$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: sXCNhXqCbiJGo4a+6NbzGBVFof4M38pohVUygEhiH9E= Subject key identifier: 54:8A:1C:46:C3:E5:50:A5:4C:85:4C:29:17:D4:ED:74:79:D7:9B:F5 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DBD058E8EDE7A7AD23E2C6600 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:8e:8e:de:7a:7a:d2:3e:2c:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=c867860a-15d5-413e-a6f8-50aebf5127f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:92:fe:6d:ef:1e:d9:96:a8:55:00:06:dd:43: d5:f4:29:ac:19:1f:bd:8e:c7:06:13:e9:89:c4:dd: ea:8b:fa:94:c9:1d:be:06:54:86:9f:00:4b:e9:55: 6b:78:27:ea:ef:54:79:ca:0f:70:12:c6:e4:14:a8: 1e:e0:ee:c9:5c:69:50:78:71:4f:aa:cd:ac:80:98: 7d:8b:43:09:45:79:5c:ed:2f:21:15:ba:81:9c:1b: e5:e1:7d:dc:61:58:18:b1:97:dd:d0:78:e2:85:da: 79:e3:6e:61:99:62:9f:35:c0:91:c2:04:35:bd:6e: c5:40:31:fa:d4:ef:d3:75:b2:e8:f0:0b:de:ed:70: 8c:ed:6e:52:15:20:f5:9a:9f:e6:8a:0a:95:fe:7c: 11:99:63:81:6d:9f:08:49:78:b1:81:d2:b7:08:d8: 90:a5:af:9d:52:6b:97:e9:1f:c9:3a:33:78:7b:b6: fb:d9:aa:2f:5c:03:d1:bc:81:4d:90:d6:d6:bd:76: 81:bb:23:22:6f:3e:2d:2b:88:41:28:d7:e1:2f:a7: 39:8d:95:7b:ce:02:73:f3:0e:e9:d1:61:e7:ba:0c: f5:5c:ea:f6:82:df:05:2b:cb:89:1c:66:f8:69:44: 57:df:28:71:bb:6c:b9:f0:63:3d:af:86:15:96:76: d4:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8A:1C:46:C3:E5:50:A5:4C:85:4C:29:17:D4:ED:74:79:D7:9B:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:a1:43:0d:ab:84:08:7c:b2:86:6c:60:30:b6:de:e9:5c:30: c2:7d:01:67:f3:4f:d6:21:1d:9c:39:d1:7c:05:32:7a:d9:6a: 21:bd:a1:a8:71:b8:34:78:48:57:5f:91:da:ea:a5:e3:d5:3d: 66:72:2d:34:d0:c6:bb:91:88:f3:99:d7:3b:8c:ac:ea:e4:6c: dd:95:87:48:c4:ae:cb:a6:f8:3d:53:45:32:53:f7:1f:8c:2f: 0b:da:cd:77:a9:b2:63:50:b7:c0:16:71:65:dc:c9:88:a7:41: ba:a2:f9:69:62:4c:fe:31:e3:23:d6:d7:85:b0:fa:85:cf:5a: fb:14:24:22:87:5e:7c:6f:41:2f:52:c2:e8:f3:c6:15:ad:b8: 6c:9a:95:72:31:0e:db:39:a6:03:63:36:82:7c:24:00:78:a5: 6c:cb:7b:72:91:4d:c2:7d:e9:51:98:b0:b1:07:45:5e:5e:40: f3:52:dc:23:03:77:6e:df:ba:f5:f2:8a:cb:20:6f:e9:05:2f: a3:b8:0d:33:7b:78:b3:91:04:7a:d2:01:bd:45:7e:cd:69:17: de:4b:8f:38:2d:81:cc:2c:da:22:a9:5c:50:88:ec:a9:7f:e6: 48:ec:6a:39:65:24:db:d3:de:32:33:01:d5:6f:20:07:43:86: 29:ac:d0:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE29BY6O3np60j4sZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk Yzg2Nzg2MGEtMTVkNS00MTNlLWE2ZjgtNTBhZWJmNTEyN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJL+be8e2ZaoVQAG3UPV9CmsGR+9jscGE+mJ xN3qi/qUyR2+BlSGnwBL6VVreCfq71R5yg9wEsbkFKge4O7JXGlQeHFPqs2sgJh9 i0MJRXlc7S8hFbqBnBvl4X3cYVgYsZfd0Hjihdp5425hmWKfNcCRwgQ1vW7FQDH6 1O/TdbLo8Ave7XCM7W5SFSD1mp/migqV/nwRmWOBbZ8ISXixgdK3CNiQpa+dUmuX 6R/JOjN4e7b72aovXAPRvIFNkNbWvXaBuyMibz4tK4hBKNfhL6c5jZV7zgJz8w7p 0WHnugz1XOr2gt8FK8uJHGb4aURX3yhxu2y58GM9r4YVlnbUQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSKHEbD5VClTIVMKRfU7XR515v1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqhQw2rhAh8soZsYDC23ulcMMJ9AWfzT9YhHZw50XwFMnrZaiG9oahx uDR4SFdfkdrqpePVPWZyLTTQxruRiPOZ1zuMrOrkbN2Vh0jErsum+D1TRTJT9x+M LwvazXepsmNQt8AWcWXcyYinQbqi+WliTP4x4yPW14Ww+oXPWvsUJCKHXnxvQS9S wujzxhWtuGyalXIxDts5pgNjNoJ8JAB4pWzLe3KRTcJ96VGYsLEHRV5eQPNS3CMD d27fuvXyissgb+kFL6O4DTN7eLORBHrSAb1Ffs1pF95Ljzgtgcws2iKpXFCI7Kl/ 5kjsajllJNvT3jIzAdVvIAdDhims0Go= -----END CERTIFICATE-----Generated at Wed May 13 04:15:12 2026 by rpki-client