$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa File: 416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json) Hash identifier: /UhSCyF3YCcJpAzNI6+KW8mHUW0Dv4iPNkWkwKR6FFQ= Subject key identifier: 4B:EE:D0:42:1F:28:19:FA:83:14:89:38:AA:BA:66:2C:C0:C2:D6:AE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B0A11625C81F505C2E6C01C80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa Signing time: Sun 31 Aug 2025 13:00:42 +0000 ROA not before: Sun 31 Aug 2025 13:00:42 +0000 ROA not after: Sat 29 Nov 2025 14:00:42 +0000 asID: 1239 IP address blocks: 172.98.161.0/24 maxlen: 24 172.98.167.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0a:11:62:5c:81:f5:05:c2:e6:c0:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 31 13:00:42 2025 GMT Not After : Nov 29 14:00:42 2025 GMT Subject: CN=abf681cd-4e3d-4b7d-8d12-e2c1a662eb22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e0:fb:16:63:a5:16:24:50:a2:c2:e0:f5:9c: 09:50:be:71:48:a0:38:c2:c7:0c:2f:3f:15:44:c2: 0b:2b:0b:7f:00:e2:fe:18:49:fd:67:81:5a:d1:c4: e9:a2:d6:31:d5:01:bd:6a:cf:b5:d4:65:ae:8b:20: fd:ee:4b:9f:f6:c3:c1:e7:ad:09:e6:6e:4c:30:3b: 9d:64:d5:54:74:98:ed:9d:e4:18:c7:c2:65:9f:b6: 25:0e:44:fe:c1:46:ea:f9:5c:ab:1e:b9:72:76:24: 12:f0:00:63:7d:8d:69:24:fb:b7:be:ca:40:47:b4: d0:a9:7a:4e:ac:a1:d1:00:4b:8e:14:bf:38:a0:72: e9:df:b9:15:a7:07:09:b0:3c:dd:94:81:b0:fc:ee: 74:bd:9c:05:5f:ed:ae:97:f8:53:66:c8:1b:f8:05: 2e:2f:21:3b:31:43:2b:c5:33:94:5c:f9:3e:a8:60: 06:44:49:25:60:0e:0b:c8:66:76:34:63:fa:80:5a: a7:a1:3f:8e:07:4e:6a:96:0e:cc:65:e0:fe:36:ab: d9:2a:8c:77:93:25:21:9c:16:20:93:c7:59:42:45: 8c:10:0d:98:8b:a8:0f:c4:58:2b:4f:72:b6:c3:2a: 5c:e2:7c:cd:7b:b5:80:18:36:bb:d7:d0:a2:f7:fc: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:EE:D0:42:1F:28:19:FA:83:14:89:38:AA:BA:66:2C:C0:C2:D6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 172.98.167.0/24 172.98.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:39:ad:76:a5:fd:63:ae:5e:5c:7d:d9:70:aa:98:7e:b5:a9: 7c:af:8d:b8:53:c6:06:02:30:d0:0e:0f:b0:d5:36:e2:a1:27: 2e:0f:97:45:f4:28:ef:1d:aa:ba:0a:97:1d:d5:50:02:64:d9: dc:94:dc:ea:12:42:2b:81:8b:b1:6e:7d:c4:7e:29:08:2b:fb: 5e:98:d5:2e:8d:23:f9:e1:0b:d4:72:a5:a0:3d:1c:8d:c7:f5: 43:43:6b:06:bb:71:12:14:3b:89:62:df:4d:86:5c:46:3e:b6: 7c:ff:2e:83:c6:4e:9f:aa:db:9d:61:e6:79:85:c9:e1:52:70: b8:0f:d5:e6:d9:05:d1:42:98:a6:c4:79:92:e2:16:88:f4:ca: 3f:2f:54:00:5b:b8:01:91:db:b2:83:ba:8a:3d:18:7e:c1:52: f1:52:2d:3e:10:a0:eb:82:4e:e7:91:03:22:66:5d:04:f7:01: 75:99:1a:72:c1:5d:ea:cf:e5:6c:9c:d2:e7:1e:55:5e:8b:68: 96:ac:17:08:b4:5c:c5:2e:89:45:28:ab:59:5f:11:1b:8d:8d: c7:98:52:6f:0b:ff:67:17:c6:c9:1d:33:34:3f:ef:ef:87:3d: 3c:0d:bd:fb:6e:73:a5:7f:f5:c9:6d:ec:3e:75:f7:95:ee:31: 41:91:b9:d8 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEsKEWJcgfUFwubAHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgzMTEzMDA0MloXDTI1MTEyOTE0MDA0MlowLzEtMCsGA1UEAxMk YWJmNjgxY2QtNGUzZC00YjdkLThkMTItZTJjMWE2NjJlYjIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuD7FmOlFiRQosLg9ZwJUL5xSKA4wscMLz8V RMILKwt/AOL+GEn9Z4Fa0cTpotYx1QG9as+11GWuiyD97kuf9sPB560J5m5MMDud ZNVUdJjtneQYx8Jln7YlDkT+wUbq+VyrHrlydiQS8ABjfY1pJPu3vspAR7TQqXpO rKHRAEuOFL84oHLp37kVpwcJsDzdlIGw/O50vZwFX+2ul/hTZsgb+AUuLyE7MUMr xTOUXPk+qGAGREklYA4LyGZ2NGP6gFqnoT+OB05qlg7MZeD+NqvZKox3kyUhnBYg k8dZQkWMEA2Yi6gPxFgrT3K2wypc4nzNe7WAGDa719Ci9/wKrQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFEvu0EIfKBn6gxSJOKq6ZizAwtauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDE2Zjg2NDEtYTBlZC0z YmMxLWI1ZGQtM2Y5NTczMWEyYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGKhAwQA rGKnAwQArGK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAA05rXal/WOuXlx92XCqmH61qXyvjbhTxgYCMNAO D7DVNuKhJy4Pl0X0KO8dqroKlx3VUAJk2dyU3OoSQiuBi7FufcR+KQgr+16Y1S6N I/nhC9RypaA9HI3H9UNDawa7cRIUO4li302GXEY+tnz/LoPGTp+q251h5nmFyeFS cLgP1ebZBdFCmKbEeZLiFoj0yj8vVABbuAGR27KDuoo9GH7BUvFSLT4QoOuCTueR AyJmXQT3AXWZGnLBXerP5Wyc0uceVV6LaJasFwi0XMUuiUUoq1lfERuNjceYUm8L /2cXxskdMzQ/7++HPTwNvftuc6V/9clt7D5195XuMUGRudg= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:51 2025 by rpki-client