$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa File: 1034cd89-feb8-3e94-8574-e39249d96e14.roa (raw, json) Hash identifier: YDcGvSPem8+QjCvn8FRiddNYXpaF/JzO2a8x9TgyTfM= Subject key identifier: 70:C2:DF:4F:44:9D:4C:01:05:B0:41:9C:EF:63:2C:B6:64:B0:E5:35 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849C904EBE891240B3B063D3AE0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa Signing time: Thu 08 May 2025 13:01:00 +0000 ROA not before: Thu 08 May 2025 13:01:00 +0000 ROA not after: Wed 06 Aug 2025 13:01:00 +0000 asID: 7029 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c9:04:eb:e8:91:24:0b:3b:06:3d:3a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 8 13:01:00 2025 GMT Not After : Aug 6 13:01:00 2025 GMT Subject: CN=ed10cade-19ea-4e00-98a7-5ea18bafda11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0b:72:37:cf:a2:8a:08:87:59:f5:57:f6:9a: 8f:54:67:3b:ce:f1:77:4b:c1:30:6f:46:48:9c:c7: 4d:cc:bd:66:19:0e:ed:0c:63:0b:61:56:84:44:54: e5:f1:ad:86:71:c5:28:f8:fa:1a:16:0f:01:82:c0: 09:d4:b5:e7:19:1f:c8:a7:ad:b5:44:79:06:e1:64: 82:b4:99:08:f2:c2:75:60:8f:ff:9e:84:15:f9:f7: 53:bd:56:8e:08:2e:88:db:50:89:4b:68:e3:20:35: 88:b3:15:81:ae:2a:4a:98:c6:3e:e0:2f:2a:0e:70: 54:59:58:e5:13:4a:78:6f:69:47:dd:94:0e:8f:66: ad:a2:48:4b:ac:49:9f:bb:17:f9:c8:0e:97:55:22: da:9c:77:3a:86:d0:5f:50:bb:cf:eb:41:d0:2e:eb: b3:a7:f3:fe:da:9e:ca:92:b8:3c:ac:a9:90:7a:84: f6:cf:fe:e9:da:4b:53:0f:07:11:ee:4a:09:87:05: a5:98:49:6c:98:13:ab:e3:c8:9e:8a:54:9c:1f:26: ed:0f:55:02:cb:94:2c:ea:38:db:7d:0d:35:a5:9e: 1e:82:0a:39:11:6b:62:82:fb:f7:4c:53:6c:71:dc: 5e:0d:e8:b3:82:1c:0c:93:1f:28:f1:79:8a:63:27: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C2:DF:4F:44:9D:4C:01:05:B0:41:9C:EF:63:2C:B6:64:B0:E5:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:d1:9a:9d:4b:15:14:23:e6:a3:41:89:2c:23:3c:82:b6:86: 97:e2:0f:0d:61:81:69:5a:81:b5:e3:db:1b:9d:b1:d9:cd:04: b3:fb:cc:38:60:8a:7c:da:95:3c:a0:95:e5:fd:c5:e3:64:1c: 3e:ff:d1:cf:5f:42:de:e9:95:36:70:8f:d9:d3:9a:88:1e:83: a1:92:80:36:0c:a9:71:d8:00:f6:04:09:53:3e:eb:44:59:0b: db:5b:4f:bc:65:e0:9e:29:54:f1:4e:4c:7c:c5:c3:d0:fc:4b: da:87:ec:e8:3a:7a:f3:96:cd:80:6a:a2:20:5b:6f:1d:25:fe: 70:88:c3:36:de:0f:4c:38:1f:5f:75:ae:65:2c:75:2d:bb:1d: 78:c6:de:18:3f:7d:e2:03:51:2c:d4:ec:83:f4:17:15:98:8e: 11:0f:34:cf:70:cd:56:f0:4b:02:d4:cd:b2:d5:8a:9c:fb:b1: 33:34:a2:65:56:8e:76:c0:cd:ee:26:a1:e7:60:a2:af:34:33: 20:21:c3:d2:27:a0:8a:93:68:5d:22:92:df:0d:93:f5:c7:2e: dc:e3:03:ee:d8:f4:52:7d:ed:ae:de:f0:54:af:60:c8:88:b0: c9:80:fd:7e:b8:bf:07:78:d4:0f:8e:05:6d:65:1a:e3:60:6c: 4e:3d:0f:89 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEnJBOvokSQLOwY9OuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk ZWQxMGNhZGUtMTllYS00ZTAwLTk4YTctNWVhMThiYWZkYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgtyN8+iigiHWfVX9pqPVGc7zvF3S8Ewb0ZI nMdNzL1mGQ7tDGMLYVaERFTl8a2GccUo+PoaFg8BgsAJ1LXnGR/Ip621RHkG4WSC tJkI8sJ1YI//noQV+fdTvVaOCC6I21CJS2jjIDWIsxWBripKmMY+4C8qDnBUWVjl E0p4b2lH3ZQOj2atokhLrEmfuxf5yA6XVSLanHc6htBfULvP60HQLuuzp/P+2p7K krg8rKmQeoT2z/7p2ktTDwcR7koJhwWlmElsmBOr48ieilScHybtD1UCy5Qs6jjb fQ01pZ4eggo5EWtigvv3TFNscdxeDeizghwMkx8o8XmKYyeAdwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFHDC309EnUwBBbBBnO9jLLZksOU1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTAzNGNkODktZmViOC0z ZTk0LTg1NzQtZTM5MjQ5ZDk2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIbRmp1LFRQj5qNBiSwjPIK2hpfiDw1h gWlagbXj2xudsdnNBLP7zDhginzalTygleX9xeNkHD7/0c9fQt7plTZwj9nTmoge g6GSgDYMqXHYAPYECVM+60RZC9tbT7xl4J4pVPFOTHzFw9D8S9qH7Og6evOWzYBq oiBbbx0l/nCIwzbeD0w4H191rmUsdS27HXjG3hg/feIDUSzU7IP0FxWYjhEPNM9w zVbwSwLUzbLVipz7sTM0omVWjnbAze4moedgoq80MyAhw9InoIqTaF0ikt8Nk/XH LtzjA+7Y9FJ97a7e8FSvYMiIsMmA/X64vwd41A+OBW1lGuNgbE49D4k= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:10 2025 by rpki-client