$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: 2saRAqDesw3lNl1qtJFjDbletwc8nY7SdW0Ts1nDfUI= Subject key identifier: FF:C1:4C:6A:A0:AF:68:95:00:71:29:A8:E1:0E:69:C9:9B:C4:AF:26 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F63F820E40E122FECB747D400 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:20:e4:0e:12:2f:ec:b7:47:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=166846c8-50d3-42ec-ab1a-425bec9cdece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ae:61:fd:75:82:93:ce:11:95:8d:35:ee:56: 1e:79:da:4e:64:da:64:95:af:4c:8f:7d:a2:e3:98: eb:2c:9b:65:8b:bf:79:b1:57:3b:80:e0:58:f2:06: 6e:e9:b8:73:71:a8:e2:06:7b:45:be:13:7b:4b:9d: 97:c4:82:e7:a4:f2:b7:6a:c8:c3:49:f1:af:76:76: 5b:40:77:db:19:bd:cf:e8:53:01:1b:c9:3a:cc:eb: 29:1e:64:b5:a4:a0:36:06:d5:ab:26:3b:8a:ac:9c: 79:96:e5:a6:6b:31:24:97:5d:3e:5f:45:86:81:25: d1:50:e7:da:e8:51:0a:84:10:4e:d7:7d:6e:e9:bb: ac:54:f3:2a:df:3c:8e:55:58:e7:4e:0e:b1:10:2d: f9:09:f9:1d:97:32:7e:c5:b2:a7:30:a5:25:b4:9d: a2:9f:d2:7d:b9:75:aa:0b:f9:05:5c:6e:fe:63:b3: b4:e4:31:d2:e6:ce:d9:18:fe:ef:88:01:1f:fb:9c: 1e:3a:a8:e7:13:8e:41:ed:98:17:e1:12:3b:67:c8: 69:5d:07:2b:5b:ca:5a:50:ff:05:28:4a:c8:7e:b5: 3e:ba:01:19:80:36:7c:0f:82:00:33:20:3a:4c:65: 28:61:c0:15:eb:ae:ab:f7:31:38:63:7e:ff:9d:62: 32:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:C1:4C:6A:A0:AF:68:95:00:71:29:A8:E1:0E:69:C9:9B:C4:AF:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:75:e2:a8:a9:21:f5:2e:e5:cc:b4:09:cb:a3:7e:ea:9f:20: dd:4e:2e:47:52:cc:b3:87:d4:95:ab:fc:76:70:e6:ea:fe:4c: 2a:a7:87:2a:aa:63:15:16:74:32:54:c9:1b:6c:69:78:91:a8: 63:dd:75:9b:de:f4:90:14:12:00:07:e0:5d:a2:24:38:b3:64: 24:4b:c1:87:25:21:7c:9e:5c:09:73:38:b4:e7:9f:5a:d8:ba: 16:2c:4c:f6:bf:42:27:e2:92:6d:bc:7c:35:91:51:49:bc:7d: 8b:f8:d1:db:56:93:1d:71:f6:ac:a7:ac:26:a8:96:7f:af:33: 51:e3:b5:3e:b3:73:31:f4:3d:36:e6:50:84:b7:52:7d:4c:c7: 07:b7:8d:a9:a3:5c:4d:dd:7c:ae:84:1a:c2:eb:bb:ea:98:9d: 09:dc:dd:cb:5d:90:1f:10:11:30:36:40:96:e9:d4:12:f8:da: 23:87:49:9f:f0:36:e8:bf:65:38:54:ae:eb:8f:6c:ac:93:f1: 42:4e:db:22:c4:43:51:3c:1c:d9:e7:67:14:90:e8:18:ba:80: 80:81:ef:85:ad:84:67:0b:8d:aa:50:bf:2e:da:39:68:08:63: b1:1f:42:7d:88:e6:15:ae:d4:f3:43:94:68:1e:60:13:7d:5e: 46:6d:68:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CDkDhIv7LdH1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MTY2ODQ2YzgtNTBkMy00MmVjLWFiMWEtNDI1YmVjOWNkZWNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn65h/XWCk84RlY017lYeedpOZNpkla9Mj32i 45jrLJtli795sVc7gOBY8gZu6bhzcajiBntFvhN7S52XxILnpPK3asjDSfGvdnZb QHfbGb3P6FMBG8k6zOspHmS1pKA2BtWrJjuKrJx5luWmazEkl10+X0WGgSXRUOfa 6FEKhBBO131u6busVPMq3zyOVVjnTg6xEC35CfkdlzJ+xbKnMKUltJ2in9J9uXWq C/kFXG7+Y7O05DHS5s7ZGP7viAEf+5weOqjnE45B7ZgX4RI7Z8hpXQcrW8paUP8F KErIfrU+ugEZgDZ8D4IAMyA6TGUoYcAV666r9zE4Y37/nWIyNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/BTGqgr2iVAHEpqOEOacmbxK8mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd14qipIfUu5cy0CcujfuqfIN1OLkdSzLOH1JWr/HZw5ur+TCqnhyqq YxUWdDJUyRtsaXiRqGPddZve9JAUEgAH4F2iJDizZCRLwYclIXyeXAlzOLTnn1rY uhYsTPa/Qifikm28fDWRUUm8fYv40dtWkx1x9qynrCaoln+vM1HjtT6zczH0PTbm UIS3Un1Mxwe3jamjXE3dfK6EGsLru+qYnQnc3ctdkB8QETA2QJbp1BL42iOHSZ/w Nui/ZThUruuPbKyT8UJO2yLEQ1E8HNnnZxSQ6Bi6gICB74WthGcLjapQvy7aOWgI Y7EfQn2I5hWu1PNDlGgeYBN9XkZtaKM= -----END CERTIFICATE-----Generated at Mon Oct 19 22:18:56 2026 by rpki-client