$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa File: e2210da3-0122-3d9c-898b-b2cc95169f2a.roa (raw, json) Hash identifier: kbD1nUBW/xvTvjaQ+WHrLashxG12ryZPLeeqGQ3bD5E= Subject key identifier: D9:77:57:74:E7:52:42:AC:1B:D7:4D:F1:63:13:90:AE:42:91:C1:F1 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F0242295A67CE7E42A39C3880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 7979 IP address blocks: 172.98.170.0/24 maxlen: 24 206.127.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:29:5a:67:ce:7e:42:a3:9c:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=0e3a4d81-da87-49e9-a3f8-ad5726542aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6c:36:63:9b:f6:1b:47:19:8b:b7:36:73:7b: 8f:43:76:bf:cb:25:1b:b1:f6:07:7e:4d:51:ba:7c: 99:01:d3:72:c3:04:06:dd:ef:f1:4c:14:99:0a:46: cd:f2:57:38:26:aa:cb:57:96:53:cd:8d:c1:09:bc: 9b:f0:43:6a:85:9b:9c:b6:dc:00:14:69:2d:fa:59: c0:13:db:61:eb:8b:bb:cf:a6:1f:49:8d:fd:71:d5: db:d5:34:c8:54:dd:92:dc:04:a5:9e:a6:38:a0:4b: ed:1d:a6:b9:3b:1b:c5:5e:a2:3b:ee:be:3c:ca:66: fa:02:2b:ff:a5:2a:b3:3e:3c:b4:b7:4a:ae:c0:db: a9:78:6a:e9:63:92:d4:97:82:e9:ee:75:f7:00:56: 0e:62:0a:cc:37:19:52:19:e0:cf:87:38:1f:81:46: 02:96:ff:73:20:04:d3:af:98:87:30:be:2a:84:7e: 53:ac:08:2b:af:23:01:d9:90:a9:a7:a0:a3:88:9a: e8:73:df:48:91:8d:14:e6:fb:7b:c8:16:30:f6:09: 6b:bf:d8:ba:ae:35:0a:f9:db:65:c1:73:ae:0a:d0: 6b:7d:fd:b3:cb:bc:05:61:d7:4d:99:a9:47:f0:7b: e3:f6:07:39:ac:0a:17:e1:df:16:f1:f2:5a:8d:89: 55:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:77:57:74:E7:52:42:AC:1B:D7:4D:F1:63:13:90:AE:42:91:C1:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.170.0/24 206.127.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:95:db:9c:3c:28:bd:74:53:b5:fb:7c:63:62:d4:27:02:bf: 98:35:dd:57:02:f2:30:2a:82:dc:b7:9b:63:bb:12:71:e5:9a: 68:da:91:42:88:d3:c8:a3:f3:d6:44:72:78:fc:a8:d0:ef:5e: f3:28:31:af:1d:30:a1:40:74:98:db:26:77:9f:f8:29:df:4c: 2d:34:a3:4a:04:71:c2:dc:c6:e6:22:42:86:27:38:e8:49:5f: f7:34:01:2c:fb:2c:72:f7:8a:ce:bb:e7:78:1f:4f:6f:6c:9a: 9a:21:46:62:b8:bf:6e:07:22:93:dc:bc:43:a3:0d:1c:2a:d6: 05:c1:37:15:09:98:ed:ba:3d:58:fd:c4:0d:90:24:f0:a4:86: 9c:50:a5:2c:3c:b9:9d:f2:81:4b:3d:6f:45:6c:82:67:65:b4: c2:cc:16:86:84:d3:1b:d5:0d:0e:3f:fc:25:e7:d1:c3:11:52: d1:c7:02:a4:e2:2a:1f:0a:ac:47:db:7e:18:2d:9d:cd:8f:6b: 9b:0a:2e:51:5e:d6:64:e9:76:16:bb:f1:7f:f9:67:a0:da:b1: 9b:5b:9e:4d:74:a2:44:64:8e:4a:41:05:a8:06:c0:83:52:67: f6:59:6f:db:ab:8a:78:c5:04:95:f4:6f:88:c7:24:29:2a:d6: 7f:fe:81:61 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8CQilaZ85+QqOcOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk MGUzYTRkODEtZGE4Ny00OWU5LWEzZjgtYWQ1NzI2NTQyYWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGw2Y5v2G0cZi7c2c3uPQ3a/yyUbsfYHfk1R unyZAdNywwQG3e/xTBSZCkbN8lc4JqrLV5ZTzY3BCbyb8ENqhZucttwAFGkt+lnA E9th64u7z6YfSY39cdXb1TTIVN2S3ASlnqY4oEvtHaa5OxvFXqI77r48ymb6Aiv/ pSqzPjy0t0quwNupeGrpY5LUl4Lp7nX3AFYOYgrMNxlSGeDPhzgfgUYClv9zIATT r5iHML4qhH5TrAgrryMB2ZCpp6CjiJroc99IkY0U5vt7yBYw9glrv9i6rjUK+dtl wXOuCtBrff2zy7wFYddNmalH8Hvj9gc5rAoX4d8W8fJajYlVRwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFNl3V3TnUkKsG9dN8WMTkK5CkcHxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTIyMTBkYTMtMDEyMi0z ZDljLTg5OGItYjJjYzk1MTY5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKqAwQA zn/UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBACOV25w8KL10U7X7fGNi1CcCv5g13VcC8jAqgty3m2O7EnHl mmjakUKI08ij89ZEcnj8qNDvXvMoMa8dMKFAdJjbJnef+CnfTC00o0oEccLcxuYi QoYnOOhJX/c0ASz7LHL3is6753gfT29smpohRmK4v24HIpPcvEOjDRwq1gXBNxUJ mO26PVj9xA2QJPCkhpxQpSw8uZ3ygUs9b0VsgmdltMLMFoaE0xvVDQ4//CXn0cMR UtHHAqTiKh8KrEfbfhgtnc2Pa5sKLlFe1mTpdha78X/5Z6DasZtbnk10okRkjkpB BagGwINSZ/ZZb9urinjFBJX0b4jHJCkq1n/+gWE= -----END CERTIFICATE-----Generated at Wed Sep 2 15:34:36 2026 by rpki-client