$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa File: 79f9299b-0362-3137-aef0-5e220b4411a3.roa (raw, json) Hash identifier: aU6iRuKvsM6sMdXV4x8aDA56lZv7TIsg6WgDeIHZsbc= Subject key identifier: 34:5A:96:58:30:B7:C5:2F:60:50:1C:EC:05:DB:68:8B:37:50:1F:9A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A1035421840C6652C70200830 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 205659 IP address blocks: 172.98.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:42:18:40:c6:65:2c:70:20:08:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=840e8a67-d821-4f2d-9dd3-7b7fd2a985d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:95:c1:12:80:b5:43:83:53:95:85:a3:f1:db: 91:bd:eb:68:90:d4:1f:a3:db:3e:74:e6:e3:18:b5: 5e:33:2b:a9:87:52:64:55:ed:aa:20:e7:05:a3:90: 79:5b:18:d0:73:10:89:03:89:48:75:46:20:a7:a1: 7b:5d:a6:a1:8e:4e:a3:b2:41:cd:8e:4b:c7:b0:31: f5:9c:12:a4:5a:ee:e6:2a:35:53:bf:36:7c:2e:65: b3:a1:d0:77:0c:36:a6:c1:49:e1:cf:81:d2:fa:e5: b7:61:91:8e:9c:52:8f:84:89:3c:12:41:15:6a:7e: 14:91:16:b1:c2:fc:97:60:6f:76:a1:c0:f5:e9:cf: d6:39:62:99:1e:22:ba:07:1b:68:56:7c:30:15:3c: 66:90:a4:06:db:72:39:28:1b:3e:eb:06:f6:c5:ed: c2:b7:ab:fa:a7:a7:eb:bd:0d:bf:e6:e7:05:8e:fb: 64:55:1b:3e:70:b2:b3:00:e8:1d:f8:cd:39:5b:3a: 65:0f:80:29:3a:f5:d3:ec:4e:e9:7d:7b:8e:6a:00: 53:68:35:1d:90:70:f7:4c:13:32:05:bf:34:b5:ae: 5f:26:7b:a1:37:ba:f1:ca:2d:d1:51:74:b4:a6:a4: cf:30:81:37:a3:4e:d6:1b:5b:38:10:54:1d:39:20: 46:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5A:96:58:30:B7:C5:2F:60:50:1C:EC:05:DB:68:8B:37:50:1F:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:0b:10:44:b2:7e:bf:92:bd:03:87:c0:c5:bb:03:68:90:cb: e0:2d:2c:64:d2:9e:0f:51:9b:34:e6:f8:47:fd:64:c7:5c:57: fa:c6:ff:96:d1:43:ac:c4:cd:66:04:32:a6:dc:70:9c:7a:54: a6:6c:0a:07:c7:3d:2c:3c:3c:36:05:e1:e4:75:6a:95:2a:ed: 8d:a9:9a:67:e0:05:a6:19:f5:45:43:c1:5b:08:0a:7f:5a:c4: 01:e9:9d:0b:b7:9e:1d:58:e7:37:dd:ef:bc:e1:43:cf:bc:41: f5:7b:96:95:09:10:a8:a4:6e:c0:e0:90:ae:1b:2a:2a:2f:39: 45:32:0f:d3:4f:75:fa:81:f6:1d:55:d7:15:ca:92:88:2b:7d: d3:0c:58:a9:fd:a5:b0:dd:7f:f3:e5:6b:38:c6:f9:71:9c:ce: 2f:4e:3d:64:f5:be:d8:5f:22:15:1b:a2:da:bf:76:5a:cb:59: 20:06:82:ca:38:9d:15:84:80:e3:70:7b:ce:6f:80:a4:84:93: 92:d6:4a:4e:00:63:64:ca:ac:8e:16:f0:86:28:00:73:c4:ff: b9:43:d9:51:1d:e7:e5:89:75:7e:cc:e2:32:f7:5f:4c:44:2b: 0e:6b:6d:99:50:2e:b3:50:3d:c5:2b:4a:d4:ba:65:53:19:05: cb:a2:de:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUIYQMZlLHAgCDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ODQwZThhNjctZDgyMS00ZjJkLTlkZDMtN2I3ZmQyYTk4NWQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZXBEoC1Q4NTlYWj8duRvetokNQfo9s+dObj GLVeMyuph1JkVe2qIOcFo5B5WxjQcxCJA4lIdUYgp6F7Xaahjk6jskHNjkvHsDH1 nBKkWu7mKjVTvzZ8LmWzodB3DDamwUnhz4HS+uW3YZGOnFKPhIk8EkEVan4UkRax wvyXYG92ocD16c/WOWKZHiK6BxtoVnwwFTxmkKQG23I5KBs+6wb2xe3Ct6v6p6fr vQ2/5ucFjvtkVRs+cLKzAOgd+M05WzplD4ApOvXT7E7pfXuOagBTaDUdkHD3TBMy Bb80ta5fJnuhN7rxyi3RUXS0pqTPMIE3o07WG1s4EFQdOSBG6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRallgwt8UvYFAc7AXbaIs3UB+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzlmOTI5OWItMDM2Mi0z MTM3LWFlZjAtNWUyMjBiNDQxMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQLEESyfr+SvQOHwMW7A2iQy+AtLGTSng9RmzTm+Ef9ZMdcV/rG/5bR Q6zEzWYEMqbccJx6VKZsCgfHPSw8PDYF4eR1apUq7Y2pmmfgBaYZ9UVDwVsICn9a xAHpnQu3nh1Y5zfd77zhQ8+8QfV7lpUJEKikbsDgkK4bKiovOUUyD9NPdfqB9h1V 1xXKkogrfdMMWKn9pbDdf/PlazjG+XGczi9OPWT1vthfIhUbotq/dlrLWSAGgso4 nRWEgONwe85vgKSEk5LWSk4AY2TKrI4W8IYoAHPE/7lD2VEd5+WJdX7M4jL3X0xE Kw5rbZlQLrNQPcUrStS6ZVMZBcui3pw= -----END CERTIFICATE-----Generated at Sat Jun 7 13:52:18 2025 by rpki-client