$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa File: 70627356-922f-3594-8e0b-543ce961c033.roa (raw, json) Hash identifier: DYKnsTzHBDCwShe6Ge1sp3rdI6BwIS7gtl4bVls2v3c= Subject key identifier: F4:53:15:7B:EF:C1:16:6F:D8:BF:FB:8F:5C:53:10:43:57:E5:9B:15 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A81464443FBEB93BC68E747A0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 9009 IP address blocks: 172.98.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:44:43:fb:eb:93:bc:68:e7:47:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=ad967808-e3b7-42e5-87e5-e1ed9c22bfd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:c1:4f:78:fa:b4:60:6f:b8:b8:dd:bc:16: 3b:f7:a4:b4:3b:09:00:49:97:be:6f:6b:64:7b:57: 26:8c:8e:06:b6:84:89:81:af:67:f3:e2:b1:c4:c9: 72:8f:60:97:17:1f:64:36:7d:d0:cb:18:d9:bf:9e: 02:37:07:39:f0:ec:b7:12:44:dd:ad:16:a4:5d:73: 93:9e:7e:9b:78:fd:dc:5d:78:be:97:5e:4b:02:ac: f6:f2:5b:fc:c9:8d:77:e3:62:cb:2d:e8:8f:e1:0c: 83:76:6a:ba:0d:6a:15:d8:ee:1e:66:99:b3:29:e6: 49:54:36:3b:a1:af:a5:a3:55:b9:08:0a:c7:80:7c: 28:56:89:f7:46:dd:7f:00:e4:d1:44:0c:e7:06:08: 04:6a:3a:90:5d:d5:32:34:de:e6:83:4f:3f:43:f0: f9:a3:11:c7:ce:26:70:6f:79:08:8d:ac:61:59:92: 60:ad:6e:2a:25:c1:82:40:32:05:ce:72:b1:28:d0: dd:3e:eb:31:b2:a3:51:1a:1b:fe:81:33:be:b0:33: 47:6b:96:f4:45:eb:10:0f:aa:cd:a4:6b:21:77:14: bf:cf:66:e4:96:ed:67:0f:21:48:2f:b9:5a:47:17: 48:7a:04:ac:5d:f4:62:34:03:9c:11:ad:d5:74:8f: 05:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:53:15:7B:EF:C1:16:6F:D8:BF:FB:8F:5C:53:10:43:57:E5:9B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/70627356-922f-3594-8e0b-543ce961c033.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:0a:a2:e2:4f:6a:6c:23:d5:95:9f:b8:24:61:11:3f:f5:5a: 71:33:a3:6d:46:d9:26:13:9f:00:5a:99:11:0a:e0:24:be:ae: 17:78:3e:0d:04:7e:e1:63:cf:8a:28:3f:13:3c:13:24:1c:01: f8:97:4d:ad:97:a0:52:fb:34:f3:60:13:7e:d0:4b:46:85:a6: 87:4a:c0:6a:1e:bc:60:29:b0:12:de:fe:db:24:4d:38:6d:88: 4d:41:65:d4:c9:e0:be:9f:d7:6d:68:87:01:06:60:94:11:a8: 1c:ee:f0:3b:e2:21:b5:6e:dc:ae:e2:31:2b:51:ff:f5:8c:75: 4f:dd:92:23:b1:85:b0:34:4d:ee:01:83:bb:5c:ff:63:51:3e: 7c:aa:c1:7b:ec:1a:e5:48:da:6c:45:9e:34:3f:7a:b3:1d:d9: 8c:40:f2:fb:de:f1:05:b3:88:5b:20:26:2c:37:08:5b:c5:00: 3a:d2:bb:58:23:85:96:16:6e:39:a0:94:33:f6:a5:a4:18:fa: a6:a3:16:99:4c:cd:26:e2:cb:51:6a:cb:d2:16:53:bc:2e:90: b3:67:d6:17:52:6a:74:6c:9a:dc:7c:3c:e1:c4:fb:f9:ec:b8: ca:73:11:ef:b7:f4:bb:9e:57:40:69:ff:77:73:d1:e0:c0:01: 72:5b:64:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkRD++uTvGjnR6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk YWQ5Njc4MDgtZTNiNy00MmU1LTg3ZTUtZTFlZDljMjJiZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kPBT3j6tGBvuLjdvBY796S0OwkASZe+b2tk e1cmjI4GtoSJga9n8+KxxMlyj2CXFx9kNn3QyxjZv54CNwc58Oy3EkTdrRakXXOT nn6beP3cXXi+l15LAqz28lv8yY1342LLLeiP4QyDdmq6DWoV2O4eZpmzKeZJVDY7 oa+lo1W5CArHgHwoVon3Rt1/AOTRRAznBggEajqQXdUyNN7mg08/Q/D5oxHHziZw b3kIjaxhWZJgrW4qJcGCQDIFznKxKNDdPusxsqNRGhv+gTO+sDNHa5b0ResQD6rN pGshdxS/z2bklu1nDyFIL7laRxdIegSsXfRiNAOcEa3VdI8F/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRTFXvvwRZv2L/7j1xTEENX5ZsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzA2MjczNTYtOTIyZi0z NTk0LThlMGItNTQzY2U5NjFjMDMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8KouJPamwj1ZWfuCRhET/1WnEzo21G2SYTnwBamREK4CS+rhd4Pg0E fuFjz4ooPxM8EyQcAfiXTa2XoFL7NPNgE37QS0aFpodKwGoevGApsBLe/tskTTht iE1BZdTJ4L6f121ohwEGYJQRqBzu8DviIbVu3K7iMStR//WMdU/dkiOxhbA0Te4B g7tc/2NRPnyqwXvsGuVI2mxFnjQ/erMd2YxA8vve8QWziFsgJiw3CFvFADrSu1gj hZYWbjmglDP2paQY+qajFplMzSbiy1Fqy9IWU7wukLNn1hdSanRsmtx8POHE+/ns uMpzEe+39LueV0Bp/3dz0eDAAXJbZAc= -----END CERTIFICATE-----Generated at Wed Aug 6 12:42:35 2025 by rpki-client