$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa File: 61f2645f-1281-3f43-b68c-68cc423e77b6.roa (raw, json) Hash identifier: tEWZHAuTGTb2J3B3P7bu2y5YJ5Tt+G+SfvjX/qkMCE0= Subject key identifier: 51:FE:3D:5A:69:47:B5:66:C5:33:F3:30:BA:E5:7E:06:DB:03:A4:90 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584CFC8231CF4B30D6B2A0F3B500 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa Signing time: Thu 26 Feb 2026 02:00:32 +0000 ROA not before: Thu 26 Feb 2026 02:00:32 +0000 ROA not after: Wed 27 May 2026 01:00:32 +0000 asID: 264617 IP address blocks: 172.98.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:fc:82:31:cf:4b:30:d6:b2:a0:f3:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 26 02:00:32 2026 GMT Not After : May 27 01:00:32 2026 GMT Subject: CN=dfb6734e-ebc8-4ced-b8eb-2bf5b38603c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:17:eb:aa:ed:e9:d4:8c:98:73:e5:50:80:36: 2a:9f:79:4a:f7:50:96:61:2b:48:03:5f:00:57:57: 5a:c5:9c:07:2f:b6:aa:e6:a6:b8:b9:d6:11:ea:a4: 13:4a:f0:69:11:a2:2b:55:8f:7d:26:7b:ff:9a:a9: 3c:cf:38:a8:d5:d3:7e:3c:59:da:27:e3:a8:ac:bc: e4:4b:61:92:e9:49:0e:60:c7:aa:dc:03:a0:c3:79: 50:c4:15:2a:4b:23:7f:aa:d5:89:87:e9:51:ff:54: 03:75:ca:9c:a6:85:06:43:5f:fa:dc:b2:6e:6a:aa: 5e:59:5b:f9:eb:fe:af:a9:83:2b:7f:51:d6:63:da: 12:e6:a1:9d:c7:e3:0f:49:25:7e:e9:26:4b:8c:e6: 49:9f:c5:ae:5b:7b:be:cf:e1:9f:bf:9b:d1:4b:f5: 05:fa:0e:ca:1e:f9:6f:75:e6:50:47:46:72:fa:f3: 20:ee:5b:5a:80:30:9d:74:35:ab:8a:20:fd:4b:6f: bd:b6:8c:73:20:e9:5e:86:e9:02:6a:1d:6e:4f:3c: 2a:dc:e3:49:c3:97:ee:85:30:1b:65:bf:1b:fa:19: e6:a9:c9:68:c7:4d:42:5f:49:82:59:97:0e:51:e8: 49:af:de:83:31:bf:35:a6:e4:df:c5:37:11:d7:9e: 90:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FE:3D:5A:69:47:B5:66:C5:33:F3:30:BA:E5:7E:06:DB:03:A4:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:ac:e4:ad:b6:9d:98:66:f1:0e:4d:5b:c3:cd:20:aa:7e:bf: 75:dd:00:8c:ca:51:c5:6c:80:a5:a0:07:07:dd:cc:b9:08:20: 25:ab:8d:df:bd:e5:d3:74:9b:06:b5:e0:f8:e0:0b:92:ab:8d: 8d:16:33:76:76:54:c5:58:aa:a8:e9:ae:39:37:b5:f4:57:48: 39:39:d4:99:41:a2:ab:66:c7:34:9c:c3:33:80:7b:38:44:8b: dc:0d:00:5b:41:89:39:44:4b:00:87:78:e5:b2:b0:41:ef:d9: 8a:44:0e:56:12:be:0a:f0:3e:a8:d7:b3:44:f2:26:0b:32:ef: cb:e4:a0:f1:51:57:03:37:f5:5b:45:29:dc:14:d6:b0:d6:60: 67:36:4a:2c:92:d9:03:ba:73:a3:36:56:da:9b:f8:5d:dd:a4: 50:f4:ae:87:53:c5:c8:e4:a5:c6:e7:68:2e:c6:64:90:76:54: 98:a4:eb:ee:77:d0:77:d7:8b:b7:97:17:3a:84:ba:9a:d5:5e: 70:f2:cc:db:42:da:b1:31:30:58:f0:f0:fe:b9:3c:99:f9:6b: c8:17:d9:69:e9:0a:68:91:53:ff:50:db:18:2a:e7:fd:b9:89: fb:8e:ea:3d:5a:11:5e:57:9d:e6:30:2a:59:4f:71:75:06:d8: b8:27:ac:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz8gjHPSzDWsqDztQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDIyNjAyMDAzMloXDTI2MDUyNzAxMDAzMlowLzEtMCsGA1UEAxMk ZGZiNjczNGUtZWJjOC00Y2VkLWI4ZWItMmJmNWIzODYwM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRfrqu3p1IyYc+VQgDYqn3lK91CWYStIA18A V1daxZwHL7aq5qa4udYR6qQTSvBpEaIrVY99Jnv/mqk8zzio1dN+PFnaJ+OorLzk S2GS6UkOYMeq3AOgw3lQxBUqSyN/qtWJh+lR/1QDdcqcpoUGQ1/63LJuaqpeWVv5 6/6vqYMrf1HWY9oS5qGdx+MPSSV+6SZLjOZJn8WuW3u+z+Gfv5vRS/UF+g7KHvlv deZQR0Zy+vMg7ltagDCddDWriiD9S2+9toxzIOlehukCah1uTzwq3ONJw5fuhTAb Zb8b+hnmqclox01CX0mCWZcOUehJr96DMb81puTfxTcR156QnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFH+PVppR7VmxTPzMLrlfgbbA6SQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjFmMjY0NWYtMTI4MS0z ZjQzLWI2OGMtNjhjYzQyM2U3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHis5K22nZhm8Q5NW8PNIKp+v3XdAIzKUcVsgKWgBwfdzLkIICWrjd+9 5dN0mwa14PjgC5KrjY0WM3Z2VMVYqqjprjk3tfRXSDk51JlBoqtmxzScwzOAezhE i9wNAFtBiTlESwCHeOWysEHv2YpEDlYSvgrwPqjXs0TyJgsy78vkoPFRVwM39VtF KdwU1rDWYGc2SiyS2QO6c6M2Vtqb+F3dpFD0rodTxcjkpcbnaC7GZJB2VJik6+53 0HfXi7eXFzqEuprVXnDyzNtC2rExMFjw8P65PJn5a8gX2WnpCmiRU/9Q2xgq5/25 ifuO6j1aEV5XneYwKllPcXUG2LgnrBs= -----END CERTIFICATE-----Generated at Mon Mar 2 10:00:37 2026 by rpki-client