$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: kkX9F08zq6fkuV69nyJ2iUYMuCww9L24so6EJE6mPCE= Subject key identifier: AF:3D:96:F7:43:72:A3:E2:6D:5E:9C:B6:19:59:DE:36:51:36:B8:63 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EA79089610987E3E45F5D8E00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:90:89:61:09:87:e3:e4:5f:5d:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a6a6233c-10a1-46bb-a8ae-cb60f0a93e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:18:97:1c:a0:0a:a3:a7:70:d1:d4:0f:07:82: 23:9b:bf:23:33:52:41:e6:e4:0f:9b:18:ef:5a:6f: 01:8d:cf:5b:55:cf:51:28:50:bc:40:20:14:5b:d4: a4:0a:3c:a4:28:1e:41:88:b8:7e:5f:97:00:2b:49: a9:dd:bd:c5:e4:87:71:30:5d:4e:19:5f:89:5a:b0: 1c:e7:21:ad:6f:4e:f7:4e:db:58:fe:20:c5:2d:e5: 82:81:8d:94:29:23:90:21:96:21:05:88:bf:c8:63: d3:70:a1:d8:7c:6d:79:1f:27:ec:da:60:f3:b5:1d: 86:47:38:8b:6e:2f:c8:1b:29:e6:19:29:1d:49:3e: 7e:f1:1f:e7:19:79:67:15:07:ee:7d:5d:6e:96:b4: f8:4c:82:14:1a:f9:c8:76:0e:a7:7b:fe:37:b8:4b: ae:ca:79:c8:dd:67:c7:af:78:29:a3:0a:b0:4e:0e: 2d:8c:55:bf:2f:c6:b4:37:8f:80:97:7a:b4:e5:6a: 72:09:59:1f:4f:32:a3:4f:e7:dc:7e:77:6d:eb:7e: 7e:fc:f7:18:ce:d0:e3:cc:4c:02:72:04:3a:b9:48: c1:67:eb:ec:29:1b:a9:83:70:2b:df:fe:24:8c:0e: 8c:f2:e3:55:36:4a:12:e2:b6:02:5c:39:b9:d6:25: 2c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3D:96:F7:43:72:A3:E2:6D:5E:9C:B6:19:59:DE:36:51:36:B8:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:bc:67:0e:44:d2:21:c5:ce:3e:da:4e:b3:57:16:e9:bc:55: c6:18:28:65:44:04:b8:9c:cf:7d:01:e5:b7:20:00:c1:e7:c1: 99:32:1c:11:46:dd:b3:24:4e:be:e0:80:6b:d9:05:26:d6:38: 0f:61:84:08:c1:00:dd:ce:08:d6:98:2b:41:13:fc:67:0c:95: ca:43:4d:ea:6d:a7:ac:0c:b9:2c:77:6a:a7:9a:cf:4c:fa:3c: 51:ab:79:1f:20:3b:15:43:c4:b1:46:0d:ab:08:ba:82:b6:10: b8:a6:a8:20:07:35:12:d0:41:c7:91:dd:8c:71:8f:a7:59:59: b5:e3:8b:81:ea:4e:71:9d:65:37:0e:eb:92:84:26:84:9d:fa: b2:4e:00:44:0d:fd:da:7f:c0:e2:64:73:9b:08:d5:35:a0:a7: 67:09:4f:b0:b9:80:7d:b3:19:1c:93:a1:07:fe:80:88:d9:ed: 7c:1e:a4:77:0e:48:dd:a5:b1:12:a7:ac:23:79:8e:88:1e:ab: c2:0b:ef:7a:52:d3:8a:76:1c:36:7c:eb:f1:13:7a:0f:aa:1a: b4:e8:e2:45:fd:89:44:ae:57:93:98:08:02:a5:18:12:d2:4b: 31:2a:ec:96:a4:97:91:0e:07:24:ae:d2:6b:78:5f:da:67:01: 32:c9:5b:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nkIlhCYfj5F9djgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTZhNjIzM2MtMTBhMS00NmJiLWE4YWUtY2I2MGYwYTkzZTg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRiXHKAKo6dw0dQPB4Ijm78jM1JB5uQPmxjv Wm8Bjc9bVc9RKFC8QCAUW9SkCjykKB5BiLh+X5cAK0mp3b3F5IdxMF1OGV+JWrAc 5yGtb073TttY/iDFLeWCgY2UKSOQIZYhBYi/yGPTcKHYfG15Hyfs2mDztR2GRziL bi/IGynmGSkdST5+8R/nGXlnFQfufV1ulrT4TIIUGvnIdg6ne/43uEuuynnI3WfH r3gpowqwTg4tjFW/L8a0N4+Al3q05WpyCVkfTzKjT+fcfndt635+/PcYztDjzEwC cgQ6uUjBZ+vsKRupg3Ar3/4kjA6M8uNVNkoS4rYCXDm51iUsDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK89lvdDcqPibV6cthlZ3jZRNrhjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACy8Zw5E0iHFzj7aTrNXFum8VcYYKGVEBLicz30B5bcgAMHnwZkyHBFG 3bMkTr7ggGvZBSbWOA9hhAjBAN3OCNaYK0ET/GcMlcpDTeptp6wMuSx3aqeaz0z6 PFGreR8gOxVDxLFGDasIuoK2ELimqCAHNRLQQceR3Yxxj6dZWbXji4HqTnGdZTcO 65KEJoSd+rJOAEQN/dp/wOJkc5sI1TWgp2cJT7C5gH2zGRyToQf+gIjZ7XwepHcO SN2lsRKnrCN5jogeq8IL73pS04p2HDZ86/ETeg+qGrTo4kX9iUSuV5OYCAKlGBLS SzEq7Jakl5EOBySu0mt4X9pnATLJWyg= -----END CERTIFICATE-----Generated at Tue Sep 1 01:57:17 2026 by rpki-client