$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: CATXQ7otY6TnbLa5yIO+I6V8IM/PRkr9fGwGRrn9Odk= Subject key identifier: 10:DC:91:C2:51:66:4C:36:79:44:79:3E:4B:21:04:A3:79:9A:B1:DA Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CDC676FFE214714559205F8E0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Sat 14 Feb 2026 14:00:41 +0000 ROA not before: Sat 14 Feb 2026 14:00:41 +0000 ROA not after: Fri 15 May 2026 13:00:41 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:dc:67:6f:fe:21:47:14:55:92:05:f8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 14 14:00:41 2026 GMT Not After : May 15 13:00:41 2026 GMT Subject: CN=d93d9b6c-aa8b-483f-a17c-e88c6bd2bc0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2e:27:f4:d5:7d:6b:96:3c:25:e7:0b:be:c9: fc:b3:a2:09:db:17:5e:71:2c:3d:78:f2:97:82:99: b4:86:55:36:d4:60:67:63:f4:05:cd:77:db:3b:d6: ca:12:ae:35:33:a3:78:03:0e:e2:c2:ef:9e:7e:c6: af:ac:39:fd:fd:d9:7d:ae:d3:cd:f2:be:e3:5c:d5: 60:e0:1a:a4:58:62:8e:44:ed:ab:e7:54:33:c4:30: ff:c9:6c:d8:c6:29:86:c6:1d:b8:23:d4:a1:a4:9d: f4:ed:13:f3:b1:dd:29:13:99:99:76:ec:dc:46:c7: 26:cd:74:47:9c:cd:40:32:92:10:2d:5b:40:08:90: fa:45:00:75:fe:ae:dc:a7:65:cf:9b:ec:17:f3:3b: b8:19:82:72:f6:b6:83:a9:0f:b6:61:18:d6:32:4f: be:9b:8c:81:26:9f:71:aa:aa:5b:a0:d0:60:0e:94: 36:1c:60:18:c3:89:9c:d4:78:cc:d7:e2:03:87:22: aa:f9:b5:93:3b:b6:4c:af:ce:52:7b:9c:2c:15:85: 00:2d:ba:8f:1f:9d:38:3a:e0:10:79:79:dd:60:b7: 47:e9:66:a9:7e:eb:b9:57:4a:fa:57:ed:2c:48:f1: b8:70:6f:12:6b:5a:7f:a4:64:8e:19:2d:7a:da:d3: 70:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:DC:91:C2:51:66:4C:36:79:44:79:3E:4B:21:04:A3:79:9A:B1:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0e:ca:92:42:ae:1e:e1:b5:d0:b5:7d:a9:00:09:12:5b:5e: 45:ea:54:91:44:0a:ab:19:95:7e:c2:db:fd:bf:86:31:ad:e9: 09:4c:fd:19:2f:b9:76:25:f7:19:e7:8d:5e:a7:51:b5:58:f9: 17:f7:73:bb:bb:d5:f4:a2:30:97:f7:62:61:66:08:33:ac:a4: f7:b5:3b:25:93:07:03:0c:e1:d5:a1:25:72:87:e2:31:fa:07: 99:cd:e0:8b:67:ba:15:0c:c3:f2:e2:96:38:fd:d5:fe:32:71: c9:db:31:d0:d7:b5:08:46:53:62:df:d1:51:7a:a1:97:cf:b8: 5d:71:90:b8:b0:3c:33:16:16:e7:f0:5e:a5:85:6b:c5:ce:d0: 88:4e:db:3a:a5:4b:26:4c:6f:b7:b4:20:48:83:54:ce:af:91: a2:3d:e2:4d:78:fd:17:40:69:17:58:56:fd:f9:42:bd:3f:45: 5f:2b:a6:f0:04:0c:ea:19:b1:18:21:bc:75:98:74:78:8a:7c: f6:65:77:e3:d4:a1:24:4f:6c:93:42:66:d7:04:59:a6:d4:e4: 57:5a:dd:75:98:75:4c:f2:00:85:79:6d:9d:53:bc:83:fd:5b: be:ef:3f:7a:23:2a:ac:7a:62:5b:59:bf:5c:e5:f8:63:c1:cb: 85:a4:93:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzcZ2/+IUcUVZIF+OAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDIxNDE0MDA0MVoXDTI2MDUxNTEzMDA0MVowLzEtMCsGA1UEAxMk ZDkzZDliNmMtYWE4Yi00ODNmLWExN2MtZTg4YzZiZDJiYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApi4n9NV9a5Y8JecLvsn8s6IJ2xdecSw9ePKX gpm0hlU21GBnY/QFzXfbO9bKEq41M6N4Aw7iwu+efsavrDn9/dl9rtPN8r7jXNVg 4BqkWGKORO2r51QzxDD/yWzYximGxh24I9ShpJ307RPzsd0pE5mZduzcRscmzXRH nM1AMpIQLVtACJD6RQB1/q7cp2XPm+wX8zu4GYJy9raDqQ+2YRjWMk++m4yBJp9x qqpboNBgDpQ2HGAYw4mc1HjM1+IDhyKq+bWTO7ZMr85Se5wsFYUALbqPH504OuAQ eXndYLdH6Wapfuu5V0r6V+0sSPG4cG8Sa1p/pGSOGS162tNwPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDckcJRZkw2eUR5PkshBKN5mrHaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQOypJCrh7htdC1fakACRJbXkXqVJFECqsZlX7C2/2/hjGt6QlM/Rkv uXYl9xnnjV6nUbVY+Rf3c7u71fSiMJf3YmFmCDOspPe1OyWTBwMM4dWhJXKH4jH6 B5nN4ItnuhUMw/Liljj91f4yccnbMdDXtQhGU2Lf0VF6oZfPuF1xkLiwPDMWFufw XqWFa8XO0IhO2zqlSyZMb7e0IEiDVM6vkaI94k14/RdAaRdYVv35Qr0/RV8rpvAE DOoZsRghvHWYdHiKfPZld+PUoSRPbJNCZtcEWabU5Fda3XWYdUzyAIV5bZ1TvIP9 W77vP3ojKqx6YltZv1zl+GPBy4Wkk2E= -----END CERTIFICATE-----Generated at Sun Mar 1 22:39:32 2026 by rpki-client