$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json) Hash identifier: B1SQ/yU1DEc47bMsHUdRiVA8jCfS2Lh+zYA4Bz9R/NE= Subject key identifier: 40:0B:87:92:5C:F6:40:84:31:C3:36:B4:0E:4D:1B:8D:91:7E:30:84 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B004BF1359B87EAEF75D5D800 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 46261 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 08 Sep 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:35:9b:87:ea:ef:75:d5:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=2d0c9993-a8f8-445e-a26f-a7ad1d5b783b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6f:18:c0:92:e6:e9:39:d6:a2:fa:d0:96:c9: 8e:41:62:ee:8d:57:58:5c:f4:89:ba:11:38:80:6f: 9c:89:12:38:fa:93:13:7b:a3:cc:52:55:71:aa:79: 29:0b:b0:af:c0:86:97:e7:ac:3b:5d:1f:08:2e:36: 1b:d4:d5:86:ec:fa:28:04:0f:5a:27:3d:1a:a8:b3: cf:b3:68:8a:ec:ea:0c:20:66:2f:16:13:24:6e:4c: fb:5a:ea:b7:9b:4f:d0:4e:51:d8:05:da:b2:38:ac: 96:8d:b1:bc:29:bb:98:56:64:76:0a:55:01:8c:1a: bd:73:d3:6e:10:78:0c:4d:a2:c0:a2:0d:1d:09:5b: b0:2e:49:36:a6:c9:c6:5e:90:5b:eb:5b:6d:86:f8: a7:49:f6:a0:3d:1e:a8:a8:40:22:d8:7f:96:25:13: fc:1f:e8:12:11:38:0e:9c:81:b6:11:ac:3f:c5:9f: 92:5d:37:6c:a6:df:8f:b5:9b:aa:5a:fa:8e:2a:42: 92:64:ba:3b:a6:1b:fe:ec:3d:a1:d5:79:bd:28:09: 2b:3c:cf:18:25:25:ec:4c:f3:83:53:f6:ad:87:2b: 9f:0a:c7:a9:b4:d0:dc:1e:7f:ad:43:a0:e1:87:ec: 1b:ab:d5:b5:e6:ad:46:0a:94:d0:a7:53:46:37:d7: 78:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:87:92:5C:F6:40:84:31:C3:36:B4:0E:4D:1B:8D:91:7E:30:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:a0:0a:c3:15:9b:e8:52:d6:9f:a4:e5:42:76:b9:c2:57:84: 89:85:3c:71:83:89:63:a7:ca:c9:0f:01:d1:19:39:a5:03:6f: 66:4f:3b:ef:f7:2d:cb:30:01:35:7c:08:25:53:97:94:c1:52: 7d:22:0c:46:b9:36:e5:e0:a1:19:6f:40:c2:be:70:c7:c5:18: c0:12:28:65:8c:e9:90:0f:a3:a8:33:8a:f4:26:52:dc:d7:ab: fc:b4:5e:19:aa:1d:d9:02:07:4a:1f:39:ae:38:70:35:56:f3: 98:a8:ec:3f:98:6a:03:37:87:a1:44:ed:fc:6e:3c:59:bc:21: bf:f8:3f:ca:26:0d:22:38:71:5a:50:19:e3:66:0d:14:ba:49: b6:2a:7d:a5:42:94:78:fa:f8:a5:36:83:36:06:00:6c:66:49: 79:18:c7:f1:42:d0:47:01:88:16:d8:46:9b:56:db:1f:19:2f: 3e:1d:a2:78:cc:98:75:41:1a:28:90:c4:7f:e0:73:fd:5c:29: f1:b8:14:0a:57:18:f6:dc:3c:09:8e:a7:9a:be:99:1e:98:95: 71:55:93:ad:77:be:87:81:a4:47:fe:c3:38:61:81:c1:1f:26: 49:bb:d9:ab:30:c7:c2:ff:40:28:07:16:09:23:41:4d:f0:1a: 7c:c8:f4:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/E1m4fq73XV2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MmQwYzk5OTMtYThmOC00NDVlLWEyNmYtYTdhZDFkNWI3ODNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW8YwJLm6TnWovrQlsmOQWLujVdYXPSJuhE4 gG+ciRI4+pMTe6PMUlVxqnkpC7CvwIaX56w7XR8ILjYb1NWG7PooBA9aJz0aqLPP s2iK7OoMIGYvFhMkbkz7Wuq3m0/QTlHYBdqyOKyWjbG8KbuYVmR2ClUBjBq9c9Nu EHgMTaLAog0dCVuwLkk2psnGXpBb61tthvinSfagPR6oqEAi2H+WJRP8H+gSETgO nIG2Eaw/xZ+SXTdspt+PtZuqWvqOKkKSZLo7phv+7D2h1Xm9KAkrPM8YJSXsTPOD U/athyufCseptNDcHn+tQ6Dhh+wbq9W15q1GCpTQp1NGN9d4owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEALh5Jc9kCEMcM2tA5NG42RfjCEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDM0ZjNmZGUtY2M5My0z N2ZmLThjNDEtMGQyMGFkZTZmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCgCsMVm+hS1p+k5UJ2ucJXhImFPHGDiWOnyskPAdEZOaUDb2ZPO+/3 LcswATV8CCVTl5TBUn0iDEa5NuXgoRlvQMK+cMfFGMASKGWM6ZAPo6gzivQmUtzX q/y0XhmqHdkCB0ofOa44cDVW85io7D+YagM3h6FE7fxuPFm8Ib/4P8omDSI4cVpQ GeNmDRS6SbYqfaVClHj6+KU2gzYGAGxmSXkYx/FC0EcBiBbYRptW2x8ZLz4donjM mHVBGiiQxH/gc/1cKfG4FApXGPbcPAmOp5q+mR6YlXFVk613voeBpEf+wzhhgcEf Jkm72aswx8L/QCgHFgkjQU3wGnzI9MQ= -----END CERTIFICATE-----Generated at Sun Sep 7 03:27:58 2025 by rpki-client