$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa File: 9a6bc565-0a69-3578-89a9-774fc42e90c2.roa (raw, json) Hash identifier: f67xE05dDApPDKF8PDFREg9PT6UVSi6siO79GQo3LJE= Subject key identifier: 5B:BE:C8:C9:30:AA:2C:A6:7A:61:0E:27:04:D0:88:96:92:56:9F:34 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584F6F22E49F6F80BA47531EB500 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 399989 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e4:9f:6f:80:ba:47:53:1e:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=7302b426-8c0e-49f7-bfab-480d51d47973 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:60:c4:2e:94:e6:5d:88:c2:fd:3e:7e:27:b1: c5:e7:13:72:f4:20:cb:80:a3:10:0d:be:7a:70:36: bb:b2:4f:74:cc:c2:30:a1:70:c7:3a:20:ee:73:2a: 76:cf:e8:21:42:ac:c7:a7:e1:20:8a:dd:e5:d0:b0: e4:28:ce:77:44:a1:4c:9e:e6:98:7e:d4:cb:73:1c: b4:d5:fd:f5:a3:cc:a3:7f:74:44:0a:b8:01:c2:82: a6:8c:49:b2:c8:3d:c9:ca:45:15:34:76:d9:fa:ff: fc:90:49:d1:3c:86:2d:90:61:0e:9a:15:87:cc:e6: e8:91:bc:fb:e5:b0:23:5b:8f:f9:a7:b6:8d:a6:73: ca:3b:30:9b:06:6f:59:02:2b:06:f3:dd:c1:7b:d2: aa:60:8e:c7:fe:73:4a:86:89:d4:15:22:ec:bc:b1: 91:03:20:da:c1:61:c3:44:38:85:fd:cb:d1:4c:bf: d8:05:fb:c7:a1:7c:28:94:2a:85:04:bf:62:94:ae: 86:82:c2:5b:bd:6e:5a:da:65:76:74:52:2d:db:02: 19:bc:0b:9f:d4:bd:d0:4c:b9:b4:a8:08:60:92:31: ed:cb:82:c9:3d:00:e7:c5:32:2f:93:55:9d:f4:29: 00:b0:77:ad:91:f0:7a:f9:6a:3d:27:7e:92:01:86: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BE:C8:C9:30:AA:2C:A6:7A:61:0E:27:04:D0:88:96:92:56:9F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:3c:7d:3c:56:e0:92:87:5f:9c:c4:d4:5c:e5:2f:30:30:c0: 2e:ef:9c:c6:ac:a0:13:2c:8d:b5:52:ed:41:ea:e4:a3:bb:76: 64:96:1a:a3:4e:4b:8b:3d:46:d9:e9:a1:67:d7:1b:60:4f:c7: 92:dd:76:ce:24:36:5d:35:13:d3:48:f3:d9:2a:b1:80:37:44: 2c:26:f4:5f:10:4c:47:c0:b0:49:3f:2e:30:e4:1f:ee:29:cc: 98:f9:02:56:b5:66:2d:2b:98:a4:55:a0:c5:c9:b5:e1:7b:ac: ff:b0:30:db:ad:1c:ce:32:2a:b1:78:ea:8f:bc:13:44:e8:35: 83:4c:09:55:e5:17:14:71:d6:c7:4f:7b:ea:24:ee:24:f1:19: b6:69:c7:cf:b7:a1:5d:b9:be:c6:c4:5d:0d:6d:47:a5:2d:b1: cb:05:f5:4b:99:34:f6:ba:b8:13:aa:c1:f9:bb:26:c6:93:b1: 46:80:c0:ae:34:bf:42:de:00:88:16:b2:63:28:ab:e2:81:2b: 02:b8:57:75:6b:3a:ed:c9:2e:6b:78:2c:cf:c7:97:11:aa:1b: 5c:fe:04:79:0c:30:f3:18:fe:79:a2:f1:d5:b5:88:96:26:8b: 11:17:20:ca:67:8e:53:58:d0:69:31:a6:0b:58:f2:1e:ec:fb: 8f:a3:2c:ef -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWE9vIuSfb4C6R1MetQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzMwMmI0MjYtOGMwZS00OWY3LWJmYWItNDgwZDUxZDQ3OTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWDELpTmXYjC/T5+J7HF5xNy9CDLgKMQDb56 cDa7sk90zMIwoXDHOiDucyp2z+ghQqzHp+Egit3l0LDkKM53RKFMnuaYftTLcxy0 1f31o8yjf3RECrgBwoKmjEmyyD3JykUVNHbZ+v/8kEnRPIYtkGEOmhWHzObokbz7 5bAjW4/5p7aNpnPKOzCbBm9ZAisG893Be9KqYI7H/nNKhonUFSLsvLGRAyDawWHD RDiF/cvRTL/YBfvHoXwolCqFBL9ilK6GgsJbvW5a2mV2dFIt2wIZvAuf1L3QTLm0 qAhgkjHty4LJPQDnxTIvk1Wd9CkAsHetkfB6+Wo9J36SAYa+MQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFFu+yMkwqiymemEOJwTQiJaSVp80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOWE2YmM1NjUtMGE2OS0z NTc4LTg5YTktNzc0ZmM0MmU5MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADY8fTxW4JKHX5zE1FzlLzAwwC7vnMas oBMsjbVS7UHq5KO7dmSWGqNOS4s9RtnpoWfXG2BPx5Ldds4kNl01E9NI89kqsYA3 RCwm9F8QTEfAsEk/LjDkH+4pzJj5Ala1Zi0rmKRVoMXJteF7rP+wMNutHM4yKrF4 6o+8E0ToNYNMCVXlFxRx1sdPe+ok7iTxGbZpx8+3oV25vsbEXQ1tR6UtscsF9UuZ NPa6uBOqwfm7JsaTsUaAwK40v0LeAIgWsmMoq+KBKwK4V3VrOu3JLmt4LM/HlxGq G1z+BHkMMPMY/nmi8dW1iJYmixEXIMpnjlNY0GkxpgtY8h7s+4+jLO8= -----END CERTIFICATE-----Generated at Tue Oct 20 08:04:14 2026 by rpki-client