$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa File: 139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa (raw, json) Hash identifier: O32Xru6naadG4wH3G1hOOrfhu3QLWR0r7orRlgfQSGE= Subject key identifier: E8:DA:7A:5E:7C:8D:A0:04:8C:21:78:8D:4E:E2:93:E5:5D:56:6D:4E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A63F5BC88FBA62638539BE680 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa Signing time: Thu 03 Jul 2025 01:00:48 +0000 ROA not before: Thu 03 Jul 2025 01:00:48 +0000 ROA not after: Wed 01 Oct 2025 01:00:48 +0000 asID: 42831 IP address blocks: 172.98.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:63:f5:bc:88:fb:a6:26:38:53:9b:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 3 01:00:48 2025 GMT Not After : Oct 1 01:00:48 2025 GMT Subject: CN=4082a3c6-ea6a-43dc-ae93-d8dc4a48e2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:31:8a:b9:f7:e5:86:e3:03:af:7f:b3:54:72: 14:8d:f8:b5:06:61:cb:06:f8:bc:a0:80:e5:9b:c5: fb:9e:47:9b:1e:34:48:da:ee:7c:65:e7:f8:63:41: c6:8c:f3:f9:4e:c1:de:98:c1:11:6b:d0:f9:4c:d8: ac:dd:24:8a:90:5a:f4:68:5c:a3:26:1a:97:d2:94: 55:41:bd:60:bb:27:09:56:d4:d2:14:51:cd:60:fd: 88:0a:6b:c7:2a:0f:f5:b3:ed:9f:6e:0f:15:a3:e2: 62:30:5e:18:66:66:f0:b7:c0:0b:6c:34:84:3a:d3: 33:f5:6f:02:32:16:50:04:80:a5:32:9f:2d:a4:97: 3b:3d:f5:12:22:ca:f3:b8:62:ed:3c:66:d1:da:cc: 9e:b5:9d:50:8d:4c:4c:0c:93:c1:c5:1c:d5:5a:ee: 1c:2a:dc:d8:a5:8a:a9:b8:aa:09:4f:e1:83:72:2f: 3f:b9:50:52:4a:f1:58:c7:b5:21:cd:ec:bf:5c:d5: ee:31:c4:a7:19:4c:7a:6a:f1:04:42:f0:c1:a7:46: d8:c6:93:63:dc:20:17:f0:31:c7:7a:6e:46:eb:b3: 5b:07:ee:7d:ed:6b:c5:22:a8:71:d6:a0:fa:aa:22: d2:9c:11:33:b2:ff:f5:5e:9a:32:ab:68:97:e0:4d: 46:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:DA:7A:5E:7C:8D:A0:04:8C:21:78:8D:4E:E2:93:E5:5D:56:6D:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a8:09:65:79:26:3e:89:13:e5:8d:54:3b:e0:3a:d4:5c:8d: 2d:df:a4:0b:9d:f6:97:ee:b4:50:63:23:be:3f:2d:9d:50:e9: cd:b4:66:1a:ab:27:7a:3f:2c:1b:50:52:ab:78:dd:a9:96:a2: bf:29:fa:f1:0c:c0:67:8e:83:ee:7a:41:64:ff:af:41:51:f7: 1e:e6:4c:40:9d:ca:a1:5a:fb:bb:8c:83:07:13:d9:bf:80:78: 3f:30:9f:3c:ee:67:cc:94:af:54:2c:31:17:09:e4:fb:f6:7e: 65:dd:c5:f6:30:c9:dc:cf:c6:85:0c:63:67:fa:3a:cd:12:a7: 68:bf:dd:16:31:5c:cf:a8:62:4c:ce:24:14:81:64:be:94:bb: 82:d5:0b:2c:c2:9b:08:0f:59:1f:75:d3:f5:af:02:94:3b:44: fd:c8:65:cd:99:73:b1:1c:3c:0c:97:c7:56:db:f6:b2:d3:1a: be:00:45:85:25:1c:b4:ae:1e:2e:fe:9c:fc:89:a2:70:4f:99: d7:10:6f:66:d2:4b:4a:22:4d:1c:30:81:d1:a3:42:b9:9a:0a: 91:99:0d:65:7c:a2:c0:43:14:d7:ff:a5:c8:af:2c:ea:fb:65: 98:13:12:5a:66:ed:db:64:21:85:b1:42:03:a7:f0:18:8e:7f: a0:9a:c1:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9byI+6YmOFOb5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk NDA4MmEzYzYtZWE2YS00M2RjLWFlOTMtZDhkYzRhNDhlMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jGKufflhuMDr3+zVHIUjfi1BmHLBvi8oIDl m8X7nkebHjRI2u58Zef4Y0HGjPP5TsHemMERa9D5TNis3SSKkFr0aFyjJhqX0pRV Qb1guycJVtTSFFHNYP2ICmvHKg/1s+2fbg8Vo+JiMF4YZmbwt8ALbDSEOtMz9W8C MhZQBIClMp8tpJc7PfUSIsrzuGLtPGbR2syetZ1QjUxMDJPBxRzVWu4cKtzYpYqp uKoJT+GDci8/uVBSSvFYx7Uhzey/XNXuMcSnGUx6avEEQvDBp0bYxpNj3CAX8DHH em5G67NbB+597WvFIqhx1qD6qiLSnBEzsv/1Xpoyq2iX4E1GdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOjael58jaAEjCF4jU7ik+VdVm1OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTM5YTlmZjEtOTdiZS0z Y2Q4LWE1MTktYTdmZmM2YjkyZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAioCWV5Jj6JE+WNVDvgOtRcjS3fpAud9pfutFBjI74/LZ1Q6c20Zhqr J3o/LBtQUqt43amWor8p+vEMwGeOg+56QWT/r0FR9x7mTECdyqFa+7uMgwcT2b+A eD8wnzzuZ8yUr1QsMRcJ5Pv2fmXdxfYwydzPxoUMY2f6Os0Sp2i/3RYxXM+oYkzO JBSBZL6Uu4LVCyzCmwgPWR910/WvApQ7RP3IZc2Zc7EcPAyXx1bb9rLTGr4ARYUl HLSuHi7+nPyJonBPmdcQb2bSS0oiTRwwgdGjQrmaCpGZDWV8osBDFNf/pcivLOr7 ZZgTElpm7dtkIYWxQgOn8BiOf6CawT4= -----END CERTIFICATE-----Generated at Wed Jul 9 17:05:57 2025 by rpki-client