$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: 3Edqef2iTPjM3SDG2oEmixrU60evyeeBlIfAhvPlVdI= Subject key identifier: 98:59:DC:60:1D:46:6C:88:F1:84:A6:5B:C5:24:DC:8F:C1:75:61:49 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DA11ABDEA93099A0BCFC3B280 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:bd:ea:93:09:9a:0b:cf:c3:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=ff610138-4e0b-497f-bb84-4319556d038b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7e:71:39:fb:33:ac:05:28:fd:a8:d3:5f:f6: e2:fc:09:88:fa:cc:10:61:c9:85:6b:be:70:d4:d2: 40:ac:60:4e:e3:cb:1b:7d:72:7b:19:4f:d1:40:84: 09:01:38:2e:ab:2c:57:f4:ef:dd:c4:29:bd:7a:ba: 1b:05:ec:11:76:a6:1e:0e:27:d9:5c:cb:69:99:b9: da:40:48:42:8a:bb:00:26:50:c0:db:9e:24:ce:36: aa:48:37:dc:65:09:d6:23:3b:20:c0:44:fc:4c:a9: 9a:77:c0:07:23:0d:4f:42:7f:9e:e4:39:5a:97:ab: f9:8f:81:13:3c:41:d9:f9:7c:9e:86:69:46:3d:d6: 00:17:5a:c4:47:d3:05:68:34:39:ff:b2:2f:e4:df: 87:dc:cf:e6:82:d3:db:b2:f1:f8:94:e9:fb:a4:80: 05:fc:67:39:6b:bd:06:a8:91:85:06:07:ae:d9:46: 9f:4a:d1:56:e9:8f:39:3c:86:34:75:d9:19:6c:24: db:29:e2:7d:c6:28:85:5f:e7:d9:d5:b9:b3:71:be: 28:27:28:82:93:c7:8a:40:14:a8:e1:dc:05:71:8a: cb:39:11:6c:37:91:06:13:13:2c:f3:eb:7e:3d:0d: 1d:19:d9:a5:f3:e6:c6:40:49:6b:8b:49:af:81:fe: 5c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:59:DC:60:1D:46:6C:88:F1:84:A6:5B:C5:24:DC:8F:C1:75:61:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:64:76:f2:7e:71:4c:fa:2b:8d:17:91:57:c5:10:73:ad:43: ac:66:31:ff:53:27:fa:d7:36:cf:d3:20:06:e1:15:8b:94:48: f6:09:0a:be:f9:bc:c3:62:4d:6f:c2:05:33:b0:58:01:f2:16: 84:e3:75:28:26:32:6f:b1:70:66:b8:ae:34:ab:5b:34:de:6d: 2c:f3:1e:8a:e4:49:aa:ba:f7:e3:0c:fd:68:0a:ab:95:77:46: 52:a9:a8:c3:2a:d8:cb:9c:93:3e:71:06:80:38:74:c7:83:b7: e2:8f:cf:13:99:fa:31:f7:bd:31:33:65:aa:33:09:d7:82:8e: 6b:84:72:2c:3a:fb:bf:45:e1:e1:27:f6:10:b9:78:b1:84:fe: 0e:4e:52:72:18:a5:fd:70:6e:ea:1e:76:b9:41:67:d2:40:36: 6a:dc:59:99:99:a8:98:61:d9:3c:c3:1b:64:9d:9c:4e:db:6e: 93:e4:41:ef:c9:64:a6:cf:0a:fa:67:4a:0a:46:34:09:43:fd: ed:35:c8:88:d9:7d:7d:81:8d:bc:9d:4e:1b:e4:90:b3:d3:6d: 31:04:ae:0f:70:a2:23:dc:13:07:22:1f:bc:f7:3d:5e:a1:3b: 1d:f7:69:6e:b5:60:6d:88:58:5c:7e:bc:05:85:55:52:23:c4: e8:80:d4:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2hGr3qkwmaC8/DsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZmY2MTAxMzgtNGUwYi00OTdmLWJiODQtNDMxOTU1NmQwMzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX5xOfszrAUo/ajTX/bi/AmI+swQYcmFa75w 1NJArGBO48sbfXJ7GU/RQIQJATguqyxX9O/dxCm9erobBewRdqYeDifZXMtpmbna QEhCirsAJlDA254kzjaqSDfcZQnWIzsgwET8TKmad8AHIw1PQn+e5Dlal6v5j4ET PEHZ+XyehmlGPdYAF1rER9MFaDQ5/7Iv5N+H3M/mgtPbsvH4lOn7pIAF/Gc5a70G qJGFBgeu2UafStFW6Y85PIY0ddkZbCTbKeJ9xiiFX+fZ1bmzcb4oJyiCk8eKQBSo 4dwFcYrLORFsN5EGExMs8+t+PQ0dGdml8+bGQElri0mvgf5c4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhZ3GAdRmyI8YSmW8Uk3I/BdWFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFkdvJ+cUz6K40XkVfFEHOtQ6xmMf9TJ/rXNs/TIAbhFYuUSPYJCr75 vMNiTW/CBTOwWAHyFoTjdSgmMm+xcGa4rjSrWzTebSzzHorkSaq69+MM/WgKq5V3 RlKpqMMq2Muckz5xBoA4dMeDt+KPzxOZ+jH3vTEzZaozCdeCjmuEciw6+79F4eEn 9hC5eLGE/g5OUnIYpf1wbuoedrlBZ9JANmrcWZmZqJhh2TzDG2SdnE7bbpPkQe/J ZKbPCvpnSgpGNAlD/e01yIjZfX2BjbydThvkkLPTbTEErg9woiPcEwciH7z3PV6h Ox33aW61YG2IWFx+vAWFVVIjxOiA1Ns= -----END CERTIFICATE-----Generated at Wed May 13 05:52:45 2026 by rpki-client