz7pE5vrRQmpHpIt7BeDg0NqemGUJwoTkqSKMD/HRt2YqB2KcN6vD2RspJU4kfMn TDq5MTWooQfRJeX7QPCoE9QNtpjfmg208mEdYTmpVnWrNGslgbCz/a2RyQ3tSSKR HVwsJ6FeVHiYW9e8L2c0X+SA8hLFurM= -----END CERTIFICATE-----Generated at Tue Sep 22 13:12:45 2026 by rpki-client