$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa File: 9a6bc565-0a69-3578-89a9-774fc42e90c2.roa (raw, json) Hash identifier: 5zYHFjBt8HaclaLQjBA+JWCxMVFw75hChLz9oDKSWqg= Subject key identifier: 66:B6:69:13:DB:88:64:6C:D0:DF:E5:18:F1:51:65:57:E3:50:62:64 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AA85BB311B47360C3039EDF80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa Signing time: Sun 27 Jul 2025 13:01:04 +0000 ROA not before: Sun 27 Jul 2025 13:01:04 +0000 ROA not after: Sat 25 Oct 2025 13:01:04 +0000 asID: 399989 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a8:5b:b3:11:b4:73:60:c3:03:9e:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 27 13:01:04 2025 GMT Not After : Oct 25 13:01:04 2025 GMT Subject: CN=d5ac4a2c-16dd-423b-8bef-1bb964f6fb83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:60:71:9d:a3:65:d9:fe:61:9b:72:40:f9: 48:46:8f:4a:4b:c8:da:76:da:c1:75:db:e5:e1:66: 2c:25:78:65:e7:10:9b:f5:99:07:fd:bb:93:09:88: 98:2f:46:ef:50:f2:71:e6:f4:4b:39:6d:c7:38:4b: ca:5d:32:93:de:3e:ca:56:f5:2d:9a:2b:dc:56:f4: 09:dd:4b:c2:48:3a:8f:99:a1:40:5a:2c:01:b9:73: 80:f8:8a:94:21:b3:a1:0f:22:e5:77:17:19:13:94: 6b:e7:74:fa:ed:2c:3f:a1:e0:db:7b:8f:45:0a:91: 3d:f7:98:dc:7a:7d:14:9f:c0:5d:e6:82:ad:10:39: 7f:f1:34:ca:d9:a3:f3:72:72:fe:cd:ad:1f:11:45: dc:54:0a:e3:3f:10:f4:7b:fb:69:a1:4b:18:97:3b: 15:81:3f:44:0c:be:8b:66:e6:08:a0:68:ea:d0:8a: fc:5a:5b:40:64:c0:05:11:0e:3c:28:70:78:86:25: 7c:b8:2c:1c:62:44:de:c7:54:40:3d:30:f0:9a:e0: 79:c4:0f:04:b3:19:e5:98:de:31:25:c4:94:96:38: fa:82:15:fa:79:96:a0:b8:c4:9e:bd:d7:6f:9e:12: 6e:50:54:e2:ad:f2:f4:e3:f5:46:fd:9d:83:52:27: 59:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B6:69:13:DB:88:64:6C:D0:DF:E5:18:F1:51:65:57:E3:50:62:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:1b:50:d9:c6:ad:bd:85:1f:86:2d:8c:4d:87:a9:5f:4b:64: 3f:f1:03:b8:40:f8:82:14:cf:28:f4:33:bf:b1:34:40:32:81: 9a:a1:47:b9:bf:91:59:28:16:ab:60:29:28:61:4d:1a:3d:14: a4:87:31:64:00:ac:47:25:06:6e:b6:f3:76:fa:97:d4:e8:a8: 53:8a:f7:e8:0e:16:bf:62:b0:e6:b1:51:ae:76:44:3c:46:80: 65:b7:45:82:cd:a5:62:e4:69:9d:03:4f:19:30:d8:f5:ed:0f: 4d:10:92:5d:2d:d4:57:f6:20:23:50:d2:b6:1c:a1:55:f3:3a: 6f:73:ee:e1:51:eb:83:6d:8b:ad:1e:ae:29:94:42:1b:34:7a: b8:0e:11:f7:8e:77:f9:aa:16:88:14:37:be:58:53:04:88:19: 57:74:8b:41:5c:1d:e6:67:fa:f2:ac:67:d7:78:ee:63:f3:f3: 93:46:e0:39:e6:2f:24:48:6c:23:e4:4f:5d:58:2f:25:b7:70: 91:1b:2f:5d:48:b5:df:13:41:f2:28:4d:46:b6:f8:27:cf:a0: c9:32:fa:3c:31:5f:bf:e0:ab:f4:3d:1e:3c:ec:f0:fa:b0:bb: a6:11:a9:f4:24:12:f2:ea:74:fb:a0:3f:1c:cb:28:ef:19:29: c1:89:bf:40 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEqoW7MRtHNgwwOe34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk ZDVhYzRhMmMtMTZkZC00MjNiLThiZWYtMWJiOTY0ZjZmYjgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4tgcZ2jZdn+YZtyQPlIRo9KS8jadtrBddvl 4WYsJXhl5xCb9ZkH/buTCYiYL0bvUPJx5vRLOW3HOEvKXTKT3j7KVvUtmivcVvQJ 3UvCSDqPmaFAWiwBuXOA+IqUIbOhDyLldxcZE5Rr53T67Sw/oeDbe49FCpE995jc en0Un8Bd5oKtEDl/8TTK2aPzcnL+za0fEUXcVArjPxD0e/tpoUsYlzsVgT9EDL6L ZuYIoGjq0Ir8WltAZMAFEQ48KHB4hiV8uCwcYkTex1RAPTDwmuB5xA8EsxnlmN4x JcSUljj6ghX6eZaguMSevddvnhJuUFTirfL04/VG/Z2DUidZfwIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFGa2aRPbiGRs0N/lGPFRZVfjUGJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOWE2YmM1NjUtMGE2OS0z NTc4LTg5YTktNzc0ZmM0MmU5MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAIkbUNnGrb2FH4YtjE2HqV9LZD/xA7hA +IIUzyj0M7+xNEAygZqhR7m/kVkoFqtgKShhTRo9FKSHMWQArEclBm6283b6l9To qFOK9+gOFr9isOaxUa52RDxGgGW3RYLNpWLkaZ0DTxkw2PXtD00Qkl0t1Ff2ICNQ 0rYcoVXzOm9z7uFR64Nti60erimUQhs0ergOEfeOd/mqFogUN75YUwSIGVd0i0Fc HeZn+vKsZ9d47mPz85NG4DnmLyRIbCPkT11YLyW3cJEbL11Itd8TQfIoTUa2+CfP oMky+jwxX7/gq/Q9Hjzs8Pqwu6YRqfQkEvLqdPugPxzLKO8ZKcGJv0A= -----END CERTIFICATE-----Generated at Mon Aug 4 14:47:52 2025 by rpki-client