$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa File: 416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json) Hash identifier: dPMMHcSXwecfMOBMrdcyDp3hJC+waHR4Pby71N8gGFg= Subject key identifier: 83:E1:D7:40:37:8B:FA:DA:7A:90:4E:8B:2E:35:0C:9C:3B:CA:88:49 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584DAAE02B71F4C4B048DF061E00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa Signing time: Wed 29 Apr 2026 13:00:31 +0000 ROA not before: Wed 29 Apr 2026 13:00:31 +0000 ROA not after: Tue 28 Jul 2026 13:00:31 +0000 asID: 1239 IP address blocks: 172.98.161.0/24 maxlen: 24 172.98.167.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:aa:e0:2b:71:f4:c4:b0:48:df:06:1e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 29 13:00:31 2026 GMT Not After : Jul 28 13:00:31 2026 GMT Subject: CN=268599e1-ce2c-4d7d-9cb2-08d682abb7f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0a:98:d5:8a:27:0e:89:fe:8c:ca:5f:2f:71: c8:c5:f3:74:df:e9:bd:02:2c:2b:4c:08:10:04:84: a2:27:fa:16:fc:03:1b:78:ff:71:29:0b:95:4b:70: 90:ba:cf:f5:da:55:5f:53:44:61:e5:37:1f:a9:e7: 15:9b:30:8a:cc:2a:39:e0:28:3d:87:39:33:c2:e6: 8d:67:09:4f:90:2b:05:fe:3f:94:ff:3c:bd:6a:dd: d2:ef:bb:ec:7e:6e:fb:c6:03:b8:e9:ab:54:93:e3: ec:d5:c0:fc:66:e7:f2:56:71:a1:92:4d:a6:a8:84: d7:29:85:dd:09:df:60:2b:07:1e:bf:f3:38:be:fb: 17:2c:e4:48:0b:26:8c:0a:10:11:2c:68:ad:19:3a: e6:62:5b:4c:be:b3:75:2b:38:fb:f3:31:fc:c3:f4: 2e:cc:24:83:ed:18:22:7d:b0:f1:eb:3f:36:0b:09: 79:d2:e2:45:71:37:79:76:b6:3a:d6:ee:aa:45:ac: 8e:ee:35:f1:3d:79:06:69:73:80:ea:9b:40:73:eb: 1c:b2:28:7e:37:f8:6e:fe:44:e9:ac:82:6f:7a:5c: 35:94:f3:fe:9b:12:45:4d:07:18:1d:68:6c:c8:73: ef:9a:fd:65:b1:1e:ff:e5:d9:89:06:dd:15:d4:90: 7c:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E1:D7:40:37:8B:FA:DA:7A:90:4E:8B:2E:35:0C:9C:3B:CA:88:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 172.98.167.0/24 172.98.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:d3:3e:52:80:b8:fd:9a:a3:e8:86:9c:50:bc:c5:c1:cc:2a: cd:e9:89:9f:da:71:c7:42:f7:2d:e4:1d:d4:a1:5f:46:a8:a2: af:6b:b3:a3:2c:c4:ec:0a:0f:80:aa:a9:bd:5b:79:10:6d:bf: 87:40:25:e2:b7:95:8a:cf:03:25:1a:f8:be:ff:1c:4f:d4:31: c2:6d:08:72:83:e2:ab:95:90:e2:81:16:35:ff:ac:80:6b:25: 3d:3a:35:d4:37:6e:3a:66:f4:18:54:30:10:f9:25:3f:89:0e: 9f:d9:dc:0c:9b:bf:d7:97:6d:27:ce:4b:be:03:aa:27:25:93: 11:f7:2b:91:35:c1:b7:66:f5:be:a7:03:cf:32:15:0a:e7:91: 0b:16:76:42:1f:38:3c:5b:54:f4:64:64:26:23:46:20:9c:2e: 58:9c:5e:4f:7d:bb:a9:e2:6d:b5:c5:6f:81:62:fe:b4:b5:25: 84:ba:74:dc:fb:52:da:b2:13:04:32:5b:9e:c5:5b:be:18:e5: 94:88:3f:c0:56:93:ff:cc:3b:26:5b:e0:9a:41:c8:eb:fd:b3: 84:21:8c:02:11:85:8c:1c:10:da:80:7f:9e:93:98:bf:9d:0a: df:2f:d4:29:99:97:fc:68:ff:d9:11:ad:16:1b:0e:74:05:27: 24:20:f8:26 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE2q4Ctx9MSwSN8GHgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk MjY4NTk5ZTEtY2UyYy00ZDdkLTljYjItMDhkNjgyYWJiN2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqY1YonDon+jMpfL3HIxfN03+m9AiwrTAgQ BISiJ/oW/AMbeP9xKQuVS3CQus/12lVfU0Rh5TcfqecVmzCKzCo54Cg9hzkzwuaN ZwlPkCsF/j+U/zy9at3S77vsfm77xgO46atUk+Ps1cD8ZufyVnGhkk2mqITXKYXd Cd9gKwcev/M4vvsXLORICyaMChARLGitGTrmYltMvrN1Kzj78zH8w/QuzCSD7Rgi fbDx6z82Cwl50uJFcTd5drY61u6qRayO7jXxPXkGaXOA6ptAc+scsih+N/hu/kTp rIJvelw1lPP+mxJFTQcYHWhsyHPvmv1lsR7/5dmJBt0V1JB8fQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFIPh10A3i/raepBOiy41DJw7yohJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDE2Zjg2NDEtYTBlZC0z YmMxLWI1ZGQtM2Y5NTczMWEyYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGKhAwQA rGKnAwQArGK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAE/TPlKAuP2ao+iGnFC8xcHMKs3piZ/accdC9y3k HdShX0aooq9rs6MsxOwKD4Cqqb1beRBtv4dAJeK3lYrPAyUa+L7/HE/UMcJtCHKD 4quVkOKBFjX/rIBrJT06NdQ3bjpm9BhUMBD5JT+JDp/Z3Aybv9eXbSfOS74Dqicl kxH3K5E1wbdm9b6nA88yFQrnkQsWdkIfODxbVPRkZCYjRiCcLlicXk99u6nibbXF b4Fi/rS1JYS6dNz7UtqyEwQyW57FW74Y5ZSIP8BWk//MOyZb4JpByOv9s4QhjAIR hYwcENqAf56TmL+dCt8v1CmZl/xo/9kRrRYbDnQFJyQg+CY= -----END CERTIFICATE-----Generated at Sat May 9 07:11:01 2026 by rpki-client