$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa File: d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json) Hash identifier: z5iW+UuZAohjRgJ42zLNhJotTDqwog/gq6tblai1tlU= Subject key identifier: 13:B9:14:54:E4:0B:D1:C4:F2:FF:7A:6E:8A:6A:F3:4A:6D:92:6A:9D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F3CE28BBF0D51961EACD1C160 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 9009 IP address blocks: 172.98.162.0/24 maxlen: 24 172.98.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:8b:bf:0d:51:96:1e:ac:d1:c1:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=b3eb968e-9dbc-4849-9e01-fd31b283e691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:96:f7:fb:28:a2:4b:84:33:60:c0:cf:56:39: 40:41:1d:73:b0:4c:62:ed:b6:11:44:f0:0f:de:51: 5e:41:bb:f0:75:37:c2:d5:0c:d8:ea:d4:ab:fb:8a: 70:0d:fa:5c:94:b4:63:5c:5c:5f:da:1d:7b:87:3e: 05:14:6a:c9:8c:04:83:e7:16:39:b2:f6:c0:3b:2b: 59:bc:74:be:f2:60:fb:fc:9b:84:86:da:b8:45:86: c0:1d:41:08:6b:3c:8c:5d:05:11:12:37:15:ed:af: ba:06:44:c2:4b:c8:de:82:e3:e3:c7:88:45:17:7d: a5:2c:90:f4:99:b1:35:e3:09:a8:07:63:84:22:4b: c0:bd:e6:41:9d:42:93:07:7b:c8:54:8f:8c:66:84: f9:00:72:15:bd:a6:56:3e:b9:b2:e6:e8:d7:ef:3c: 30:11:0f:13:f3:92:6e:81:58:a9:c2:10:42:47:38: 91:ea:32:ed:b9:2a:25:b5:74:94:a6:62:02:9d:d9: e1:a2:79:ec:50:9f:db:ad:92:31:eb:19:cf:98:78: 95:0d:2b:46:c3:72:18:df:0d:78:1a:52:fc:0a:16: c2:27:da:7a:56:67:4b:55:9b:ab:81:c3:ae:59:77: db:69:fd:f7:81:83:65:80:20:9a:96:72:fc:f4:9c: 88:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:B9:14:54:E4:0B:D1:C4:F2:FF:7A:6E:8A:6A:F3:4A:6D:92:6A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.162.0/24 172.98.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:b9:2f:5a:07:2b:cb:aa:34:36:3a:ce:bf:9d:51:6b:96:0d: 46:bf:09:8f:cc:f9:bc:a0:42:4e:86:a2:de:4b:22:a2:07:45: a8:68:ac:47:34:87:ae:c8:86:54:01:1f:b3:e7:72:13:c9:df: 20:48:3d:b4:70:64:78:f0:7f:04:f1:2f:9f:b0:30:25:9a:20: 64:5d:3a:75:3b:d6:d0:de:f7:56:d3:9a:eb:05:d0:71:04:5b: 29:3d:b0:d6:2d:30:78:61:4e:3a:77:f8:80:4c:a5:4f:35:57: 6a:08:3a:72:3b:4a:24:45:87:dc:48:5a:90:2e:56:b3:6b:51: 24:b1:16:49:50:f7:73:29:10:ab:9c:bb:b5:4b:1f:2e:2c:15: 37:98:f0:90:ee:9b:89:a9:bb:ad:e2:5f:35:2a:64:f6:88:7a: 95:4b:d2:95:1b:9d:38:54:3b:7c:46:22:20:83:6e:46:c6:46: e9:ab:f0:99:a2:c1:11:f7:b5:e1:50:fb:9c:49:28:e2:13:67: 7d:32:80:3f:03:18:07:a7:93:55:89:c1:57:9e:e2:6d:ed:c7: 85:c9:3d:67:f7:36:4f:af:5b:30:c9:ec:03:b3:81:97:7d:f7: a2:b0:d2:e3:7e:15:1f:61:48:8f:ed:2e:6e:1f:a8:76:a7:47: 8e:f9:2e:7e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE884ou/DVGWHqzRwWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YjNlYjk2OGUtOWRiYy00ODQ5LTllMDEtZmQzMWIyODNlNjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpb3+yiiS4QzYMDPVjlAQR1zsExi7bYRRPAP 3lFeQbvwdTfC1QzY6tSr+4pwDfpclLRjXFxf2h17hz4FFGrJjASD5xY5svbAOytZ vHS+8mD7/JuEhtq4RYbAHUEIazyMXQUREjcV7a+6BkTCS8jeguPjx4hFF32lLJD0 mbE14wmoB2OEIkvAveZBnUKTB3vIVI+MZoT5AHIVvaZWPrmy5ujX7zwwEQ8T85Ju gVipwhBCRziR6jLtuSoltXSUpmICndnhonnsUJ/brZIx6xnPmHiVDStGw3IY3w14 GlL8ChbCJ9p6VmdLVZurgcOuWXfbaf33gYNlgCCalnL89JyIBQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBO5FFTkC9HE8v96bopq80ptkmqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDFkNTczNGMtZWZiYy0z ZDk4LTkxM2EtZTYwYjhkN2UzM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKiAwQA rGKsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADO5L1oHK8uqNDY6zr+dUWuWDUa/CY/M+bygQk6Got5LIqIH RahorEc0h67IhlQBH7PnchPJ3yBIPbRwZHjwfwTxL5+wMCWaIGRdOnU71tDe91bT musF0HEEWyk9sNYtMHhhTjp3+IBMpU81V2oIOnI7SiRFh9xIWpAuVrNrUSSxFklQ 93MpEKucu7VLHy4sFTeY8JDum4mpu63iXzUqZPaIepVL0pUbnThUO3xGIiCDbkbG Rumr8JmiwRH3teFQ+5xJKOITZ30ygD8DGAenk1WJwVee4m3tx4XJPWf3Nk+vWzDJ 7AOzgZd996Kw0uN+FR9hSI/tLm4fqHanR475Ln4= -----END CERTIFICATE-----Generated at Sun Sep 20 18:19:50 2026 by rpki-client