$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa File: f91931be-3fbf-37a3-932e-7cbf092669bd.roa (raw, json) Hash identifier: HjLCcY2Q3jsk+kT//n+HrO5Nm0pPgdUAFAfi0ULtsnU= Subject key identifier: 07:D8:D2:B4:59:E7:17:EA:5B:80:66:58:D9:81:9C:B3:BC:87:FD:B8 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B0B769DFF423C5FD2224DC220 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa Signing time: Mon 01 Sep 2025 01:00:33 +0000 ROA not before: Mon 01 Sep 2025 01:00:33 +0000 ROA not after: Sun 30 Nov 2025 02:00:33 +0000 asID: 35758 IP address blocks: 172.98.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0b:76:9d:ff:42:3c:5f:d2:22:4d:c2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 1 01:00:33 2025 GMT Not After : Nov 30 02:00:33 2025 GMT Subject: CN=64deeccd-c986-4c2e-8ced-bac851ff6e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e6:78:e9:d8:77:b5:ae:e3:25:b1:3d:39:62: cf:b9:ff:ed:8b:5e:1c:c3:06:90:b5:32:50:4c:d8: 68:b9:69:86:90:af:bf:a7:6c:b0:3a:82:e1:07:d4: 16:a4:31:56:13:eb:e6:d7:88:6a:36:64:6f:88:92: 7e:b3:c6:b5:87:8c:cd:b6:34:f5:df:c7:3f:58:e1: 67:cb:85:9d:44:22:74:c8:5e:42:9d:c7:a4:b1:9d: 9c:3c:a9:4b:4e:86:d5:8d:b1:dc:7e:42:60:7a:6b: 34:ce:eb:b5:36:3c:20:b1:92:75:96:f7:83:3c:57: 82:10:c8:3b:a3:1b:eb:19:48:8a:3f:d9:ee:30:95: 69:2f:dc:43:d2:87:6b:b9:da:14:ad:09:94:2e:a5: 3c:16:4b:aa:f6:cc:03:b1:8a:0b:32:6a:93:e7:a6: 6a:b8:a6:e4:56:1e:bd:f4:5b:41:e4:c4:9b:1d:ec: 0d:fc:9a:00:2b:2e:f8:a5:2d:b7:1d:d1:27:68:05: 17:86:d5:00:bd:d4:c4:5a:56:6b:e8:1e:0a:43:77: bd:12:26:36:c2:16:8f:ea:c4:3f:f0:ad:4c:39:7d: 1b:b4:3e:91:bd:c8:6d:da:50:b6:11:ee:a4:76:2f: be:1a:95:d5:54:5a:9b:02:22:e2:9b:09:74:c2:60: e1:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D8:D2:B4:59:E7:17:EA:5B:80:66:58:D9:81:9C:B3:BC:87:FD:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/f91931be-3fbf-37a3-932e-7cbf092669bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:82:af:30:ff:87:21:ce:71:9c:c4:0b:b1:fa:20:4f:10:7b: d1:de:bf:59:ec:c0:df:5c:64:37:0b:fe:17:23:f2:97:aa:a6: e0:b9:58:ca:e6:f5:d2:a9:23:28:c3:af:d9:d7:55:f0:70:68: 0e:14:9e:d3:d2:67:58:cd:00:b6:99:89:b4:4e:b6:9c:93:bf: 3f:1d:99:b7:cf:de:dc:cf:b6:7c:ea:78:b0:ce:fa:7a:30:18: 51:ef:ed:b3:87:28:56:6b:23:70:aa:56:03:3f:00:8e:28:02: ae:cd:4e:c7:81:63:e0:e7:79:ed:fc:da:b7:1d:ce:94:01:2e: 5d:09:3c:50:4c:94:55:72:09:86:fb:9c:56:f7:09:bc:40:d1: d7:f6:3e:e7:59:41:07:3b:83:97:d6:a4:d8:c3:e6:52:4a:34: 4f:68:45:16:20:8e:77:41:9d:86:2a:f3:76:34:7b:be:71:db: d2:34:56:3c:1a:b0:45:57:15:6f:fb:c5:bc:43:3c:a7:ac:80: 3f:e0:6d:94:d1:58:e0:30:b7:7f:f8:32:a1:90:41:e9:18:4a: 53:1f:3d:57:5b:ef:18:f0:18:5d:ab:1e:3c:09:65:60:ad:43: 1f:e2:d6:b7:a7:bf:55:b4:59:e0:f5:ee:b2:89:e6:0f:34:e8: c8:b5:db:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsLdp3/Qjxf0iJNwiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkwMTAxMDAzM1oXDTI1MTEzMDAyMDAzM1owLzEtMCsGA1UEAxMk NjRkZWVjY2QtYzk4Ni00YzJlLThjZWQtYmFjODUxZmY2ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouZ46dh3ta7jJbE9OWLPuf/ti14cwwaQtTJQ TNhouWmGkK+/p2ywOoLhB9QWpDFWE+vm14hqNmRviJJ+s8a1h4zNtjT138c/WOFn y4WdRCJ0yF5CnceksZ2cPKlLTobVjbHcfkJgems0zuu1NjwgsZJ1lveDPFeCEMg7 oxvrGUiKP9nuMJVpL9xD0odrudoUrQmULqU8Fkuq9swDsYoLMmqT56ZquKbkVh69 9FtB5MSbHewN/JoAKy74pS23HdEnaAUXhtUAvdTEWlZr6B4KQ3e9EiY2whaP6sQ/ 8K1MOX0btD6Rvcht2lC2Ee6kdi++GpXVVFqbAiLimwl0wmDhFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfY0rRZ5xfqW4BmWNmBnLO8h/24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZjkxOTMxYmUtM2ZiZi0z N2EzLTkzMmUtN2NiZjA5MjY2OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKCrzD/hyHOcZzEC7H6IE8Qe9Hev1nswN9cZDcL/hcj8peqpuC5WMrm 9dKpIyjDr9nXVfBwaA4UntPSZ1jNALaZibROtpyTvz8dmbfP3tzPtnzqeLDO+now GFHv7bOHKFZrI3CqVgM/AI4oAq7NTseBY+Dnee382rcdzpQBLl0JPFBMlFVyCYb7 nFb3CbxA0df2PudZQQc7g5fWpNjD5lJKNE9oRRYgjndBnYYq83Y0e75x29I0Vjwa sEVXFW/7xbxDPKesgD/gbZTRWOAwt3/4MqGQQekYSlMfPVdb7xjwGF2rHjwJZWCt Qx/i1renv1W0WeD17rKJ5g806Mi1274= -----END CERTIFICATE-----Generated at Fri Oct 10 21:33:58 2025 by rpki-client