$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa File: 139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa (raw, json) Hash identifier: An1LqRFXTnrcwrcVwuBCiNl+Qpp30ktEXlBKH/fkPW4= Subject key identifier: AA:FC:8A:FF:78:DE:6B:9C:3C:2F:27:02:A7:92:31:FB:D8:49:F2:86 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B44B1BEA39405C7DE3B0F3080 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa Signing time: Sun 21 Sep 2025 13:00:42 +0000 ROA not before: Sun 21 Sep 2025 13:00:42 +0000 ROA not after: Sat 20 Dec 2025 14:00:42 +0000 asID: 42831 IP address blocks: 172.98.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:44:b1:be:a3:94:05:c7:de:3b:0f:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 21 13:00:42 2025 GMT Not After : Dec 20 14:00:42 2025 GMT Subject: CN=8010b0bb-1533-40e1-b61f-3fa54544ffad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:09:55:11:76:1f:38:37:86:44:04:28:c8:6a: 18:1e:8a:63:f9:cf:88:13:d9:67:72:2b:53:a9:33: 7f:dd:28:8d:4e:d7:ce:18:4d:57:4a:8a:ef:15:ea: db:f6:50:a6:c8:63:c5:69:3b:1e:4b:bd:2b:54:b3: 06:2d:8b:e0:ef:27:47:9b:21:62:26:2d:35:52:23: 2d:71:81:25:8b:2a:5d:c5:dc:31:38:d0:ea:fe:38: 41:59:85:92:d8:50:32:1f:53:03:20:17:60:56:77: 4b:a5:03:a9:5b:eb:1e:a3:b2:8f:c4:d9:f1:e1:06: d6:48:0c:be:3d:b6:a2:d9:58:ef:6e:f7:be:58:25: b0:8c:87:48:98:ca:48:3c:c3:bc:2d:74:75:47:da: f5:01:c1:4f:e0:08:a6:3e:e5:f5:c9:2b:5f:cb:6f: ff:f8:59:6a:24:de:59:5d:0c:90:58:bd:e9:07:21: 84:a8:93:bd:fa:ab:1a:21:23:f9:d5:e0:bb:0e:ff: 50:05:d6:6c:8e:9a:30:33:7e:1b:4b:38:4b:f8:91: 92:2e:f6:e0:c4:0b:85:9b:a4:9e:31:93:8f:d2:df: 5a:bd:bb:99:d5:a1:8b:79:54:93:27:d1:a4:63:22: 97:f3:b8:1f:4e:e9:b0:9b:05:30:ee:cf:7b:bf:10: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:FC:8A:FF:78:DE:6B:9C:3C:2F:27:02:A7:92:31:FB:D8:49:F2:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:05:55:7c:fb:57:0e:a0:b6:12:0d:ca:80:30:ac:77:c2: 6f:d0:72:03:a3:bd:1c:df:ae:b6:00:0e:ff:6e:53:88:5c:13: f7:92:66:91:0c:be:a5:b9:ff:22:e5:b1:12:88:d6:80:30:48: ac:0b:d3:41:1b:ce:f3:dc:cf:48:a5:4e:50:92:3b:69:1b:5b: 55:89:6b:49:b2:ab:c7:00:bb:41:3f:1e:a0:73:f2:85:f5:58: 40:98:be:22:d2:94:b8:fb:36:80:ea:c8:54:7a:ee:77:1b:fa: 80:76:0d:15:90:a1:73:63:28:15:d1:45:38:11:5d:48:6a:83: ce:ba:63:a8:5b:88:b9:c5:c6:9f:38:fc:85:d1:4a:94:bc:84: c8:94:2b:e3:93:3f:41:4c:c4:35:cf:2c:e8:8f:f7:8b:22:73: ca:ab:6c:95:90:d3:19:ac:29:19:38:ef:9e:9b:f3:ad:44:e8: 74:03:63:6b:65:64:f2:4c:34:be:e1:bf:ea:b5:76:ad:bf:8f: 65:af:c7:b3:78:e9:e8:4b:dd:64:55:b9:7c:b9:26:53:94:f7: d4:dc:f0:09:48:4a:b2:94:bc:c3:3b:00:c8:74:e1:f2:f5:aa: 82:3e:f0:48:5e:1f:c8:c6:6f:0d:32:6b:f2:cc:20:8a:a5:94: 2e:96:41:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtEsb6jlAXH3jsPMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkyMTEzMDA0MloXDTI1MTIyMDE0MDA0MlowLzEtMCsGA1UEAxMk ODAxMGIwYmItMTUzMy00MGUxLWI2MWYtM2ZhNTQ1NDRmZmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwlVEXYfODeGRAQoyGoYHopj+c+IE9lncitT qTN/3SiNTtfOGE1XSorvFerb9lCmyGPFaTseS70rVLMGLYvg7ydHmyFiJi01UiMt cYEliypdxdwxONDq/jhBWYWS2FAyH1MDIBdgVndLpQOpW+seo7KPxNnx4QbWSAy+ Pbai2Vjvbve+WCWwjIdImMpIPMO8LXR1R9r1AcFP4AimPuX1yStfy2//+FlqJN5Z XQyQWL3pByGEqJO9+qsaISP51eC7Dv9QBdZsjpowM34bSzhL+JGSLvbgxAuFm6Se MZOP0t9avbuZ1aGLeVSTJ9GkYyKX87gfTumwmwUw7s97vxCf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKr8iv943mucPC8nAqeSMfvYSfKGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTM5YTlmZjEtOTdiZS0z Y2Q4LWE1MTktYTdmZmM2YjkyZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSxBVV8+1cOoLYSDcqAMKx3wm/QcgOjvRzfrrYADv9uU4hcE/eSZpEM vqW5/yLlsRKI1oAwSKwL00EbzvPcz0ilTlCSO2kbW1WJa0myq8cAu0E/HqBz8oX1 WECYviLSlLj7NoDqyFR67ncb+oB2DRWQoXNjKBXRRTgRXUhqg866Y6hbiLnFxp84 /IXRSpS8hMiUK+OTP0FMxDXPLOiP94sic8qrbJWQ0xmsKRk4756b861E6HQDY2tl ZPJMNL7hv+q1dq2/j2Wvx7N46ehL3WRVuXy5JlOU99Tc8AlISrKUvMM7AMh04fL1 qoI+8EheH8jGbw0ya/LMIIqllC6WQR8= -----END CERTIFICATE-----Generated at Fri Oct 10 21:30:05 2025 by rpki-client