$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: oo4KTQ6sdS/ZjCrLiEUBFdwdrt3awbv2AYLIX17vcu8= Subject key identifier: A1:A2:7B:06:D8:CD:61:33:EE:86:32:81:EB:93:F4:3C:BB:AD:72:A4 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A62908FA2AFD5C494D93E2A00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8f:a2:af:d5:c4:94:d9:3e:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=db99cb48-87e7-4017-8564-5ff192ddd9f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d9:17:d8:67:06:a7:66:2a:a6:e5:18:f7:09: 11:d9:69:2d:de:ef:28:e5:a5:c4:0e:7e:87:49:56: 6b:80:4d:37:0b:b9:74:21:af:9b:76:1d:ca:ae:1f: 3e:de:9b:e2:6e:13:ca:e5:c8:79:c7:7e:e2:cc:f5: 65:91:5f:b1:39:41:74:58:70:79:31:c6:4c:3c:3c: bf:21:8a:f3:bd:84:ed:8f:4c:a4:29:c1:4e:75:2f: c5:a8:ec:6a:d0:59:18:2f:41:eb:0a:5f:5a:91:b0: 09:4e:4f:c2:f2:f9:11:98:04:3e:7d:b3:d3:a5:38: d3:87:d3:14:32:cf:46:e8:22:fc:b6:99:4b:18:7c: 9c:9a:7d:42:4f:c4:fc:a2:9a:a9:f9:55:c9:3f:42: 69:d3:ee:a6:12:f0:d3:7b:d8:b7:90:96:fa:33:fb: dd:08:c5:7a:b9:04:a3:0d:ae:c4:d1:eb:f0:53:3a: 7c:08:56:d5:a9:dd:6e:e6:58:ef:58:9a:e3:00:a0: 53:cb:37:0e:e2:47:0c:37:37:ca:60:15:96:8f:8a: 0e:26:36:f4:01:26:88:8a:2a:ff:d6:eb:1f:0b:7f: 11:2b:d6:75:dd:39:01:1b:f3:90:d6:e4:e9:0b:e2: 88:50:2f:93:c7:6f:09:ac:83:c4:33:d4:2b:15:cd: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:A2:7B:06:D8:CD:61:33:EE:86:32:81:EB:93:F4:3C:BB:AD:72:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:b9:06:4d:84:7b:5a:98:12:af:d5:da:70:93:83:1a:77:d2: a5:f3:50:4d:e2:6b:d8:11:fc:35:f5:73:0f:66:6b:eb:dd:5c: f5:35:44:7b:67:0a:a6:bb:51:85:af:aa:79:ba:a8:1c:5c:76: 67:30:d1:80:76:e8:6c:de:08:d0:e3:16:c9:71:27:48:08:25: 36:88:3f:cb:bb:da:25:84:6f:c0:85:66:08:23:59:05:b6:ae: 5a:d9:e7:57:64:1b:54:13:4d:18:30:b3:62:43:5b:cf:61:09: 18:32:c2:61:ae:d0:1f:b6:f2:90:f8:fd:5d:69:3b:24:81:88: 26:35:53:3b:97:06:60:c4:16:7d:f6:9e:08:5d:84:f4:2a:58: a5:22:cb:a6:0c:5d:c8:34:0a:3c:4b:e0:ed:13:f8:91:0a:38: d4:a8:39:19:72:55:ea:96:d1:19:69:74:2a:1a:e5:78:6a:b4: 0d:41:7f:9b:d5:84:96:85:d5:41:64:60:7b:a3:29:05:4f:67: 52:df:27:07:89:b1:a2:d2:0b:30:e2:8e:d5:95:29:f4:45:2d: c9:37:f3:28:f6:8e:59:e8:61:d3:4c:e9:70:e7:46:ae:3c:36: a9:90:6c:c3:8c:1c:2b:10:ce:e5:e2:2f:e5:d3:c6:58:28:e3: a5:50:2a:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikI+ir9XElNk+KgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZGI5OWNiNDgtODdlNy00MDE3LTg1NjQtNWZmMTkyZGRkOWY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9kX2GcGp2YqpuUY9wkR2Wkt3u8o5aXEDn6H SVZrgE03C7l0Ia+bdh3Krh8+3pvibhPK5ch5x37izPVlkV+xOUF0WHB5McZMPDy/ IYrzvYTtj0ykKcFOdS/FqOxq0FkYL0HrCl9akbAJTk/C8vkRmAQ+fbPTpTjTh9MU Ms9G6CL8tplLGHycmn1CT8T8opqp+VXJP0Jp0+6mEvDTe9i3kJb6M/vdCMV6uQSj Da7E0evwUzp8CFbVqd1u5ljvWJrjAKBTyzcO4kcMNzfKYBWWj4oOJjb0ASaIiir/ 1usfC38RK9Z13TkBG/OQ1uTpC+KIUC+Tx28JrIPEM9QrFc3OqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGiewbYzWEz7oYygeuT9Dy7rXKkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAi5Bk2Ee1qYEq/V2nCTgxp30qXzUE3ia9gR/DX1cw9ma+vdXPU1RHtn Cqa7UYWvqnm6qBxcdmcw0YB26GzeCNDjFslxJ0gIJTaIP8u72iWEb8CFZggjWQW2 rlrZ51dkG1QTTRgws2JDW89hCRgywmGu0B+28pD4/V1pOySBiCY1UzuXBmDEFn32 nghdhPQqWKUiy6YMXcg0CjxL4O0T+JEKONSoORlyVeqW0RlpdCoa5XhqtA1Bf5vV hJaF1UFkYHujKQVPZ1LfJweJsaLSCzDijtWVKfRFLck38yj2jlnoYdNM6XDnRq48 NqmQbMOMHCsQzuXiL+XTxlgo46VQKmo= -----END CERTIFICATE-----Generated at Wed Jul 9 17:42:47 2025 by rpki-client