$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: rPpq4LD2VihxvpHNM4jhrIsNdvTpmGaBjr/7aPLlaPg= Subject key identifier: 99:A8:A9:C7:EA:FE:1F:C3:A6:F7:4E:4A:A9:17:74:E8:E6:79:93:36 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B004BF1491DA5F5409F767B00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:f1:49:1d:a5:f5:40:9f:76:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=1b6bb259-a9cf-4445-845f-203a1dde99d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f8:95:1b:86:4c:51:48:7e:e5:1a:91:e5:a6: 18:2b:15:34:9e:cc:eb:65:20:04:64:23:e2:88:49: d7:55:bd:d2:fe:be:c6:53:f3:2b:14:86:5f:97:59: ec:f1:23:b1:1c:fe:0a:eb:ce:c3:6b:9e:39:fc:73: 06:c8:7a:88:a5:01:7b:66:76:df:71:f8:66:8d:d4: 39:2f:ec:41:2e:d2:e2:0e:b9:f3:53:3f:b8:7f:46: 27:27:fc:3e:8c:e2:94:fb:9f:40:77:da:6d:4f:b9: 4d:8a:51:8c:34:7a:23:41:bc:22:92:d5:2f:c2:0b: 67:82:87:d4:50:65:3b:51:73:68:0e:18:cb:89:cd: 62:34:63:8e:64:f7:08:4f:48:87:f0:42:31:fc:e5: 09:06:6a:2e:2b:82:b7:13:2c:7b:21:ca:9c:72:7e: f2:01:3b:df:a9:84:98:29:f4:55:5e:2a:71:82:78: 93:a6:1f:8a:59:bb:f9:bc:4a:51:b3:da:f4:55:28: e0:66:80:a2:59:87:90:7b:41:64:c6:28:03:8b:a2: 29:a3:01:95:39:41:14:71:e1:2f:a5:a1:ca:cb:3f: 18:f1:ed:19:ea:2c:0a:2e:31:df:1d:ae:54:f3:8c: 14:7a:1a:bd:72:92:89:0f:fa:09:52:cf:79:47:cf: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:A8:A9:C7:EA:FE:1F:C3:A6:F7:4E:4A:A9:17:74:E8:E6:79:93:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f7:bc:aa:f2:fd:41:19:3b:16:5f:43:1d:03:f8:8f:3c:20: 0a:fd:6e:f7:6f:79:fc:36:b9:b6:62:1f:23:cc:51:b1:a7:84: bd:18:4a:a2:53:3f:a0:66:34:8a:d9:a9:b2:33:d9:1f:5b:28: 9b:4b:fd:9b:7f:82:77:d4:a5:3c:90:8f:90:09:73:d3:c8:92: 2e:3f:93:2b:8c:c8:21:41:67:67:79:ab:ee:1f:54:8d:22:46: 8d:07:93:09:dc:c8:7e:f8:a0:fe:b4:68:5f:70:6d:26:6a:1a: 75:90:d3:eb:07:d2:fe:ec:17:cf:11:cd:7e:66:b4:21:27:56: 6d:87:a5:b5:48:d1:b1:70:16:2f:5f:b2:61:18:e0:b9:3d:fd: d2:93:9b:c0:18:8d:9f:f8:0a:5f:eb:02:6a:b7:2e:31:6f:92: ae:ed:f0:09:2d:ee:7a:8b:03:d4:02:b8:c0:37:05:59:d6:9f: 4e:26:d7:f3:d7:19:b8:5c:8a:cf:42:b8:22:48:75:ad:2a:3c: d4:ac:92:46:1c:01:cc:ac:b9:b5:75:8c:e3:78:13:7c:52:20: d5:38:d7:f9:f6:e7:72:70:8d:3a:3c:cb:46:14:f3:be:fb:d1: 2c:7b:fb:f4:0b:4b:44:93:44:8d:1b:9f:44:c6:e2:23:2c:22: 12:79:8a:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsAS/FJHaX1QJ92ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MWI2YmIyNTktYTljZi00NDQ1LTg0NWYtMjAzYTFkZGU5OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fiVG4ZMUUh+5RqR5aYYKxU0nszrZSAEZCPi iEnXVb3S/r7GU/MrFIZfl1ns8SOxHP4K687Da545/HMGyHqIpQF7ZnbfcfhmjdQ5 L+xBLtLiDrnzUz+4f0YnJ/w+jOKU+59Ad9ptT7lNilGMNHojQbwiktUvwgtngofU UGU7UXNoDhjLic1iNGOOZPcIT0iH8EIx/OUJBmouK4K3Eyx7Icqccn7yATvfqYSY KfRVXipxgniTph+KWbv5vEpRs9r0VSjgZoCiWYeQe0FkxigDi6IpowGVOUEUceEv paHKyz8Y8e0Z6iwKLjHfHa5U84wUehq9cpKJD/oJUs95R88UYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmoqcfq/h/DpvdOSqkXdOjmeZM2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFP3vKry/UEZOxZfQx0D+I88IAr9bvdvefw2ubZiHyPMUbGnhL0YSqJT P6BmNIrZqbIz2R9bKJtL/Zt/gnfUpTyQj5AJc9PIki4/kyuMyCFBZ2d5q+4fVI0i Ro0HkwncyH74oP60aF9wbSZqGnWQ0+sH0v7sF88RzX5mtCEnVm2HpbVI0bFwFi9f smEY4Lk9/dKTm8AYjZ/4Cl/rAmq3LjFvkq7t8Akt7nqLA9QCuMA3BVnWn04m1/PX Gbhcis9CuCJIda0qPNSskkYcAcysubV1jON4E3xSINU41/n253JwjTo8y0YU8777 0Sx7+/QLS0STRI0bn0TG4iMsIhJ5ioQ= -----END CERTIFICATE-----Generated at Wed Nov 5 06:23:40 2025 by rpki-client