$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: 16fPw2NO1gmrf7etRn8zYAa+DAUHHDhOMzPOtyZtEgo= Subject key identifier: 19:03:1D:FE:DC:69:60:B3:AE:13:BE:9C:F6:24:FE:0E:F8:A2:2F:50 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E815F95D61FD4F6168F6C03C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Jul 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:95:d6:1f:d4:f6:16:8f:6c:03:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=eec89800-d14a-4f06-863d-ac71c2a10bbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:82:e6:ad:41:4b:d9:b2:00:d8:3c:30:35:77: d3:12:58:40:ce:b3:f8:b2:ab:7c:24:36:04:9b:76: d3:65:8c:cd:9c:55:55:ee:0f:50:36:71:a7:b7:55: 58:c0:40:25:c7:b8:14:11:e6:d2:53:49:37:29:55: f1:b1:ae:ac:75:23:fb:1a:db:a9:d9:99:73:99:cd: e0:9f:7a:0b:a7:c2:70:8e:c9:47:37:73:3a:4f:2f: 32:a2:50:65:e7:74:c2:6d:bd:e2:53:c1:17:29:39: 39:3a:40:e1:24:ca:67:d1:67:5a:0b:78:b7:d0:6e: 34:98:6b:f6:01:ee:6d:76:48:d0:f9:d7:e1:ee:ba: d5:d7:e6:fc:4c:81:e9:1a:21:f8:65:3a:2d:18:c8: 78:bf:78:42:5c:c5:76:a7:81:f1:cc:47:0b:c8:f3: 30:7b:ee:c8:4c:72:30:1a:2e:e9:c7:1d:ca:0d:b8: 15:9c:ed:ea:09:60:7b:35:0f:48:78:c9:b3:43:c6: 7f:d2:85:a4:d6:18:cd:a3:e0:e8:7f:07:eb:bf:f9: 55:ac:78:37:04:8e:3e:2f:7a:f1:47:61:65:c1:40: e6:ff:f4:14:1e:76:62:53:8c:4a:93:be:e5:9a:3f: 9a:25:e5:9b:22:61:1a:42:51:69:67:fe:b3:2f:25: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:03:1D:FE:DC:69:60:B3:AE:13:BE:9C:F6:24:FE:0E:F8:A2:2F:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b0:af:21:b2:db:01:85:ce:6c:6c:1f:3a:70:18:20:b7:aa: 1c:b8:1d:c3:54:30:af:4b:a0:9f:7f:1a:3c:a6:f9:12:f7:ab: 04:41:70:d1:8e:cf:85:2b:0d:5a:e3:39:e0:08:a2:c6:23:73: 93:5e:a0:38:c9:a7:63:ad:19:46:f8:bb:38:75:2d:0b:f5:bb: c6:65:03:7c:58:9c:c0:65:aa:e8:4f:84:92:98:46:c0:8c:2a: 9a:b2:21:8c:de:8c:69:40:50:5b:d6:91:45:78:b0:ca:60:38: bd:2e:0d:7f:ae:41:3b:b3:57:8d:69:aa:15:96:ce:a8:98:2b: 84:d2:36:43:6d:d7:24:57:be:33:ae:33:eb:b0:89:e7:e3:2c: 10:8a:c3:32:e3:f2:c9:1b:64:df:b3:5f:e6:f1:9c:a6:25:f5: a4:87:b0:40:96:43:b4:84:bb:7f:e1:5b:0c:56:e5:b4:0b:24: 06:4a:cc:a8:28:65:f2:a2:92:87:88:cb:79:e8:7e:ce:59:95: 64:b1:e7:10:99:00:b7:ee:76:6d:37:be:8e:f4:73:18:f8:9e: ea:82:1b:75:8e:f7:69:57:1f:57:4d:ab:f6:42:5c:96:5e:0c: 22:63:9f:27:67:77:2d:34:f6:6b:fe:ec:84:c9:24:a2:b4:d0: 73:9b:55:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5XWH9T2Fo9sA8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk ZWVjODk4MDAtZDE0YS00ZjA2LTg2M2QtYWM3MWMyYTEwYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4LmrUFL2bIA2DwwNXfTElhAzrP4sqt8JDYE m3bTZYzNnFVV7g9QNnGnt1VYwEAlx7gUEebSU0k3KVXxsa6sdSP7Gtup2Zlzmc3g n3oLp8JwjslHN3M6Ty8yolBl53TCbb3iU8EXKTk5OkDhJMpn0WdaC3i30G40mGv2 Ae5tdkjQ+dfh7rrV1+b8TIHpGiH4ZTotGMh4v3hCXMV2p4HxzEcLyPMwe+7ITHIw Gi7pxx3KDbgVnO3qCWB7NQ9IeMmzQ8Z/0oWk1hjNo+Dofwfrv/lVrHg3BI4+L3rx R2FlwUDm//QUHnZiU4xKk77lmj+aJeWbImEaQlFpZ/6zLyUp2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkDHf7caWCzrhO+nPYk/g74oi9QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKwryGy2wGFzmxsHzpwGCC3qhy4HcNUMK9LoJ9/Gjym+RL3qwRBcNGO z4UrDVrjOeAIosYjc5NeoDjJp2OtGUb4uzh1LQv1u8ZlA3xYnMBlquhPhJKYRsCM KpqyIYzejGlAUFvWkUV4sMpgOL0uDX+uQTuzV41pqhWWzqiYK4TSNkNt1yRXvjOu M+uwiefjLBCKwzLj8skbZN+zX+bxnKYl9aSHsECWQ7SEu3/hWwxW5bQLJAZKzKgo ZfKikoeIy3nofs5ZlWSx5xCZALfudm03vo70cxj4nuqCG3WO92lXH1dNq/ZCXJZe DCJjnydndy009mv+7ITJJKK00HObVTw= -----END CERTIFICATE-----Generated at Sat Jul 18 03:32:12 2026 by rpki-client