$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa File: 79f9299b-0362-3137-aef0-5e220b4411a3.roa (raw, json) Hash identifier: KF5xp7DoMBFqfnFZTZ+y420mhZ+YgRv7h/bqyMqoo8k= Subject key identifier: 53:E0:A3:B0:F5:AE:ED:95:92:53:02:38:55:1A:81:90:B3:61:07:46 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D91C00943F8EDB6347A76C340 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa Signing time: Mon 20 Apr 2026 13:00:33 +0000 ROA not before: Mon 20 Apr 2026 13:00:33 +0000 ROA not after: Sun 19 Jul 2026 13:00:33 +0000 asID: 205659 IP address blocks: 172.98.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:91:c0:09:43:f8:ed:b6:34:7a:76:c3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 20 13:00:33 2026 GMT Not After : Jul 19 13:00:33 2026 GMT Subject: CN=bd75a031-f5ed-4514-9e0f-ee0b578a159b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:50:7c:48:39:46:da:e3:90:c3:85:48:44:7d: c0:d0:00:a7:c3:fd:b6:91:43:ec:95:b2:8a:e0:11: b8:ea:b2:b3:38:d9:dc:96:22:ea:5e:32:b7:ee:35: 19:73:9a:44:17:70:2a:a7:dc:fa:b0:74:99:0e:81: d5:e3:c9:89:c5:72:5c:58:55:fe:c6:e8:72:63:52: d0:09:96:f8:df:5c:b2:1b:31:2a:87:b4:ef:e7:b2: f1:83:0f:2b:c2:f8:fc:5a:1f:c0:3b:ad:5a:2c:37: 2a:08:4d:38:49:74:d0:df:8f:eb:39:70:9c:53:2f: 84:67:f0:5a:ff:9d:2b:ad:8f:e0:c3:fe:56:2f:b4: e9:7e:95:41:a9:ae:18:35:98:2a:2d:ba:3f:8c:af: 48:88:e5:a4:92:a3:d7:a8:c0:37:be:4e:28:26:0d: b8:d9:0a:c4:fb:ee:bd:f7:02:fe:82:e9:a5:e2:54: 21:87:22:4b:30:70:33:e4:0c:7e:11:38:1b:b5:e4: d9:a2:9a:0b:69:30:e6:82:9f:c4:08:6c:8a:eb:af: 67:3b:cf:89:9d:13:72:f6:ed:8d:98:b3:bc:02:82: fe:bb:e3:0d:e9:d5:0d:8a:ea:cd:82:ae:aa:9f:88: 93:0f:a3:28:13:40:19:d3:d9:b8:bf:57:99:b8:fb: 4d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E0:A3:B0:F5:AE:ED:95:92:53:02:38:55:1A:81:90:B3:61:07:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cb:95:0f:3b:db:61:af:e9:4a:de:4d:0a:0b:8d:be:6d:9a: 8f:65:5a:85:23:e1:aa:e2:57:2f:ec:78:30:94:2e:21:37:ea: e1:27:3e:17:0b:ec:24:05:61:41:df:ff:ee:81:94:45:3b:5f: 54:85:4a:24:82:02:77:f7:36:d1:79:8e:0c:78:7e:68:17:79: 6a:b8:58:9f:5f:1a:0b:da:05:15:d9:64:7c:aa:71:dd:9f:b7: 4f:82:d8:6b:b0:cb:48:45:15:c0:88:65:2a:54:4b:63:77:a5: 45:49:e2:96:78:04:3c:a0:5b:5f:da:19:37:e7:2e:4a:41:dd: 1a:53:8a:aa:bc:6b:84:8e:60:55:b0:3b:8b:0e:ff:33:00:49: e0:ef:e4:d4:84:6f:de:81:4e:77:53:08:ce:8f:82:63:b2:d1: 8d:dd:5f:c3:b2:de:d3:50:cd:a2:fc:1c:f5:e9:c8:91:24:31: a7:51:ca:ee:ae:03:10:1f:10:77:9e:25:41:df:89:73:19:be: 32:cf:4e:31:49:fe:fc:01:e4:4f:b4:5f:4f:6b:a9:34:a4:3d: 10:98:7e:91:97:94:60:2b:1d:84:7a:13:50:a4:bc:79:68:e6: fe:02:b8:41:9c:31:aa:20:90:f7:33:63:67:73:5d:8f:ec:0c: ff:52:39:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2RwAlD+O22NHp2w0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDQyMDEzMDAzM1oXDTI2MDcxOTEzMDAzM1owLzEtMCsGA1UEAxMk YmQ3NWEwMzEtZjVlZC00NTE0LTllMGYtZWUwYjU3OGExNTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFB8SDlG2uOQw4VIRH3A0ACnw/22kUPslbKK 4BG46rKzONncliLqXjK37jUZc5pEF3Aqp9z6sHSZDoHV48mJxXJcWFX+xuhyY1LQ CZb431yyGzEqh7Tv57Lxgw8rwvj8Wh/AO61aLDcqCE04SXTQ34/rOXCcUy+EZ/Ba /50rrY/gw/5WL7TpfpVBqa4YNZgqLbo/jK9IiOWkkqPXqMA3vk4oJg242QrE++69 9wL+guml4lQhhyJLMHAz5Ax+ETgbteTZopoLaTDmgp/ECGyK669nO8+JnRNy9u2N mLO8AoL+u+MN6dUNiurNgq6qn4iTD6MoE0AZ09m4v1eZuPtNhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPgo7D1ru2VklMCOFUagZCzYQdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzlmOTI5OWItMDM2Mi0z MTM3LWFlZjAtNWUyMjBiNDQxMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXLlQ8722Gv6UreTQoLjb5tmo9lWoUj4ariVy/seDCULiE36uEnPhcL 7CQFYUHf/+6BlEU7X1SFSiSCAnf3NtF5jgx4fmgXeWq4WJ9fGgvaBRXZZHyqcd2f t0+C2Guwy0hFFcCIZSpUS2N3pUVJ4pZ4BDygW1/aGTfnLkpB3RpTiqq8a4SOYFWw O4sO/zMASeDv5NSEb96BTndTCM6PgmOy0Y3dX8Oy3tNQzaL8HPXpyJEkMadRyu6u AxAfEHeeJUHfiXMZvjLPTjFJ/vwB5E+0X09rqTSkPRCYfpGXlGArHYR6E1CkvHlo 5v4CuEGcMaogkPczY2dzXY/sDP9SObM= -----END CERTIFICATE-----Generated at Mon Apr 27 13:22:17 2026 by rpki-client