$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa File: d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json) Hash identifier: GH/Td91LZHWysc5Ju4L+nqBuJLK/0dXRAkcBEV43CLQ= Subject key identifier: 4C:18:28:ED:BC:2D:BF:24:64:1E:52:B4:21:87:64:67:52:5F:3F:B0 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B1806CE7D10E6D9362EB99F00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.98.162.0/24 maxlen: 24 172.98.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ce:7d:10:e6:d9:36:2e:b9:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=03e59dc4-0371-4092-b99b-2666439e98ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4f:fd:7c:27:9b:42:f5:6f:d1:39:64:f5:54: d2:73:b4:22:b3:d5:53:0c:89:6a:97:c3:03:70:ee: 8c:b2:c6:85:8c:d7:3a:99:6c:be:3e:7c:37:1a:45: 5e:a2:2f:7c:0f:7b:f8:fb:6b:03:ed:a8:4a:ed:79: 4e:c3:a1:c7:92:14:cf:ea:f6:84:14:fa:85:9e:ba: 01:10:54:13:9c:00:c7:69:8c:16:cf:83:94:ba:28: 83:fe:3c:a4:00:b4:28:19:08:72:eb:68:c6:8a:f4: d4:4a:1c:d0:17:af:14:91:1a:c9:ce:ca:f4:91:f3: de:76:75:43:7e:12:3a:24:e8:d5:85:73:11:fc:1e: 9c:a2:a2:7b:b7:5e:c0:5f:f7:53:82:fd:b1:52:61: 77:b9:0b:d2:6d:fe:7e:bd:05:32:51:15:1f:49:89: a6:d7:36:30:7c:45:3f:59:7e:e9:a4:2b:05:c6:95: fb:f5:c3:53:30:3b:bd:f1:c1:85:7c:29:eb:2c:64: 0a:70:05:22:3f:1b:80:3b:20:15:08:0b:65:db:aa: 39:7f:89:e0:f0:99:ad:4a:99:49:b4:fc:cb:bc:c4: 46:72:7a:da:2f:c7:de:91:32:88:67:51:b9:09:67: 7d:31:45:b9:df:e1:1e:08:b9:5f:83:c5:ef:d1:20: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:18:28:ED:BC:2D:BF:24:64:1E:52:B4:21:87:64:67:52:5F:3F:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.162.0/24 172.98.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:77:08:6d:33:3d:fb:e1:21:05:a3:d0:3a:a0:9f:c2:69:79: ae:b3:cc:ab:b6:df:02:f2:4a:ba:96:38:1e:0d:31:98:ea:87: 23:04:c8:87:7f:e3:8b:07:43:c4:25:2d:72:a6:9e:14:6c:ae: 2c:23:cb:c1:33:c3:6b:35:9f:f6:64:41:d2:07:74:1f:d3:3c: fd:f1:a3:db:3a:c5:9e:dd:3f:49:3e:74:42:8b:b5:74:51:07: e1:83:a3:ce:f9:7b:30:b1:27:fc:65:2b:78:1c:76:6c:25:5d: f8:ab:99:d0:89:94:4b:b6:5f:0d:db:54:06:87:6c:53:e7:23: f8:e7:9c:a6:40:37:00:d7:a2:80:2e:20:dc:48:ee:3b:ca:5f: 12:ce:56:96:0a:ef:94:8f:c2:32:9b:42:85:b0:59:88:d0:9f: 64:85:97:d6:85:b6:4c:ef:08:d2:da:b0:76:6a:cb:be:d3:28: 97:98:6b:6a:e3:04:96:44:2f:f6:86:8f:ae:da:21:06:ae:d9: 80:67:7f:25:05:64:2c:7f:f3:62:6f:a9:17:55:91:d0:4e:5a: 7b:8f:0e:2a:2c:5e:55:c3:3e:20:3e:65:85:11:d1:7c:0c:ea: ef:67:39:30:1b:8d:41:97:f4:d0:49:15:79:0d:b1:5a:00:3f: 0f:54:d7:f6 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEsYBs59EObZNi65nwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MDNlNTlkYzQtMDM3MS00MDkyLWI5OWItMjY2NjQzOWU5OGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0/9fCebQvVv0Tlk9VTSc7Qis9VTDIlql8MD cO6MssaFjNc6mWy+Pnw3GkVeoi98D3v4+2sD7ahK7XlOw6HHkhTP6vaEFPqFnroB EFQTnADHaYwWz4OUuiiD/jykALQoGQhy62jGivTUShzQF68UkRrJzsr0kfPednVD fhI6JOjVhXMR/B6coqJ7t17AX/dTgv2xUmF3uQvSbf5+vQUyURUfSYmm1zYwfEU/ WX7ppCsFxpX79cNTMDu98cGFfCnrLGQKcAUiPxuAOyAVCAtl26o5f4ng8JmtSplJ tPzLvMRGcnraL8fekTKIZ1G5CWd9MUW53+EeCLlfg8Xv0SDS2QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFEwYKO28Lb8kZB5StCGHZGdSXz+wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDFkNTczNGMtZWZiYy0z ZDk4LTkxM2EtZTYwYjhkN2UzM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKiAwQA rGKsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABx3CG0zPfvhIQWj0Dqgn8Jpea6zzKu23wLySrqWOB4NMZjq hyMEyId/44sHQ8QlLXKmnhRsriwjy8Ezw2s1n/ZkQdIHdB/TPP3xo9s6xZ7dP0k+ dEKLtXRRB+GDo875ezCxJ/xlK3gcdmwlXfirmdCJlEu2Xw3bVAaHbFPnI/jnnKZA NwDXooAuINxI7jvKXxLOVpYK75SPwjKbQoWwWYjQn2SFl9aFtkzvCNLasHZqy77T KJeYa2rjBJZEL/aGj67aIQau2YBnfyUFZCx/82JvqRdVkdBOWnuPDiosXlXDPiA+ ZYUR0XwM6u9nOTAbjUGX9NBJFXkNsVoAPw9U1/Y= -----END CERTIFICATE-----Generated at Fri Oct 10 21:32:51 2025 by rpki-client