$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa File: 8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa (raw, json) Hash identifier: hCcr9fEjIm4fDzTRbNME+Uh9osXH6OO9HvaoGrNGUQg= Subject key identifier: 9F:1A:EE:C9:E9:87:39:8D:99:37:DC:D2:EE:76:30:A1:12:83:91:5B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A81464434D213BFD8B3186BC0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 46261 IP address blocks: 172.98.168.0/24 maxlen: 24 172.98.171.0/24 maxlen: 24 172.98.176.0/24 maxlen: 24 172.98.180.0/24 maxlen: 24 172.98.181.0/24 maxlen: 24 172.98.184.0/24 maxlen: 24 172.98.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:44:34:d2:13:bf:d8:b3:18:6b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=feb6470b-aa8e-4c16-bd5b-e416d816c909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:01:45:db:95:eb:02:be:47:cf:c9:c2:07:0c: 48:10:76:da:4f:d0:c7:c1:45:28:40:25:f1:98:05: 2e:f9:61:e4:b6:69:d2:cd:0c:51:5b:6b:6b:cb:e4: 60:65:26:88:a8:dd:44:4c:5f:c6:c5:cf:32:d1:84: 57:86:a4:85:d8:e1:f5:5d:48:69:36:67:ce:6c:a2: 8f:69:37:57:f1:2a:a0:9c:29:ed:78:dc:e8:54:94: 34:41:77:9f:27:da:5e:b7:80:05:ae:eb:bc:99:ac: c1:ef:b8:59:4c:80:f4:d2:ff:70:91:bd:94:fd:e5: 08:23:50:44:64:bb:07:e9:c5:ca:9f:e2:8f:3e:6c: cb:24:03:e1:46:60:38:c7:34:c9:59:62:c7:67:57: 33:e8:6b:ba:7a:57:df:c3:1d:1f:3c:da:8f:f9:f6: 2f:2c:2d:fd:68:d3:10:88:20:f8:1a:b6:e7:dd:f3: 28:f5:e9:7d:24:78:5d:c0:ca:2e:b8:dc:99:0d:c3: 5e:40:df:29:a4:5d:0e:8a:85:2b:05:f8:3d:14:f4: 55:66:79:dd:94:36:a0:de:de:29:46:0f:52:c1:9e: 1b:7d:47:99:07:bd:b9:2a:39:44:da:d0:13:7b:57: cc:a3:ab:b2:01:91:19:c1:23:f9:12:3d:9c:a6:6d: 4f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:1A:EE:C9:E9:87:39:8D:99:37:DC:D2:EE:76:30:A1:12:83:91:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.168.0/24 172.98.171.0/24 172.98.176.0/24 172.98.180.0/23 172.98.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:13:46:e7:35:b5:56:b1:d5:5c:df:7a:53:a2:30:17:a1:89: ed:46:f9:c7:13:6e:b3:ca:14:88:87:e8:7d:34:d6:6b:d1:2e: 6d:26:e9:1a:f6:04:7a:ce:87:b8:01:53:8d:8e:09:9c:8c:7c: c2:06:19:c4:09:d6:7a:dc:31:4d:88:c7:47:4e:14:55:f7:a5: bd:51:d0:c2:09:7c:e4:c0:2e:16:0e:96:27:bd:2c:d7:02:5e: bf:8b:2d:d6:b5:5d:6f:19:6c:ec:a8:82:de:f2:94:84:d4:0d: 38:33:66:81:50:20:99:e6:fb:cf:85:48:08:5b:c1:1d:03:16: 2a:88:d2:fc:e0:71:85:57:36:8f:31:7a:77:36:12:50:bf:84: b2:7b:e9:02:a2:8c:07:46:5b:99:cf:1a:06:ff:b8:1b:94:dd: 41:38:bd:10:e3:fa:1e:19:d2:5c:43:4c:d9:18:42:b3:d2:b8: 27:2f:f1:51:ce:90:f9:af:28:1a:29:0a:a9:4c:bc:94:4b:9c: bf:52:11:36:e9:8d:fd:01:75:d5:ac:cc:70:ed:47:8e:ee:e8: 47:72:33:7e:5d:5f:6a:6b:43:c8:c6:5b:13:1a:6d:60:7a:fb: b2:83:eb:32:9d:7d:1a:f5:82:3d:db:34:3e:9c:b3:22:1e:3a: c6:10:00:48 -----BEGIN CERTIFICATE----- MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEqBRkQ00hO/2LMYa8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZmViNjQ3MGItYWE4ZS00YzE2LWJkNWItZTQxNmQ4MTZjOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuAFF25XrAr5Hz8nCBwxIEHbaT9DHwUUoQCXx mAUu+WHktmnSzQxRW2try+RgZSaIqN1ETF/Gxc8y0YRXhqSF2OH1XUhpNmfObKKP aTdX8SqgnCnteNzoVJQ0QXefJ9pet4AFruu8mazB77hZTID00v9wkb2U/eUII1BE ZLsH6cXKn+KPPmzLJAPhRmA4xzTJWWLHZ1cz6Gu6elffwx0fPNqP+fYvLC39aNMQ iCD4Grbn3fMo9el9JHhdwMouuNyZDcNeQN8ppF0OioUrBfg9FPRVZnndlDag3t4p Rg9SwZ4bfUeZB725KjlE2tATe1fMo6uyAZEZwSP5Ej2cpm1PHQIDAQABo4IDbTCC A2kwHQYDVR0OBBYEFJ8a7snphzmNmTfc0u52MKESg5FbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOGRjNjkyMTYtMzRhNy0z OGViLWExYjItMmQzZGUzNjg1OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArGKoAwQA rGKrAwQArGKwAwQBrGK0AwQBrGK4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA8TRuc1tVax1VzfelOiMBeh ie1G+ccTbrPKFIiH6H001mvRLm0m6Rr2BHrOh7gBU42OCZyMfMIGGcQJ1nrcMU2I x0dOFFX3pb1R0MIJfOTALhYOlie9LNcCXr+LLda1XW8ZbOyogt7ylITUDTgzZoFQ IJnm+8+FSAhbwR0DFiqI0vzgcYVXNo8xenc2ElC/hLJ76QKijAdGW5nPGgb/uBuU 3UE4vRDj+h4Z0lxDTNkYQrPSuCcv8VHOkPmvKBopCqlMvJRLnL9SETbpjf0BddWs zHDtR47u6EdyM35dX2prQ8jGWxMabWB6+7KD6zKdfRr1gj3bND6csyIeOsYQAEg= -----END CERTIFICATE-----Generated at Wed Jul 23 12:25:22 2025 by rpki-client