$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa File: f91931be-3fbf-37a3-932e-7cbf092669bd.roa (raw, json) Hash identifier: z4uUfBh2/3ew9koOSgFEmiHNlcgfK8MFx14ulbZkAu8= Subject key identifier: 8F:0B:4D:CE:54:AC:BF:BF:08:55:14:6C:C8:BA:C2:F5:FF:E2:56:85 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E8C8A3ED601D242E9AE4FA380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa Signing time: Sun 19 Jul 2026 09:00:11 +0000 ROA not before: Sun 19 Jul 2026 09:00:11 +0000 ROA not after: Sat 17 Oct 2026 09:00:11 +0000 asID: 35758 IP address blocks: 172.98.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:8c:8a:3e:d6:01:d2:42:e9:ae:4f:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 19 09:00:11 2026 GMT Not After : Oct 17 09:00:11 2026 GMT Subject: CN=dc7988e6-1915-4755-8050-040733bc7553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f0:dc:f7:3f:28:2e:8f:87:ea:0c:f4:0b:6b: ac:0e:cd:ef:d2:39:92:a1:20:51:ec:81:9f:2e:08: 31:f1:a1:93:a4:05:51:7f:12:32:7f:f6:25:a2:a7: b3:59:4d:c4:31:f5:c3:78:61:cb:70:b6:34:fb:bf: 53:88:d9:e4:e9:58:01:48:72:7d:66:eb:e1:6d:7b: 0c:db:68:c7:c9:54:b2:a9:44:5b:5c:09:36:42:19: 31:18:66:6a:31:d4:bc:5d:a0:33:01:48:d6:a0:f0: b5:fa:da:dd:33:1b:2f:15:60:87:34:81:24:26:cd: b5:e9:26:b6:b9:1a:d3:90:08:df:43:21:9e:e4:6a: 2a:4b:da:fc:11:e3:ef:31:b9:74:3d:58:24:2b:95: 41:bc:0c:e4:66:d6:62:62:43:5e:d7:3a:bd:23:35: 75:6f:5d:36:cf:de:0e:60:b5:00:fa:a4:19:97:ab: 89:4a:16:36:0e:27:ee:bf:a0:d8:7a:b8:a5:de:85: cd:b1:1b:90:b2:50:80:e3:cf:c7:5d:dd:89:18:a3: 33:f0:8b:31:17:0f:ca:4e:76:90:7f:b6:65:17:22: 69:30:27:af:4b:32:3a:85:70:58:79:c3:c7:d7:bd: 8d:2e:21:5c:be:90:59:0f:2f:4f:f5:eb:a7:59:24: 23:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:0B:4D:CE:54:AC:BF:BF:08:55:14:6C:C8:BA:C2:F5:FF:E2:56:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:15:21:e2:2e:2d:c8:7c:10:a5:47:b0:87:3b:9e:4c:97:a7: 9d:ef:a8:17:dd:10:0a:58:a0:5a:d7:5a:61:42:41:a4:ac:36: 22:a2:f6:92:36:2c:2c:c9:4f:f4:3d:0c:fe:bc:84:b2:27:f3: 04:05:43:67:39:f6:5c:93:37:9d:5a:d7:3f:28:e3:b9:70:ce: 47:c1:8a:26:c0:2c:5d:9f:13:88:3b:00:0e:db:13:15:39:85: 0b:c0:23:94:56:64:d6:c2:bf:ef:7d:f8:66:71:3c:a6:3d:c9: 00:4b:26:1b:85:b1:d1:5c:94:24:13:c3:6d:1b:d7:07:a3:37: 7e:01:a8:b1:33:6e:47:0d:db:a5:05:ce:51:4f:b8:f4:d0:c1: 20:a0:37:3d:1d:d1:74:b7:93:26:71:ee:37:43:18:8a:b0:1b: fa:6a:0a:56:80:4a:87:06:24:5b:3a:d9:f0:35:83:25:f5:36: e3:ca:ea:c0:10:2d:85:00:cf:1e:bc:ad:75:13:cc:32:f7:b8: ef:bc:95:29:8f:f1:9d:19:33:01:d2:f8:27:a4:69:f3:56:95: a9:71:c3:e9:80:99:ba:81:15:0c:93:e7:25:91:5a:fd:bb:75: b4:8a:57:61:7f:a7:c2:5b:30:2c:38:00:12:68:71:0a:bf:e1: 3a:26:35:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Mij7WAdJC6a5Po4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcxOTA5MDAxMVoXDTI2MTAxNzA5MDAxMVowLzEtMCsGA1UEAxMk ZGM3OTg4ZTYtMTkxNS00NzU1LTgwNTAtMDQwNzMzYmM3NTUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPDc9z8oLo+H6gz0C2usDs3v0jmSoSBR7IGf Lggx8aGTpAVRfxIyf/YloqezWU3EMfXDeGHLcLY0+79TiNnk6VgBSHJ9ZuvhbXsM 22jHyVSyqURbXAk2QhkxGGZqMdS8XaAzAUjWoPC1+trdMxsvFWCHNIEkJs216Sa2 uRrTkAjfQyGe5GoqS9r8EePvMbl0PVgkK5VBvAzkZtZiYkNe1zq9IzV1b102z94O YLUA+qQZl6uJShY2Difuv6DYeril3oXNsRuQslCA48/HXd2JGKMz8IsxFw/KTnaQ f7ZlFyJpMCevSzI6hXBYecPH172NLiFcvpBZDy9P9eunWSQjmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8LTc5UrL+/CFUUbMi6wvX/4laFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjkxOTMxYmUtM2ZiZi0z N2EzLTkzMmUtN2NiZjA5MjY2OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQVIeIuLch8EKVHsIc7nkyXp53vqBfdEApYoFrXWmFCQaSsNiKi9pI2 LCzJT/Q9DP68hLIn8wQFQ2c59lyTN51a1z8o47lwzkfBiibALF2fE4g7AA7bExU5 hQvAI5RWZNbCv+99+GZxPKY9yQBLJhuFsdFclCQTw20b1wejN34BqLEzbkcN26UF zlFPuPTQwSCgNz0d0XS3kyZx7jdDGIqwG/pqClaASocGJFs62fA1gyX1NuPK6sAQ LYUAzx68rXUTzDL3uO+8lSmP8Z0ZMwHS+CekafNWlalxw+mAmbqBFQyT5yWRWv27 dbSKV2F/p8JbMCw4ABJocQq/4TomNRo= -----END CERTIFICATE-----Generated at Tue Jul 21 13:00:19 2026 by rpki-client