$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json) Hash identifier: ldmloAr4QycXJmzS28btK28d6FlKC+SYIPPjuFxNPdg= Subject key identifier: FC:AD:D4:40:FD:DF:EC:B4:88:EB:CE:FC:3B:3D:26:07:68:E3:DD:E6 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E815F95CA2F2700599EC9E480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 46261 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:95:ca:2f:27:00:59:9e:c9:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=9d999be4-c306-4cfb-8156-284ad4f6e588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:10:03:8c:62:0a:bd:d1:25:fa:cc:09:62:25: a1:f1:46:e1:d1:83:e2:a9:a7:bc:0a:4f:5f:9c:f0: a2:33:23:a4:c7:c4:c5:fd:33:72:32:24:7c:f4:01: 6d:40:94:2e:8c:c7:fd:17:c8:fa:43:fd:64:23:56: 44:bb:de:6f:78:81:54:a9:10:89:00:62:a6:05:3c: 7b:b9:b7:cf:14:e0:7d:2b:6e:73:2c:3b:61:f4:4d: da:4a:15:c1:72:a6:9a:f0:17:7d:5d:c3:8b:1e:23: f1:e4:46:9a:0f:b3:ce:fb:39:64:ed:02:f7:b6:85: 19:3e:10:af:39:ee:41:4b:48:f6:ec:6e:26:62:cd: 8e:ab:78:12:c9:f7:f5:73:11:7a:33:a2:d8:43:5a: 92:61:61:e6:4e:5b:49:e8:e5:1c:d7:39:2f:a4:cb: ec:2a:5f:f5:3c:31:ea:88:a5:f2:c5:3a:83:4c:68: 12:db:4e:fe:2d:c6:22:e0:49:61:90:ea:4f:6a:53: 71:f1:53:5a:8f:c2:6c:c3:34:94:96:81:24:4e:73: d9:d0:b7:37:9f:65:c2:9d:7d:70:b9:bf:5c:23:89: c2:a9:cf:4c:c6:4a:f3:39:b4:40:7d:12:04:c6:bd: 66:93:94:d7:89:93:8e:2b:1c:55:79:19:c0:d9:4c: 8a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:D4:40:FD:DF:EC:B4:88:EB:CE:FC:3B:3D:26:07:68:E3:DD:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:d1:72:8a:fd:42:3c:30:46:b6:68:33:d4:71:81:a0:8a:f6: 56:be:6d:5e:6f:86:1b:62:ea:77:e9:62:60:dd:bf:33:a1:99: 2d:eb:65:07:e2:2c:7e:72:de:23:a6:8b:c7:de:3b:65:72:40: 9d:64:33:6b:18:5b:7a:2b:a1:5d:2d:a5:b6:85:5a:b7:ee:78: 68:61:2e:4f:71:7b:23:6d:fe:a9:25:92:fa:e0:5b:01:96:dc: ef:13:e3:1e:7b:d5:58:db:55:b7:f0:44:f6:96:00:24:cd:a4: 74:41:b2:bf:e7:f3:79:54:d1:b1:b3:0f:39:79:e7:1a:c1:9d: 00:9c:5a:3e:76:a7:e5:f0:14:5b:62:32:11:15:bd:9f:dd:60: 79:05:2d:85:84:ca:1f:ab:7e:09:98:51:8e:6a:e0:ef:f8:40: a9:8b:20:0c:b3:58:91:7e:ec:1c:e3:03:0a:4d:0c:9d:e5:62: 30:ef:cc:88:da:2b:ee:90:50:d0:bc:9d:27:c5:30:ed:37:58: 93:e2:06:23:53:b1:27:0d:3f:6f:72:0d:91:ec:8d:e8:d6:1a: bf:d0:02:bc:d7:fb:25:21:b8:ca:37:d8:50:cb:62:0c:3c:7f: 96:be:fd:73:db:25:f1:30:3f:fc:2e:66:4a:2c:b8:7f:05:52: 8d:d8:1b:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6BX5XKLycAWZ7J5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk OWQ5OTliZTQtYzMwNi00Y2ZiLTgxNTYtMjg0YWQ0ZjZlNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBADjGIKvdEl+swJYiWh8Ubh0YPiqae8Ck9f nPCiMyOkx8TF/TNyMiR89AFtQJQujMf9F8j6Q/1kI1ZEu95veIFUqRCJAGKmBTx7 ubfPFOB9K25zLDth9E3aShXBcqaa8Bd9XcOLHiPx5EaaD7PO+zlk7QL3toUZPhCv Oe5BS0j27G4mYs2Oq3gSyff1cxF6M6LYQ1qSYWHmTltJ6OUc1zkvpMvsKl/1PDHq iKXyxTqDTGgS207+LcYi4ElhkOpPalNx8VNaj8JswzSUloEkTnPZ0Lc3n2XCnX1w ub9cI4nCqc9MxkrzObRAfRIExr1mk5TXiZOOKxxVeRnA2UyK8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyt1ED93+y0iOvO/Ds9Jgdo493mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDM0ZjNmZGUtY2M5My0z N2ZmLThjNDEtMGQyMGFkZTZmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfRcor9QjwwRrZoM9RxgaCK9la+bV5vhhti6nfpYmDdvzOhmS3rZQfi LH5y3iOmi8feO2VyQJ1kM2sYW3oroV0tpbaFWrfueGhhLk9xeyNt/qklkvrgWwGW 3O8T4x571VjbVbfwRPaWACTNpHRBsr/n83lU0bGzDzl55xrBnQCcWj52p+XwFFti MhEVvZ/dYHkFLYWEyh+rfgmYUY5q4O/4QKmLIAyzWJF+7BzjAwpNDJ3lYjDvzIja K+6QUNC8nSfFMO03WJPiBiNTsScNP29yDZHsjejWGr/QArzX+yUhuMo32FDLYgw8 f5a+/XPbJfEwP/wuZkosuH8FUo3YG/0= -----END CERTIFICATE-----Generated at Tue Jul 21 14:04:27 2026 by rpki-client