$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: WRDzn2XGjKE9CwnTDNdiasaxuAcxTQhCsP72IMr4lVQ= Subject key identifier: AC:6A:53:18:64:4C:6E:6F:05:C6:41:49:2D:64:1E:97:F4:4A:D6:5F Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584E1FA9A73A84A43277C96EB880 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Wed 10 Jun 2026 09:00:13 +0000 ROA not before: Wed 10 Jun 2026 09:00:13 +0000 ROA not after: Tue 08 Sep 2026 09:00:13 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:1f:a9:a7:3a:84:a4:32:77:c9:6e:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 10 09:00:13 2026 GMT Not After : Sep 8 09:00:13 2026 GMT Subject: CN=d64c0f3d-9f92-48ff-bd7b-cf96a6a90d05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bf:e1:e4:67:0e:f3:15:1b:a9:04:f8:63:4c: 7b:b9:8b:01:47:0f:b8:b1:29:1e:a3:8e:62:4c:c3: 58:9a:62:21:a6:32:7f:ff:4f:9e:c1:6e:60:6c:94: 49:de:6e:bc:16:c0:44:b5:e9:cd:08:33:fb:3f:2c: 95:2f:27:0d:1e:78:24:f2:fe:44:0b:cf:fe:b2:ef: 10:6f:f8:80:a9:a3:2d:6c:0b:bb:d8:41:96:f3:24: 21:66:0c:f2:da:46:20:e3:47:93:c4:f7:64:a2:47: 24:c9:66:ff:87:07:52:29:1e:9e:1e:fc:74:26:bf: f3:73:3b:d5:f5:f1:fd:6d:18:46:1c:de:31:bc:06: 54:53:78:68:4e:18:2c:f2:4e:fe:cb:62:88:e1:30: 20:27:db:33:45:01:17:11:1c:af:08:d7:65:3b:a7: ec:83:98:f0:a4:5f:02:4a:3a:31:36:17:07:0b:ba: 22:2b:0d:e9:0c:e6:60:53:d3:5e:eb:9d:e8:26:5d: 2c:3f:ae:8a:30:2a:df:b3:41:3b:dd:27:08:8d:cb: b9:4d:7f:d4:a5:42:17:75:07:df:c7:a4:57:58:23: 0d:f1:fc:32:89:f1:6a:df:e9:9a:f7:b6:e4:67:c2: f5:8f:43:73:50:e1:6f:47:db:13:fe:ed:28:4a:0b: 73:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:6A:53:18:64:4C:6E:6F:05:C6:41:49:2D:64:1E:97:F4:4A:D6:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:b1:3a:bd:8a:04:c0:b5:55:39:52:c0:ad:63:20:6e:32:69: 24:d0:65:59:89:ff:93:5a:27:5b:4e:df:84:d0:da:73:18:99: 68:b7:a9:ab:16:e3:25:1e:21:cc:25:fa:9d:93:e2:77:47:18: 41:0d:0e:67:24:67:48:eb:31:1d:1f:2c:3e:ab:8c:6a:4f:1d: 57:66:f3:ac:3c:31:59:f7:e7:b4:0f:8c:c0:e3:1a:96:f4:8e: b0:f2:8e:b9:21:03:c7:31:36:09:d2:45:ab:da:f3:8d:09:f8: 5b:64:75:39:2e:c5:21:40:e5:31:1a:7f:84:68:26:2a:05:6f: 98:e8:6d:da:7e:e9:37:4e:51:19:cf:14:13:06:c2:af:9c:4a: 80:89:4b:16:e7:89:ad:76:7a:bd:76:8b:6e:ad:5e:b0:d4:db: 55:da:ab:4c:e5:90:47:75:1d:22:92:71:20:20:b8:06:10:60: 96:3e:2b:a7:54:db:f7:64:7e:0e:14:b3:3d:fa:a7:20:50:33: e4:aa:b0:fb:9d:4b:dd:56:06:78:78:56:e7:f6:42:cf:b3:08: b8:f2:de:25:2f:08:48:9a:02:79:00:5e:bd:65:a5:8d:14:a8: 25:9c:f1:c8:21:0a:66:85:c3:76:cd:0b:7b:56:9b:40:96:7e: a5:b5:38:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4fqac6hKQyd8luuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI2MDYxMDA5MDAxM1oXDTI2MDkwODA5MDAxM1owLzEtMCsGA1UEAxMk ZDY0YzBmM2QtOWY5Mi00OGZmLWJkN2ItY2Y5NmE2YTkwZDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr/h5GcO8xUbqQT4Y0x7uYsBRw+4sSkeo45i TMNYmmIhpjJ//0+ewW5gbJRJ3m68FsBEtenNCDP7PyyVLycNHngk8v5EC8/+su8Q b/iAqaMtbAu72EGW8yQhZgzy2kYg40eTxPdkokckyWb/hwdSKR6eHvx0Jr/zczvV 9fH9bRhGHN4xvAZUU3hoThgs8k7+y2KI4TAgJ9szRQEXERyvCNdlO6fsg5jwpF8C SjoxNhcHC7oiKw3pDOZgU9Ne653oJl0sP66KMCrfs0E73ScIjcu5TX/UpUIXdQff x6RXWCMN8fwyifFq3+ma97bkZ8L1j0NzUOFvR9sT/u0oSgtz6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxqUxhkTG5vBcZBSS1kHpf0StZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWxOr2KBMC1VTlSwK1jIG4yaSTQZVmJ/5NaJ1tO34TQ2nMYmWi3qasW 4yUeIcwl+p2T4ndHGEENDmckZ0jrMR0fLD6rjGpPHVdm86w8MVn357QPjMDjGpb0 jrDyjrkhA8cxNgnSRava840J+FtkdTkuxSFA5TEaf4RoJioFb5jobdp+6TdOURnP FBMGwq+cSoCJSxbnia12er12i26tXrDU21Xaq0zlkEd1HSKScSAguAYQYJY+K6dU 2/dkfg4Usz36pyBQM+SqsPudS91WBnh4Vuf2Qs+zCLjy3iUvCEiaAnkAXr1lpY0U qCWc8cghCmaFw3bNC3tWm0CWfqW1OGo= -----END CERTIFICATE-----Generated at Sat Jun 13 10:13:59 2026 by rpki-client