$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa File: 70627356-922f-3594-8e0b-543ce961c033.roa (raw, json) Hash identifier: hg3Ml0+g9z9fE1VrGnGbqgOQ7BPeg5QshRrU0imWq84= Subject key identifier: 50:0A:BF:E2:85:E0:3E:3F:2B:1E:F4:75:14:EA:FE:73:26:3B:C1:C2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584EA79BF93387799F495DD30A74 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 9009 IP address blocks: 172.98.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:f9:33:87:79:9f:49:5d:d3:0a:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5026b973-11ba-4076-898b-fe24b0ccff95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:22:ba:22:3c:0c:a8:fe:fa:13:2a:eb:84: 0f:a5:3a:5c:6d:e0:d1:52:fc:27:8a:af:71:59:5d: 05:93:a9:fa:1a:3e:ea:bf:2d:e3:f7:60:dc:38:67: e8:af:d6:03:4e:4d:2a:d4:77:6b:66:39:05:69:74: bf:ff:b9:c1:91:54:53:d1:b0:d0:c2:a2:4d:af:38: 09:59:8a:71:4a:b7:b3:2b:6d:6c:11:ac:55:06:c5: 80:89:f7:c3:b6:62:d7:0f:01:00:e9:e2:82:c1:0b: c8:c2:05:a6:f9:ae:96:eb:eb:69:6a:3f:04:59:ae: 4b:24:08:eb:3f:12:55:47:56:26:80:5c:2c:55:7b: d5:35:0b:0a:8d:20:53:6b:df:0b:5f:3f:cf:c5:fd: 0e:53:4c:b1:ab:df:4d:4f:bb:24:ba:42:d8:0d:fd: d7:c3:67:e0:92:39:15:3b:4f:ee:c3:75:b6:00:3b: 46:44:d7:8e:92:d0:67:5f:ec:a5:9a:6e:30:03:45: 22:36:f3:a4:53:61:9f:09:9a:39:c5:31:4f:12:f9: 83:79:3b:4f:54:dd:9f:c7:f5:a6:89:70:1d:5e:3c: 4f:78:75:d9:a7:2f:35:96:a9:23:4f:61:76:5a:64: 4f:02:62:c9:da:64:54:e2:e2:0c:1a:bc:d4:79:10: 8f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:0A:BF:E2:85:E0:3E:3F:2B:1E:F4:75:14:EA:FE:73:26:3B:C1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9b:cb:33:92:cd:f6:65:3b:bc:df:56:9b:70:ea:a0:73:c9: 42:1e:7b:3c:4f:06:c2:55:02:4b:d0:75:b1:bb:3c:fe:49:d8: cd:d1:ca:9c:4a:53:85:c1:b8:94:a3:56:67:e2:a0:15:4f:e5: da:be:c0:df:c7:c3:86:66:48:01:f7:1c:01:62:9f:7d:e9:16: db:77:a2:5f:a0:cb:66:46:66:53:69:7c:32:6e:99:1e:b5:b9: 00:47:29:60:69:1c:be:29:c4:e2:c6:0b:3b:6f:de:f6:1a:ee: f1:a1:20:c7:af:1b:b2:83:c8:1a:0b:de:be:34:52:d0:ea:99: 80:e2:5b:63:6f:b3:27:a1:36:e2:c8:4c:f3:13:99:ed:61:15: 8c:bd:35:cc:37:4e:ad:55:cb:72:dd:49:8b:c9:bd:2f:bb:90: 13:eb:1e:0b:ff:40:5a:f7:9e:9c:73:a9:bc:db:07:8f:a2:f9: 0a:2a:98:ce:7b:da:20:4f:94:10:50:23:b0:5b:f5:d5:a8:4b: 02:40:f9:22:63:09:15:a7:0c:43:bd:6f:17:18:5d:32:a8:f0: e7:61:ab:40:39:75:55:61:b4:db:dd:61:53:4b:11:5b:8c:e7: c9:cb:5f:69:d8:63:1f:6a:da:75:be:18:63:ae:f1:9b:8b:8e: 3c:a7:03:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nm/kzh3mfSV3TCnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTAyNmI5NzMtMTFiYS00MDc2LTg5OGItZmUyNGIwY2NmZjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN8iuiI8DKj++hMq64QPpTpcbeDRUvwniq9x WV0Fk6n6Gj7qvy3j92DcOGfor9YDTk0q1HdrZjkFaXS//7nBkVRT0bDQwqJNrzgJ WYpxSrezK21sEaxVBsWAiffDtmLXDwEA6eKCwQvIwgWm+a6W6+tpaj8EWa5LJAjr PxJVR1YmgFwsVXvVNQsKjSBTa98LXz/Pxf0OU0yxq99NT7skukLYDf3Xw2fgkjkV O0/uw3W2ADtGRNeOktBnX+ylmm4wA0UiNvOkU2GfCZo5xTFPEvmDeTtPVN2fx/Wm iXAdXjxPeHXZpy81lqkjT2F2WmRPAmLJ2mRU4uIMGrzUeRCP4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFAKv+KF4D4/Kx70dRTq/nMmO8HCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzA2MjczNTYtOTIyZi0z NTk0LThlMGItNTQzY2U5NjFjMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2byzOSzfZlO7zfVptw6qBzyUIeezxPBsJVAkvQdbG7PP5J2M3RypxK U4XBuJSjVmfioBVP5dq+wN/Hw4ZmSAH3HAFin33pFtt3ol+gy2ZGZlNpfDJumR61 uQBHKWBpHL4pxOLGCztv3vYa7vGhIMevG7KDyBoL3r40UtDqmYDiW2NvsyehNuLI TPMTme1hFYy9Ncw3Tq1Vy3LdSYvJvS+7kBPrHgv/QFr3npxzqbzbB4+i+QoqmM57 2iBPlBBQI7Bb9dWoSwJA+SJjCRWnDEO9bxcYXTKo8Odhq0A5dVVhtNvdYVNLEVuM 58nLX2nYYx9q2nW+GGOu8ZuLjjynA9s= -----END CERTIFICATE-----Generated at Tue Sep 1 02:10:09 2026 by rpki-client