$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa File: 61f2645f-1281-3f43-b68c-68cc423e77b6.roa (raw, json) Hash identifier: 7JbVO5eK8rkM6QCSDX0tgrCOAI9YnUyf7sjpOlTalbU= Subject key identifier: 3E:E0:D7:91:26:57:5D:57:98:BB:05:D7:64:D4:B1:E3:9E:97:11:88 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A5B95B07427583ED58659F380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa Signing time: Mon 30 Jun 2025 01:00:50 +0000 ROA not before: Mon 30 Jun 2025 01:00:50 +0000 ROA not after: Sun 28 Sep 2025 01:00:50 +0000 asID: 264617 IP address blocks: 172.98.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5b:95:b0:74:27:58:3e:d5:86:59:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 30 01:00:50 2025 GMT Not After : Sep 28 01:00:50 2025 GMT Subject: CN=872062fb-5d3f-4201-9635-83d86af24e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:95:7d:25:b4:0c:1b:ab:db:64:dc:e0:94:aa: 19:1b:6d:c4:7c:41:0a:f3:36:57:c1:8a:74:9b:d5: 21:0b:d8:05:6c:cd:36:92:e1:cc:57:b4:18:24:3c: a4:7e:5e:5a:56:22:7b:1b:62:cc:97:af:17:ef:8a: e3:32:ad:ed:ae:a4:28:4c:62:f6:73:a3:73:9d:b4: 68:41:4b:0e:87:ca:50:2c:35:c4:94:87:cd:e9:d6: 20:52:28:12:c3:09:ef:76:4a:55:17:07:94:83:88: 55:96:5c:12:7c:89:ba:af:cf:dc:30:0e:d4:f3:96: 4c:76:02:58:26:60:a1:34:f9:73:b2:58:0b:c2:09: aa:11:89:66:a6:8d:0a:0d:63:0d:d0:92:66:04:06: 1b:0d:91:2c:74:8c:48:2a:86:f6:6a:83:27:a4:de: bb:1c:a1:f3:2b:af:23:d1:38:c4:3b:1b:08:75:b9: 4f:c2:2f:fb:18:67:e3:fa:cc:bc:76:df:db:af:71: a4:d5:02:61:8a:8f:09:55:39:fa:9f:77:53:6d:66: 0e:3d:51:91:07:c2:85:a2:33:d8:6a:1f:5f:f0:e0: 3e:27:e7:10:af:51:4a:f0:d1:aa:b8:30:8a:46:0c: c9:db:52:1f:3a:30:3a:6b:78:3c:49:d4:09:0c:84: 83:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E0:D7:91:26:57:5D:57:98:BB:05:D7:64:D4:B1:E3:9E:97:11:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:49:aa:b0:23:6d:4b:f6:10:7d:51:7d:35:04:21:9d:f0:fc: 0e:8c:08:73:c2:3b:9d:fe:1b:3a:de:33:7e:70:fc:42:8a:f4: da:28:ec:42:66:1f:01:76:62:33:fe:11:e9:ba:e7:7d:86:61: 3a:97:90:24:ac:dc:18:b6:d1:23:0e:ed:c4:54:95:8b:ba:a5: f3:a5:6e:3d:b1:ab:05:0a:42:7a:94:30:5a:85:a7:f9:91:d8: fb:1e:62:0b:f6:c5:97:05:06:c1:55:67:18:5a:1c:c6:f9:84: 46:d1:a2:74:b5:ba:14:c4:19:76:b9:fa:47:a4:d7:f3:5c:7e: 63:ac:36:ba:25:80:cc:17:29:e2:29:8f:df:ae:e9:80:98:0a: 93:65:27:de:3a:a9:ab:35:23:ea:04:0a:5e:4f:40:61:05:db: 7f:99:b7:49:14:77:12:89:76:4f:d8:35:17:f3:f5:35:d2:db: e6:12:1c:d3:c2:34:27:09:e7:87:55:44:4a:85:e9:b8:ae:37: f1:0d:d4:0b:8c:03:eb:f0:87:86:6b:21:b6:31:7f:5a:c2:85: 3a:21:d3:3e:27:8c:60:3d:ca:8b:53:ec:39:3c:f6:14:2f:d3: 49:ff:db:b7:a1:33:10:21:8a:de:95:42:97:42:c8:32:f7:8d: ca:f0:91:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpblbB0J1g+1YZZ84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYzMDAxMDA1MFoXDTI1MDkyODAxMDA1MFowLzEtMCsGA1UEAxMk ODcyMDYyZmItNWQzZi00MjAxLTk2MzUtODNkODZhZjI0ZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpV9JbQMG6vbZNzglKoZG23EfEEK8zZXwYp0 m9UhC9gFbM02kuHMV7QYJDykfl5aViJ7G2LMl68X74rjMq3trqQoTGL2c6NznbRo QUsOh8pQLDXElIfN6dYgUigSwwnvdkpVFweUg4hVllwSfIm6r8/cMA7U85ZMdgJY JmChNPlzslgLwgmqEYlmpo0KDWMN0JJmBAYbDZEsdIxIKob2aoMnpN67HKHzK68j 0TjEOxsIdblPwi/7GGfj+sy8dt/br3Gk1QJhio8JVTn6n3dTbWYOPVGRB8KFojPY ah9f8OA+J+cQr1FK8NGquDCKRgzJ21IfOjA6a3g8SdQJDISDRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7g15EmV11XmLsF12TUseOelxGIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjFmMjY0NWYtMTI4MS0z ZjQzLWI2OGMtNjhjYzQyM2U3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhJqrAjbUv2EH1RfTUEIZ3w/A6MCHPCO53+GzreM35w/EKK9Noo7EJm HwF2YjP+Eem6532GYTqXkCSs3Bi20SMO7cRUlYu6pfOlbj2xqwUKQnqUMFqFp/mR 2PseYgv2xZcFBsFVZxhaHMb5hEbRonS1uhTEGXa5+kek1/NcfmOsNrolgMwXKeIp j9+u6YCYCpNlJ946qas1I+oECl5PQGEF23+Zt0kUdxKJdk/YNRfz9TXS2+YSHNPC NCcJ54dVREqF6biuN/EN1AuMA+vwh4ZrIbYxf1rChToh0z4njGA9yotT7Dk89hQv 00n/27ehMxAhit6VQpdCyDL3jcrwkTE= -----END CERTIFICATE-----Generated at Tue Jul 22 19:33:38 2025 by rpki-client