
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
File: d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json)
Hash identifier: E9FAicSqSgLJBDlLMV0dk6hUcEcNypyeCj63bMEYegg=
Subject key identifier: 03:38:53:BB:6A:4B:BF:9E:F9:65:F6:60:05:8D:58:F6:DD:AA:41:BA
Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial: 010D0C9F4328584DBA3AEA7DB10A3B0398D1EF00
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
Signing time: Tue 05 May 2026 01:00:23 +0000
ROA not before: Tue 05 May 2026 01:00:23 +0000
ROA not after: Mon 03 Aug 2026 01:00:23 +0000
asID: 9009
IP address blocks: 172.98.162.0/24 maxlen: 24
172.98.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ba:3a:ea:7d:b1:0a:3b:03:98:d1:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Validity
Not Before: May 5 01:00:23 2026 GMT
Not After : Aug 3 01:00:23 2026 GMT
Subject: CN=8f7deb72-e606-446a-b7fa-86c53d0588fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:9c:91:52:59:8c:e3:de:e5:f2:05:85:c8:
af:b7:d1:53:69:b1:05:f3:7f:20:b1:53:5c:ad:08:
3f:3e:1d:e2:81:e8:ca:b1:f9:f2:28:7f:5f:02:42:
c0:e1:8f:d2:b8:b2:d8:a9:da:8a:eb:f3:0e:61:6d:
b9:1b:4d:e5:2e:79:6b:23:06:14:f1:ad:38:15:16:
25:5c:f5:9b:0b:1e:63:42:e8:da:d9:bc:7a:f9:6d:
32:40:cf:39:1b:a1:57:4f:5b:62:09:51:c6:bc:83:
de:ac:fc:d8:c8:82:3e:5d:c1:f5:84:03:89:c5:3a:
49:3b:0c:d9:e5:80:c1:1f:a3:c7:ed:b0:87:a3:ad:
31:f3:5c:d1:a6:ce:8b:fb:e6:ef:01:a6:21:e0:3f:
ef:95:ea:50:1b:1a:5e:1f:18:2b:17:ed:d4:9a:1b:
be:83:25:36:0d:9c:b2:d3:60:78:f4:1b:28:a0:84:
d5:0b:cc:2d:79:96:58:a3:8c:c8:c3:91:cc:17:0d:
16:db:bf:78:b7:37:12:01:04:29:9a:c1:d8:5f:82:
f5:11:bd:92:12:d7:79:90:58:10:22:f4:55:29:eb:
d5:3a:2e:f3:3c:c5:2e:f1:e8:2a:68:0a:47:f1:fd:
87:4c:4b:8f:c3:74:16:79:05:c7:26:c6:66:f5:36:
e2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:38:53:BB:6A:4B:BF:9E:F9:65:F6:60:05:8D:58:F6:DD:AA:41:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
X509v3 Authority Key Identifier:
keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
sbgp-ipAddrBlock: critical
IPv4:
172.98.162.0/24
172.98.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:db:87:5d:62:ae:16:f5:da:d2:3c:db:96:4e:c6:7f:80:f6:
b2:90:52:f8:f6:23:ee:85:c3:4e:0c:67:04:88:7c:1b:b7:b3:
76:69:13:af:3c:a1:37:58:05:54:4e:7e:5e:d3:34:e1:9e:36:
53:6e:d9:88:dc:a2:72:7a:20:e7:ad:4c:19:62:55:e6:af:e8:
1f:be:ed:5a:f6:6f:a4:ea:b0:7a:1c:8a:8c:38:7b:c6:13:36:
ab:0f:a3:8b:3d:3c:3b:af:0a:d4:0e:80:8a:3b:92:80:5b:82:
c4:ae:85:39:05:37:27:59:a3:95:0e:ed:60:34:3f:d8:d9:fb:
00:6c:65:98:6d:7d:cd:3c:0f:74:ac:f8:59:db:24:74:86:9a:
c1:ab:30:87:37:bd:33:1e:31:18:99:da:ca:3a:fb:82:2c:64:
cb:ef:4b:2b:0a:44:af:6b:fe:fc:09:1c:b3:02:76:eb:84:c4:
2c:25:2e:71:1f:58:5a:4f:c2:4f:01:57:c7:ce:36:2e:47:db:
b0:47:8d:70:b1:a2:94:c0:08:ab:77:75:d1:ea:00:5f:6b:38:
38:f0:7b:0c:6f:b1:b8:27:e2:a7:fc:50:cf:e7:49:9a:6a:e7:
00:1b:4b:a1:81:e1:43:9a:8e:4e:36:6b:ba:f3:76:2d:a6:90:
ce:d1:6b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:28:34 2026 by rpki-client