$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa File: 56723a4c-1de9-3acd-814f-f735ade0459c.roa (raw, json) Hash identifier: JHZ1+9z8KzELdGolcmfJGR4nJq84wdrgjcBg6IcZJe0= Subject key identifier: 6B:F7:70:23:59:9D:63:04:39:7F:3E:42:05:83:F4:C8:AB:16:17:AB Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849A61F480D216D98FAA5B8EBB0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 28753 IP address blocks: 172.98.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:48:0d:21:6d:98:fa:a5:b8:eb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=0a3fe90a-ac17-49e7-9525-16bf2f38ecbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b9:15:ad:e4:e9:aa:ef:03:11:cb:20:33:fd: 5e:2e:54:8a:5f:b8:4a:ba:d0:cf:84:44:7e:78:b5: 9d:01:0c:ab:1e:d6:5e:1f:c3:15:45:c8:96:2b:28: 9e:54:51:26:57:b3:57:bd:8b:e7:cc:c0:e4:5e:45: a1:aa:11:d6:3b:01:a1:0e:65:06:f1:f6:32:c8:3b: 98:13:63:e9:75:67:af:72:6b:af:cb:39:95:e2:51: 79:18:57:68:c3:0d:3a:2a:54:69:2e:45:36:4f:dc: 92:0f:af:16:15:8e:aa:93:76:b3:d3:2b:28:37:69: f9:a4:ce:b3:8c:2c:38:57:6d:bf:e1:87:9b:03:58: 7d:15:54:03:a5:4f:6c:c1:88:a9:2c:0f:80:15:c8: 6f:75:01:b3:81:5b:15:5f:f4:52:07:ac:33:38:d8: 0e:5b:14:f6:45:bb:8c:8e:24:06:b6:fe:21:6f:57: ba:32:9c:af:2a:c4:f4:22:bf:17:29:c3:04:79:15: ae:ca:e5:fb:5c:14:c5:7f:e0:ac:75:73:6c:48:a3: 4b:4e:15:0a:a9:59:42:98:69:ea:60:57:21:22:f8: da:c8:d2:40:57:6c:4b:31:a6:69:2f:bd:2a:b1:28: 13:4f:a7:25:a5:95:1a:55:31:f3:29:ea:64:88:98: 06:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F7:70:23:59:9D:63:04:39:7F:3E:42:05:83:F4:C8:AB:16:17:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/56723a4c-1de9-3acd-814f-f735ade0459c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:f8:f5:ec:00:8c:6c:80:76:f8:ee:05:bd:7f:9b:ec:a7:61: c1:88:9c:1f:e0:32:be:3e:7c:22:98:09:ef:69:59:2a:20:e9: f8:80:e1:d9:c9:0f:cc:45:62:d8:08:43:90:4d:25:b9:ff:f1: f3:20:94:4f:41:a5:39:86:92:98:60:21:56:e7:19:84:ef:50: 1f:80:d2:c1:a4:88:ba:4a:3b:23:7d:e6:e1:25:8f:1b:1e:5c: bb:b1:38:28:de:9b:d7:e9:2c:18:30:47:99:5c:98:64:a2:3d: d5:c4:4d:11:50:fd:4f:b9:69:78:d4:a9:d2:14:39:67:41:9b: e5:4f:f2:c8:5a:69:62:26:3f:1a:cb:b7:d7:3c:7e:39:2c:b8: 91:a6:0a:bc:e3:2e:1a:39:95:7e:70:82:7e:9e:32:d3:17:54: 46:14:27:0f:58:a6:be:b2:36:79:80:35:25:88:5a:c0:5a:19: 86:c5:59:e2:74:d3:ed:67:1b:8a:39:70:a2:02:0f:e5:01:42: f3:ac:16:75:95:e1:cf:50:65:01:78:d7:71:0c:83:18:be:87: 06:48:bd:5c:98:cf:99:0a:60:72:53:33:11:b1:74:c0:05:57: 12:e8:44:5a:41:31:e7:a2:cb:32:1f:21:17:1f:22:42:96:19: be:57:2e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0gNIW2Y+qW467AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MGEzZmU5MGEtYWMxNy00OWU3LTk1MjUtMTZiZjJmMzhlY2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLkVreTpqu8DEcsgM/1eLlSKX7hKutDPhER+ eLWdAQyrHtZeH8MVRciWKyieVFEmV7NXvYvnzMDkXkWhqhHWOwGhDmUG8fYyyDuY E2PpdWevcmuvyzmV4lF5GFdoww06KlRpLkU2T9ySD68WFY6qk3az0ysoN2n5pM6z jCw4V22/4YebA1h9FVQDpU9swYipLA+AFchvdQGzgVsVX/RSB6wzONgOWxT2RbuM jiQGtv4hb1e6MpyvKsT0Ir8XKcMEeRWuyuX7XBTFf+CsdXNsSKNLThUKqVlCmGnq YFchIvjayNJAV2xLMaZpL70qsSgTT6clpZUaVTHzKepkiJgGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGv3cCNZnWMEOX8+QgWD9MirFherMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNTY3MjNhNGMtMWRlOS0z YWNkLTgxNGYtZjczNWFkZTA0NTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACH49ewAjGyAdvjuBb1/m+ynYcGInB/gMr4+fCKYCe9pWSog6fiA4dnJ D8xFYtgIQ5BNJbn/8fMglE9BpTmGkphgIVbnGYTvUB+A0sGkiLpKOyN95uEljxse XLuxOCjem9fpLBgwR5lcmGSiPdXETRFQ/U+5aXjUqdIUOWdBm+VP8shaaWImPxrL t9c8fjksuJGmCrzjLho5lX5wgn6eMtMXVEYUJw9Ypr6yNnmANSWIWsBaGYbFWeJ0 0+1nG4o5cKICD+UBQvOsFnWV4c9QZQF413EMgxi+hwZIvVyYz5kKYHJTMxGxdMAF VxLoRFpBMeeiyzIfIRcfIkKWGb5XLhM= -----END CERTIFICATE-----Generated at Sun Jun 15 11:53:00 2025 by rpki-client