$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa File: 9a6bc565-0a69-3578-89a9-774fc42e90c2.roa (raw, json) Hash identifier: ZMzMB6ae90qzZebrun8szz6NJoiJIFIp8FjJS0YtRZM= Subject key identifier: A9:28:46:ED:AB:FA:C7:FB:74:BB:AD:D4:EA:68:E3:B1:49:E2:7D:3C Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D492A6D2997A69D7F4CF44B40 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 399989 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:6d:29:97:a6:9d:7f:4c:f4:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=844c226e-1a96-4491-b336-ed47fec2420d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c3:39:51:f8:43:c9:a1:ab:6d:ef:d5:c5:0c: 76:df:a7:d3:79:b0:5a:b6:7d:cd:3f:f3:ec:d2:36: 1a:c7:b6:66:46:0c:70:6e:6d:06:68:66:50:d6:04: 3c:7b:30:2d:d7:3c:80:ff:95:0f:7e:f7:cf:7f:61: e5:8e:29:b9:ac:aa:7e:a3:6e:41:1c:31:b6:d6:29: e1:17:83:8f:d1:ce:96:96:7c:34:cb:14:f9:5c:ea: 72:5a:3f:a8:7d:9a:76:d1:77:0b:ee:a1:00:fc:ed: 0f:37:9d:e2:15:e0:d3:68:d2:20:83:58:60:05:ac: 62:95:0a:c8:32:a4:d2:5a:d4:51:e0:db:9a:1d:11: 3d:45:87:26:cc:9c:02:2b:52:c5:27:ac:d5:32:34: be:4c:07:97:8c:d4:c4:4a:a8:3f:d5:4d:84:4c:10: c0:a8:0f:2e:d5:02:6c:33:ae:a2:79:b3:cd:03:7d: 91:1b:b3:44:c0:ee:14:0d:27:a5:e3:4b:43:46:83: 6d:17:64:5f:dc:74:f5:fe:d3:91:a1:52:84:33:07: 75:52:d4:1f:9a:3e:7b:f7:70:b7:6f:2e:05:f6:6b: bf:e3:38:c6:5a:00:89:97:3d:c0:45:55:24:58:75: f8:7d:fa:95:70:62:c7:a6:0e:68:93:b2:65:5c:23: d5:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:28:46:ED:AB:FA:C7:FB:74:BB:AD:D4:EA:68:E3:B1:49:E2:7D:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:1a:5a:f4:73:9d:c7:b4:f1:08:1f:ef:a7:69:02:94:dc:26: 9a:0b:d9:cd:f4:72:7f:f8:7c:1b:df:d8:31:55:0d:0d:27:aa: c5:8d:d0:6f:ad:c2:7a:da:d6:57:6f:bf:d6:a2:c5:9a:47:c5: 24:6e:5c:12:ff:e6:42:39:63:9d:5f:fb:9c:2c:f3:10:da:7a: b4:47:bd:e7:be:40:13:6e:d6:07:df:39:a4:da:01:88:29:fc: 43:f7:04:ec:12:dc:62:b3:cb:4f:92:0d:33:9c:65:e1:5e:25: d4:87:ab:29:a4:1e:94:15:6c:62:43:07:70:26:d1:d8:af:39: da:5d:24:df:96:3f:6d:74:b2:be:b3:b0:f7:a0:f1:5a:86:85: e7:4b:42:1d:99:d3:a9:9e:38:e2:1f:29:71:4d:c5:b9:3c:51: 58:e4:0f:b3:30:21:20:41:88:92:39:c7:1a:2b:b3:49:aa:c5: da:51:e5:27:80:9f:22:f9:fe:b5:87:7d:c3:cf:43:f6:4f:5c: d9:c7:d8:fc:a5:99:2b:62:d6:21:49:9e:dd:99:cc:51:7b:bb: 94:d8:8d:62:1d:5a:ec:b6:22:3a:fd:e5:8a:ac:42:bf:00:8b: c3:fa:2c:ca:aa:75:00:e0:f6:33:a3:11:f1:ac:cf:e7:7c:e9: 75:79:8b:41 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE1JKm0pl6adf0z0S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk ODQ0YzIyNmUtMWE5Ni00NDkxLWIzMzYtZWQ0N2ZlYzI0MjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocM5UfhDyaGrbe/VxQx236fTebBatn3NP/Ps 0jYax7ZmRgxwbm0GaGZQ1gQ8ezAt1zyA/5UPfvfPf2Hljim5rKp+o25BHDG21inh F4OP0c6Wlnw0yxT5XOpyWj+ofZp20XcL7qEA/O0PN53iFeDTaNIgg1hgBaxilQrI MqTSWtRR4NuaHRE9RYcmzJwCK1LFJ6zVMjS+TAeXjNTESqg/1U2ETBDAqA8u1QJs M66iebPNA32RG7NEwO4UDSel40tDRoNtF2Rf3HT1/tORoVKEMwd1UtQfmj5793C3 by4F9mu/4zjGWgCJlz3ARVUkWHX4ffqVcGLHpg5ok7JlXCPVqwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFKkoRu2r+sf7dLut1Opo47FJ4n08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOWE2YmM1NjUtMGE2OS0z NTc4LTg5YTktNzc0ZmM0MmU5MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAgaWvRznce08Qgf76dpApTcJpoL2c30 cn/4fBvf2DFVDQ0nqsWN0G+twnra1ldvv9aixZpHxSRuXBL/5kI5Y51f+5ws8xDa erRHvee+QBNu1gffOaTaAYgp/EP3BOwS3GKzy0+SDTOcZeFeJdSHqymkHpQVbGJD B3Am0divOdpdJN+WP210sr6zsPeg8VqGhedLQh2Z06meOOIfKXFNxbk8UVjkD7Mw ISBBiJI5xxors0mqxdpR5SeAnyL5/rWHfcPPQ/ZPXNnH2PylmSti1iFJnt2ZzFF7 u5TYjWIdWuy2Ijr95YqsQr8Ai8P6LMqqdQDg9jOjEfGsz+d86XV5i0E= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:45 2026 by rpki-client