$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa File: 61f2645f-1281-3f43-b68c-68cc423e77b6.roa (raw, json) Hash identifier: JxsJjdnEZ3zN9qHdQgfyb8EpO6n2NnZ1QlkuvwsI/2k= Subject key identifier: E1:6A:1F:9D:C8:4A:68:3E:0A:42:05:1F:95:DD:E9:59:26:2A:F6:99 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B3C51AA9DD9B396150537E102 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa Signing time: Thu 18 Sep 2025 13:00:41 +0000 ROA not before: Thu 18 Sep 2025 13:00:41 +0000 ROA not after: Wed 17 Dec 2025 14:00:41 +0000 asID: 264617 IP address blocks: 172.98.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3c:51:aa:9d:d9:b3:96:15:05:37:e1:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 18 13:00:41 2025 GMT Not After : Dec 17 14:00:41 2025 GMT Subject: CN=4a81d46a-bc93-4447-a4b4-d93d0eeaec28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:59:41:a9:01:f5:0a:d9:d5:5d:f5:4d:27:3d: 17:94:34:6f:d7:8c:63:b7:17:fa:fd:94:37:80:f6: 2f:77:cf:83:5c:03:a6:57:76:cf:b0:a5:4e:da:b4: 7c:0d:b8:c1:3e:6a:c1:d7:f0:80:c9:92:85:2c:0c: f7:73:29:0e:1d:e0:c4:71:3c:31:89:26:51:85:38: d0:0b:62:4c:79:2c:e6:e2:e5:7b:a3:83:e2:7e:a5: 75:61:0a:0f:46:03:fb:19:60:9d:c1:67:ac:a9:3b: f4:d4:2c:6e:69:94:38:2f:b2:de:ac:ba:77:0a:86: 34:eb:db:ab:d2:d3:e6:63:79:05:80:b9:8a:0d:3d: ae:6e:1a:c1:21:fc:ad:17:63:4a:96:9a:73:05:7e: 0c:c9:57:69:28:aa:97:7c:4e:d0:54:49:61:1a:88: 96:30:dd:9f:e4:9b:4a:e8:20:b6:b7:2e:50:5e:06: 56:94:e2:05:21:61:5e:38:9f:3d:98:44:f5:0d:92: 25:9b:27:0d:e8:d4:30:c9:06:53:55:9a:74:38:f0: 09:aa:07:22:d8:fd:c5:9c:4c:82:f8:e1:40:8d:69: 13:e6:8e:83:0e:11:60:14:eb:9e:cd:93:ef:9d:a9: bc:b7:10:b2:cd:37:df:c4:8e:4a:17:71:59:f1:51: 51:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6A:1F:9D:C8:4A:68:3E:0A:42:05:1F:95:DD:E9:59:26:2A:F6:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:54:4b:16:69:a2:18:d2:24:dd:dd:d8:94:f9:74:ac:02:37: 08:b9:7f:5c:fc:57:e0:3f:b9:94:21:e4:fe:18:38:34:b6:a5: 14:77:3f:80:1c:04:aa:5f:db:ba:21:ae:dd:59:34:f4:df:5f: ec:84:d9:e6:6e:85:ca:1a:ac:b0:47:0e:3c:a8:57:7e:cf:41: 49:92:b6:c6:2c:f4:2b:4e:e0:ae:5b:4c:af:82:a5:ac:32:84: bc:1a:a3:87:cd:20:93:72:bb:68:fc:1a:dd:c7:5a:2e:3b:55: bb:ae:35:94:ee:0e:67:76:e7:f0:65:e4:42:02:58:ae:ac:da: e2:22:7d:7e:fc:b7:a1:ed:f7:5d:86:7b:b2:ad:21:f4:9e:88: 7f:fe:35:fd:bc:c2:fe:6a:1d:8d:88:77:4b:91:d4:43:1c:e9: db:43:fd:34:fd:02:a5:b9:e0:97:b0:2b:d6:50:d0:c8:2c:aa: 4f:83:29:02:ba:81:73:b1:3f:fd:6e:15:cf:07:b1:58:f1:17: 0d:f4:c5:b4:41:cc:40:c0:c6:a3:a8:48:cb:e0:65:8c:16:10: 7e:69:38:ef:e8:dd:16:16:d9:d4:38:29:6b:82:39:34:23:13: 33:08:a2:21:72:26:35:8c:64:9f:a7:fc:ec:4a:ac:2a:d2:56: c1:6f:61:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs8Uaqd2bOWFQU34QIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDkxODEzMDA0MVoXDTI1MTIxNzE0MDA0MVowLzEtMCsGA1UEAxMk NGE4MWQ0NmEtYmM5My00NDQ3LWE0YjQtZDkzZDBlZWFlYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgllBqQH1CtnVXfVNJz0XlDRv14xjtxf6/ZQ3 gPYvd8+DXAOmV3bPsKVO2rR8DbjBPmrB1/CAyZKFLAz3cykOHeDEcTwxiSZRhTjQ C2JMeSzm4uV7o4PifqV1YQoPRgP7GWCdwWesqTv01CxuaZQ4L7LerLp3CoY069ur 0tPmY3kFgLmKDT2ubhrBIfytF2NKlppzBX4MyVdpKKqXfE7QVElhGoiWMN2f5JtK 6CC2ty5QXgZWlOIFIWFeOJ89mET1DZIlmycN6NQwyQZTVZp0OPAJqgci2P3FnEyC +OFAjWkT5o6DDhFgFOuezZPvnam8txCyzTffxI5KF3FZ8VFRiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFqH53ISmg+CkIFH5Xd6VkmKvaZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjFmMjY0NWYtMTI4MS0z ZjQzLWI2OGMtNjhjYzQyM2U3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9USxZpohjSJN3d2JT5dKwCNwi5f1z8V+A/uZQh5P4YODS2pRR3P4Ac BKpf27ohrt1ZNPTfX+yE2eZuhcoarLBHDjyoV37PQUmStsYs9CtO4K5bTK+Cpawy hLwao4fNIJNyu2j8Gt3HWi47VbuuNZTuDmd25/Bl5EICWK6s2uIifX78t6Ht912G e7KtIfSeiH/+Nf28wv5qHY2Id0uR1EMc6dtD/TT9AqW54JewK9ZQ0Mgsqk+DKQK6 gXOxP/1uFc8HsVjxFw30xbRBzEDAxqOoSMvgZYwWEH5pOO/o3RYW2dQ4KWuCOTQj EzMIoiFyJjWMZJ+n/OxKrCrSVsFvYaY= -----END CERTIFICATE-----Generated at Fri Sep 19 03:52:00 2025 by rpki-client