$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: EuJjI23fnFLn6iC1smhxdGs0hzguxcVkZgfP7TdfCtQ= Subject key identifier: 49:7B:E5:3B:39:64:E3:80:1D:06:0A:44:2D:14:CD:3F:98:E3:6A:39 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D3F64EFF3FD5D948F8D887800 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Sun 22 Mar 2026 01:00:32 +0000 ROA not before: Sun 22 Mar 2026 01:00:32 +0000 ROA not after: Sat 20 Jun 2026 01:00:32 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3f:64:ef:f3:fd:5d:94:8f:8d:88:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 22 01:00:32 2026 GMT Not After : Jun 20 01:00:32 2026 GMT Subject: CN=0dda5fe6-fdf3-4b42-91f7-c2983ee507f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fe:a2:df:d9:a2:0a:c3:f0:7f:83:73:3d:74: 70:3e:23:af:48:19:78:8c:d6:ef:e6:d5:73:e7:78: cb:fc:13:67:06:cd:4b:95:57:58:e9:c3:bc:44:33: f9:cc:f9:a5:48:04:9f:7e:07:98:4c:4f:e3:ab:a2: f5:22:7e:a0:f9:6c:5a:e5:6d:85:10:9a:87:0b:63: fa:b2:4a:5f:f1:f0:11:7c:b2:12:e3:9a:b3:59:43: 8d:ae:1d:5c:b8:65:61:ef:f7:7b:8f:3d:4f:05:09: cb:ee:6d:fe:34:0a:71:b5:ff:9d:b3:c8:aa:ea:1c: 42:89:f0:32:f3:d7:9b:20:b7:65:d4:78:88:66:d4: 25:2c:dc:fc:f1:21:18:d6:ac:8b:3d:38:ea:cb:eb: 0b:37:d1:74:3f:bc:bc:ac:ba:e2:76:2b:08:8b:b5: b7:71:14:24:d3:29:cd:5a:28:07:c3:bd:5e:75:47: 15:da:8b:4d:72:14:95:4a:bb:b0:75:eb:3c:60:98: 9f:30:1f:f8:2c:cb:e9:a6:38:0e:20:1d:16:e3:9d: 3e:7a:fa:aa:08:46:ed:71:b7:98:18:18:05:66:50: 95:e2:68:a7:3f:d6:75:26:e2:c3:6c:6f:5e:5f:9b: 07:50:41:bd:02:4c:12:14:23:92:bb:cb:88:b7:e1: a3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:7B:E5:3B:39:64:E3:80:1D:06:0A:44:2D:14:CD:3F:98:E3:6A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:56:d0:e9:c4:49:97:74:3d:a8:29:f0:00:f0:46:14:56:f7: f6:0c:59:83:d1:bb:66:ea:d2:95:de:b5:a7:15:ba:ee:2c:39: 64:df:86:2d:3e:be:cc:b9:be:2d:b8:30:57:da:84:74:41:09: 69:08:a8:ac:dd:70:42:60:e3:b1:e7:03:f7:75:ed:b5:76:af: a3:e6:f9:cd:82:18:38:9b:fc:3e:8e:51:4e:69:bd:c2:b8:31: 84:e9:e1:3a:20:3d:30:f6:af:d0:80:4c:63:f5:cd:17:38:db: 06:14:1b:98:73:be:75:da:af:6a:89:cb:b3:9b:46:a3:47:d7: 1a:cd:67:3b:bd:b6:0b:ee:1c:7e:59:ee:5c:fb:cc:39:08:ff: 78:21:17:32:4b:6d:52:bd:fa:fb:0d:49:20:cb:75:36:7c:66: 13:4f:0d:e8:d8:e5:7e:d9:0a:be:64:86:4b:70:04:68:61:a8: 0d:ee:3a:5c:b4:50:aa:c5:ac:e6:c5:81:56:cb:f3:85:ac:09: 1e:67:22:fa:83:9c:4a:7c:5a:1e:c8:13:c3:20:55:45:3d:8f: 1a:c7:85:3d:bd:15:4e:de:2c:35:02:d4:f7:2a:cb:8f:ae:6c: 20:75:d1:67:f7:72:c1:96:0a:0b:f7:4b:52:ee:45:bb:23:8c: 39:2b:1a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0/ZO/z/V2Uj42IeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk MGRkYTVmZTYtZmRmMy00YjQyLTkxZjctYzI5ODNlZTUwN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf6i39miCsPwf4NzPXRwPiOvSBl4jNbv5tVz 53jL/BNnBs1LlVdY6cO8RDP5zPmlSASffgeYTE/jq6L1In6g+Wxa5W2FEJqHC2P6 skpf8fARfLIS45qzWUONrh1cuGVh7/d7jz1PBQnL7m3+NApxtf+ds8iq6hxCifAy 89ebILdl1HiIZtQlLNz88SEY1qyLPTjqy+sLN9F0P7y8rLridisIi7W3cRQk0ynN WigHw71edUcV2otNchSVSruwdes8YJifMB/4LMvppjgOIB0W450+evqqCEbtcbeY GBgFZlCV4minP9Z1JuLDbG9eX5sHUEG9AkwSFCOSu8uIt+GjoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEl75Ts5ZOOAHQYKRC0UzT+Y42o5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxW0OnESZd0Pagp8ADwRhRW9/YMWYPRu2bq0pXetacVuu4sOWTfhi0+ vsy5vi24MFfahHRBCWkIqKzdcEJg47HnA/d17bV2r6Pm+c2CGDib/D6OUU5pvcK4 MYTp4TogPTD2r9CATGP1zRc42wYUG5hzvnXar2qJy7ObRqNH1xrNZzu9tgvuHH5Z 7lz7zDkI/3ghFzJLbVK9+vsNSSDLdTZ8ZhNPDejY5X7ZCr5khktwBGhhqA3uOly0 UKrFrObFgVbL84WsCR5nIvqDnEp8Wh7IE8MgVUU9jxrHhT29FU7eLDUC1Pcqy4+u bCB10Wf3csGWCgv3S1LuRbsjjDkrGoQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:07 2026 by rpki-client