$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa File: 139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa (raw, json) Hash identifier: bJrFgwnPQbWnWdCLUNvmTccjlRySegm+nejEwBS133c= Subject key identifier: 02:FF:A2:6F:75:29:13:83:01:71:49:24:5B:FA:65:BF:35:74:12:60 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584D04E2417E340D057B64B28490 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 42831 IP address blocks: 172.98.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:41:7e:34:0d:05:7b:64:b2:84:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=f61be970-16e5-4fca-847a-102e5607de32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b8:a7:8c:36:5b:b2:16:a9:f0:4e:d2:91:94: 77:22:04:61:ae:5a:27:f4:73:43:8a:43:d4:38:fe: 5c:06:78:e2:57:b0:26:b9:61:95:40:b0:f3:58:da: 37:33:3a:04:26:4f:06:7a:39:fb:94:61:18:ef:a4: 1a:32:00:84:45:e8:6d:0f:50:29:93:41:01:58:3d: 60:f0:e1:53:25:e4:87:2e:40:dd:0e:8c:90:b5:86: cb:80:f0:d8:d6:75:ea:4b:75:23:ba:ae:5d:95:01: b6:a1:43:4a:58:1a:de:de:13:c4:c1:1c:54:7c:d2: 0a:b4:0d:0e:da:4d:a8:74:56:a0:74:c7:a1:75:ca: 59:6b:9d:7b:cc:1d:08:58:7d:bf:84:90:40:64:63: 31:5a:06:da:a2:26:e9:e3:a3:64:49:1f:a4:01:ec: b5:bb:45:ef:7e:ca:dd:0f:4e:b5:2b:a8:68:e2:e4: a0:91:ae:c8:d8:b7:12:e3:de:68:b8:ce:6f:5d:8f: 7b:c9:34:40:7f:07:ed:af:a9:96:8d:0f:38:95:3b: 88:81:8b:df:5f:2f:31:3d:f0:d8:0d:39:3d:36:cb: ef:ea:ae:b7:9d:00:ba:93:66:d7:9b:8d:ce:89:00: dc:71:ec:ca:a5:65:84:d3:9b:77:d6:24:d9:00:20: 5c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:FF:A2:6F:75:29:13:83:01:71:49:24:5B:FA:65:BF:35:74:12:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:9d:b6:fd:72:07:34:9f:d0:a3:0f:d2:b2:6f:88:4d:3a:75: 31:14:56:c9:ed:e5:19:b7:e4:14:3c:9c:d8:42:77:2a:e6:29: 45:5b:06:50:c6:c2:61:be:50:53:37:9a:f4:b7:6e:13:26:ba: ee:a0:29:e5:e3:9b:0e:ca:bb:d9:dd:7f:3f:49:b9:f7:ad:b7: 1b:aa:bf:3c:0f:a5:70:fb:ef:62:5d:f8:c3:5c:ba:18:e5:9c: 90:95:3f:86:74:0a:02:8a:13:c4:8e:82:50:90:0a:07:5c:b3: 4f:e1:d5:0f:02:1e:68:b8:e0:9e:ba:c9:f6:e8:c1:15:5f:09: 17:76:f2:f7:ec:84:5c:19:37:32:04:5f:81:9a:d1:0f:56:e3: 60:31:15:ae:ff:ab:b0:44:d4:81:c5:f0:ff:7c:29:97:02:dd: 85:d1:53:55:94:a3:6c:af:a3:51:e0:52:a7:a5:d8:1e:9a:a9: 31:31:4f:ef:93:09:54:b4:8f:9d:b2:e8:dd:05:c9:80:13:e4: 49:8e:0b:bf:60:54:57:02:0b:d6:9e:ad:ff:1a:ec:a2:aa:a4: d1:83:ae:b6:65:5e:8d:48:1a:87:a1:b1:db:52:ee:4f:f0:09: 2b:3d:19:52:41:44:9b:17:d9:a7:b2:cb:e9:b0:b2:c8:45:7a: bd:3a:db:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4kF+NA0Fe2SyhJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk ZjYxYmU5NzAtMTZlNS00ZmNhLTg0N2EtMTAyZTU2MDdkZTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7injDZbshap8E7SkZR3IgRhrlon9HNDikPU OP5cBnjiV7AmuWGVQLDzWNo3MzoEJk8Gejn7lGEY76QaMgCERehtD1Apk0EBWD1g 8OFTJeSHLkDdDoyQtYbLgPDY1nXqS3Ujuq5dlQG2oUNKWBre3hPEwRxUfNIKtA0O 2k2odFagdMehdcpZa517zB0IWH2/hJBAZGMxWgbaoibp46NkSR+kAey1u0Xvfsrd D061K6ho4uSgka7I2LcS495ouM5vXY97yTRAfwftr6mWjQ84lTuIgYvfXy8xPfDY DTk9Nsvv6q63nQC6k2bXm43OiQDccezKpWWE05t31iTZACBckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL/om91KRODAXFJJFv6Zb81dBJgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTM5YTlmZjEtOTdiZS0z Y2Q4LWE1MTktYTdmZmM2YjkyZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCdtv1yBzSf0KMP0rJviE06dTEUVsnt5Rm35BQ8nNhCdyrmKUVbBlDG wmG+UFM3mvS3bhMmuu6gKeXjmw7Ku9ndfz9JufettxuqvzwPpXD772Jd+MNcuhjl nJCVP4Z0CgKKE8SOglCQCgdcs0/h1Q8CHmi44J66yfbowRVfCRd28vfshFwZNzIE X4Ga0Q9W42AxFa7/q7BE1IHF8P98KZcC3YXRU1WUo2yvo1HgUqel2B6aqTExT++T CVS0j52y6N0FyYAT5EmOC79gVFcCC9aerf8a7KKqpNGDrrZlXo1IGoehsdtS7k/w CSs9GVJBRJsX2aeyy+mwsshFer06244= -----END CERTIFICATE-----Generated at Sun Mar 1 22:54:15 2026 by rpki-client