$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: HKsNBZGYnylu/3fsXkySH75sMOtpPy2AQI11xXFvb8c= Subject key identifier: 56:EF:85:B6:A5:1E:3D:02:3F:30:8D:E8:56:DF:7B:08:7E:A8:2D:78 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B434C57396D9B0B24AC1FDE80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:57:39:6d:9b:0b:24:ac:1f:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=f3401638-aa09-4cd0-8d0f-a73e5662efbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:c8:8b:4d:92:95:96:57:d2:d4:0f:86:13:35: 1e:5c:b3:3b:f8:2a:b5:54:cb:3a:7f:dd:6e:c2:74: 6c:b4:2a:20:04:d1:6f:52:ea:fd:f7:6e:88:18:cd: 4c:16:7c:cf:87:35:84:25:a1:f1:a6:f1:da:fe:74: 57:a9:2a:4a:df:3f:a5:94:e4:df:6a:5e:37:9a:76: 25:33:19:f5:f1:91:c9:cf:f0:d9:d3:10:c1:a5:86: 98:db:71:78:26:08:51:32:5c:12:5f:14:42:8c:6f: f7:ff:8d:0d:4a:dd:10:79:f4:12:b1:29:4a:9a:59: 22:fe:aa:ef:1b:9d:7a:25:a8:76:f1:d9:d8:9e:ab: 75:43:8c:48:3a:0e:5f:03:f8:67:69:71:6a:4e:b2: 24:36:51:cb:30:01:60:82:09:7c:36:8d:c5:3e:e6: 66:5e:7b:ee:df:97:2f:8d:f6:3e:17:cb:b2:90:a8: c8:3a:94:73:7a:43:ab:83:73:59:90:5a:bb:a8:41: f5:fa:7a:c9:c3:64:70:ce:a8:e3:c8:44:a7:87:af: 4c:54:13:4c:8a:60:0a:85:48:bb:9f:ff:57:4c:56: cf:ee:58:21:b1:81:1d:a6:ce:da:88:51:65:4c:0f: 4c:cd:d4:1d:1d:4f:69:36:fd:73:f5:fa:56:12:6e: 9c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:EF:85:B6:A5:1E:3D:02:3F:30:8D:E8:56:DF:7B:08:7E:A8:2D:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:14:7d:29:fb:37:be:b4:3f:db:b6:f9:7a:d6:97:76:cd:b8: db:19:b1:af:53:cb:f0:cd:7a:e6:49:ac:3e:b6:91:22:da:32: 5e:cb:22:6d:56:5d:98:f8:f8:f2:43:5b:d5:62:c0:bf:c8:78: b6:b4:16:76:28:b0:f1:e8:d1:fb:e9:d0:cb:29:f1:b2:c7:18: f5:05:5f:b0:b9:0e:49:fb:b3:16:eb:58:f0:cd:d1:4c:40:4e: 9b:c1:7e:3c:fb:32:46:de:b7:33:36:67:3a:7a:58:c9:7b:99: 98:aa:7b:73:ae:72:5e:40:f0:cf:44:d0:ca:61:80:8d:3d:86: c2:dd:56:7f:98:e2:43:d7:92:76:79:c1:88:5c:7b:a7:01:07: 12:61:cd:f8:80:35:70:0e:57:6c:bc:3c:54:89:24:c1:a2:04: cb:f1:6c:11:42:ca:66:8a:5e:c6:d4:82:70:9f:7f:b2:55:0e: 3d:ca:b7:6c:80:18:9c:f5:df:78:15:55:0e:cf:71:42:ef:24: 97:c5:5d:5c:1a:14:46:49:bb:07:86:75:da:24:7b:1d:d4:9f: d3:90:cb:06:33:f8:ad:fc:b3:70:ea:b7:ff:30:eb:d9:36:70: 5f:0e:19:40:ff:a6:aa:c0:73:77:e0:85:f3:2b:ef:1b:86:44: 88:42:d2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFc5bZsLJKwf3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZjM0MDE2MzgtYWEwOS00Y2QwLThkMGYtYTczZTU2NjJlZmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8iLTZKVllfS1A+GEzUeXLM7+Cq1VMs6f91u wnRstCogBNFvUur9926IGM1MFnzPhzWEJaHxpvHa/nRXqSpK3z+llOTfal43mnYl Mxn18ZHJz/DZ0xDBpYaY23F4JghRMlwSXxRCjG/3/40NSt0QefQSsSlKmlki/qrv G516Jah28dnYnqt1Q4xIOg5fA/hnaXFqTrIkNlHLMAFgggl8No3FPuZmXnvu35cv jfY+F8uykKjIOpRzekOrg3NZkFq7qEH1+nrJw2RwzqjjyESnh69MVBNMimAKhUi7 n/9XTFbP7lghsYEdps7aiFFlTA9MzdQdHU9pNv1z9fpWEm6cpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbvhbalHj0CPzCN6Fbfewh+qC14MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkUfSn7N760P9u2+XrWl3bNuNsZsa9Ty/DNeuZJrD62kSLaMl7LIm1W XZj4+PJDW9ViwL/IeLa0FnYosPHo0fvp0Msp8bLHGPUFX7C5Dkn7sxbrWPDN0UxA TpvBfjz7MkbetzM2Zzp6WMl7mZiqe3Oucl5A8M9E0MphgI09hsLdVn+Y4kPXknZ5 wYhce6cBBxJhzfiANXAOV2y8PFSJJMGiBMvxbBFCymaKXsbUgnCff7JVDj3Kt2yA GJz133gVVQ7PcULvJJfFXVwaFEZJuweGddokex3Un9OQywYz+K38s3Dqt/8w69k2 cF8OGUD/pqrAc3fghfMr7xuGRIhC0oA= -----END CERTIFICATE-----Generated at Fri Oct 10 21:34:00 2025 by rpki-client