$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa File: 9a6bc565-0a69-3578-89a9-774fc42e90c2.roa (raw, json) Hash identifier: nPRukgDEHJ43zLG+4wuopSLV3R7XcIe7EzxNVTe2Z+M= Subject key identifier: E1:00:0C:13:9E:3E:F7:CB:01:14:AB:EB:AA:FB:29:9B:65:6F:4F:2C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B89177531D0F4C6D1EDECFC80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 399989 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:75:31:d0:f4:c6:d1:ed:ec:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=b193bce0-4078-4b0f-a65a-3aeff9512132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:04:1f:61:1a:8b:12:61:9d:db:63:9b:50:26: ce:1d:08:f6:67:88:0e:c5:b1:4d:bf:76:19:10:a8: cf:a0:34:69:47:1f:01:d7:d5:cb:14:db:80:58:65: d4:85:72:ab:63:5a:7b:04:13:59:2f:bb:8d:e4:35: 32:3d:dc:f3:b3:51:4c:8c:43:8d:10:71:47:b4:60: c2:0f:54:fa:5f:20:4a:fe:f1:06:c0:7f:20:98:68: 25:b9:ac:ca:bf:b5:e7:84:97:87:4f:bb:12:9f:84: 75:d0:e4:28:3f:aa:bf:72:5a:eb:ff:dc:1e:9c:16: 45:f1:22:80:0e:ee:8e:c8:d8:c4:f7:cd:d8:e7:db: 61:a8:f0:0c:a2:a9:c7:a4:9d:16:ba:28:fd:66:10: ca:32:56:d2:7b:70:90:9a:e4:71:3b:a7:77:72:fc: 7e:35:ba:fe:21:cb:47:b0:30:46:88:66:d5:2f:a1: c8:c0:b2:00:93:24:fa:6f:2a:f6:48:d2:0d:83:13: 4b:38:a7:24:e2:ff:0b:e7:29:01:e6:0c:dd:05:64: 8a:19:4e:0a:5e:d5:15:57:2d:3e:ad:2b:0f:b8:36: 40:c2:e7:e5:76:ee:eb:02:48:67:89:e5:85:d9:37: 4c:30:ca:92:a8:ab:8a:b5:3a:0c:66:2b:94:53:fd: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:00:0C:13:9E:3E:F7:CB:01:14:AB:EB:AA:FB:29:9B:65:6F:4F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:fe:5c:d6:4e:7b:f8:aa:ed:58:86:26:39:89:d2:ba:68:a8: 61:eb:d9:38:0e:dc:88:48:3a:88:0b:2c:21:1b:56:ba:9d:6d: 27:4f:ef:ac:6e:6c:44:72:42:d6:45:8f:5a:d5:a5:54:a8:01: d1:9b:90:a4:54:82:d6:e7:d0:71:8f:3f:da:85:bb:83:21:3c: d1:26:f8:58:c1:69:28:09:fb:77:32:f3:2e:10:27:5d:3b:64: a7:65:fd:dd:78:8c:9e:3f:f9:5f:10:f5:b1:f3:0a:39:dd:f7: 3c:37:f1:da:c5:cc:35:ec:0e:56:82:2a:d7:2c:b2:5f:49:d5: 60:8b:fd:8a:0c:43:ba:d1:a9:d0:a6:91:cb:f0:12:e5:70:28: 49:e2:15:7b:6e:4d:c4:a8:0f:98:97:ba:58:93:bf:28:dd:07: b2:f7:42:bb:29:68:28:e7:90:bd:96:15:aa:b5:44:d1:bd:d8: 01:bc:08:94:a5:0c:95:be:c2:43:e3:b9:f0:94:3d:d2:b4:53: 84:62:d2:a2:34:5d:97:2c:ec:83:7e:9a:70:72:56:07:85:63: bc:19:ce:6e:e7:49:4b:fd:90:9c:0d:4f:84:e3:b5:6f:8d:a7: a9:ac:56:0e:cd:35:12:09:85:56:06:61:73:a6:d4:0c:85:3e: 59:b6:df:f6 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuJF3Ux0PTG0e3s/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk YjE5M2JjZTAtNDA3OC00YjBmLWE2NWEtM2FlZmY5NTEyMTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAQfYRqLEmGd22ObUCbOHQj2Z4gOxbFNv3YZ EKjPoDRpRx8B19XLFNuAWGXUhXKrY1p7BBNZL7uN5DUyPdzzs1FMjEONEHFHtGDC D1T6XyBK/vEGwH8gmGgluazKv7XnhJeHT7sSn4R10OQoP6q/clrr/9wenBZF8SKA Du6OyNjE983Y59thqPAMoqnHpJ0Wuij9ZhDKMlbSe3CQmuRxO6d3cvx+Nbr+IctH sDBGiGbVL6HIwLIAkyT6byr2SNINgxNLOKck4v8L5ykB5gzdBWSKGU4KXtUVVy0+ rSsPuDZAwufldu7rAkhnieWF2TdMMMqSqKuKtToMZiuUU/24gwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFOEADBOePvfLARSr66r7KZtlb08sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOWE2YmM1NjUtMGE2OS0z NTc4LTg5YTktNzc0ZmM0MmU5MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGL+XNZOe/iq7ViGJjmJ0rpoqGHr2TgO 3IhIOogLLCEbVrqdbSdP76xubERyQtZFj1rVpVSoAdGbkKRUgtbn0HGPP9qFu4Mh PNEm+FjBaSgJ+3cy8y4QJ107ZKdl/d14jJ4/+V8Q9bHzCjnd9zw38drFzDXsDlaC Ktcssl9J1WCL/YoMQ7rRqdCmkcvwEuVwKEniFXtuTcSoD5iXuliTvyjdB7L3Qrsp aCjnkL2WFaq1RNG92AG8CJSlDJW+wkPjufCUPdK0U4Ri0qI0XZcs7IN+mnByVgeF Y7wZzm7nSUv9kJwNT4TjtW+Np6msVg7NNRIJhVYGYXOm1AyFPlm23/Y= -----END CERTIFICATE-----Generated at Sun Oct 19 17:33:19 2025 by rpki-client