$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: hywR4n+3s2icnnq/ISXyno97DoYllM5P7Gm1x1W7t9k= Subject key identifier: 35:27:38:56:9C:D8:F2:41:7F:6D:88:E3:D9:ED:9E:84:A1:06:C0:68 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A9FFBA8621F01763D542C9C80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Thu 24 Jul 2025 13:01:02 +0000 ROA not before: Thu 24 Jul 2025 13:01:02 +0000 ROA not after: Wed 22 Oct 2025 13:01:02 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9f:fb:a8:62:1f:01:76:3d:54:2c:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jul 24 13:01:02 2025 GMT Not After : Oct 22 13:01:02 2025 GMT Subject: CN=f590d211-148a-42e1-a504-d45a846fe511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c0:75:b7:34:0b:6c:41:c0:96:eb:9e:c9:bd: 70:99:a8:46:81:7f:38:2a:a8:03:92:24:b0:88:f0: 67:21:5d:60:39:27:10:55:c9:20:95:c1:8f:6a:42: 85:dd:85:fe:82:66:b1:19:f5:20:7a:69:3f:bc:79: ce:a5:a5:b6:cf:ae:66:ab:25:6b:98:c2:51:74:94: a1:83:ac:64:91:c1:34:d4:3a:44:34:24:94:f5:37: 0f:a1:7e:cc:b2:0f:62:f5:7d:f3:f2:f3:7b:db:ec: 57:76:2e:e8:64:c5:e7:f6:e2:aa:9c:e3:9f:7e:6c: 7d:99:0a:3d:f1:0a:e0:1a:0a:61:77:ad:ea:8b:d9: 36:c3:90:0e:17:d5:a3:cf:11:26:7f:a9:35:82:a1: 3a:67:83:a3:81:77:42:1b:4f:c1:17:64:c7:97:75: 0d:08:8b:9a:fe:34:4a:b0:5d:d4:b2:44:d7:32:d2: 9b:dd:7f:f2:c9:5f:e9:08:ad:96:1a:df:82:e9:ae: 7b:0e:9d:e6:fb:84:c9:d6:fd:2c:9d:88:80:e6:89: e5:4a:7a:ee:26:44:9a:bc:07:ab:33:f9:dc:dd:25: a4:2a:56:13:0e:0a:a1:3c:52:cd:31:8a:22:b7:ee: 07:c2:00:06:02:0a:4d:c2:1e:f4:14:1a:b9:99:3b: 76:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:27:38:56:9C:D8:F2:41:7F:6D:88:E3:D9:ED:9E:84:A1:06:C0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:39:29:81:7b:79:d9:12:47:a8:4f:5d:f4:a3:44:ac:82:c2: 32:10:4b:4f:24:f2:18:2a:a5:8d:e4:08:09:f2:d0:be:1b:13: 25:c9:9d:d7:f1:03:c6:2a:a5:3e:10:bc:bf:7d:24:06:43:fb: 9e:81:e8:d7:ea:96:2c:81:a0:46:25:f3:8f:00:b9:2b:d9:ea: 75:16:12:82:9a:91:26:b1:8a:ef:60:89:a5:67:4e:5f:49:d3: 97:8b:77:be:93:94:1d:30:66:b9:37:96:76:6d:72:de:be:d9: d0:3c:3e:59:b2:1d:a5:9f:a9:58:29:8d:49:37:06:4e:f8:d3: 8f:28:1c:b3:9d:b7:19:36:1c:0c:d3:7e:59:f4:26:23:62:48: d7:41:e2:1f:16:a3:28:62:c6:50:06:df:15:8c:95:0c:b3:7f: 7c:05:b2:59:71:c4:4f:0c:e5:c1:97:fa:b4:03:c8:bd:88:5a: 39:83:ef:b1:3e:36:82:6b:76:00:49:81:e7:bf:b0:b6:29:a4: b0:68:bd:e4:ab:28:c7:5f:d8:1b:66:2a:93:d7:4c:26:8b:37: 23:9d:55:a9:7f:c1:2b:b1:c1:e3:fe:30:0b:e2:ce:af:d0:4f: 6f:91:e3:c9:3e:eb:61:5e:69:7f:3a:d9:00:75:12:ab:04:d6: f1:38:77:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6hiHwF2PVQsnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk ZjU5MGQyMTEtMTQ4YS00MmUxLWE1MDQtZDQ1YTg0NmZlNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8B1tzQLbEHAluueyb1wmahGgX84KqgDkiSw iPBnIV1gOScQVckglcGPakKF3YX+gmaxGfUgemk/vHnOpaW2z65mqyVrmMJRdJSh g6xkkcE01DpENCSU9TcPoX7Msg9i9X3z8vN72+xXdi7oZMXn9uKqnOOffmx9mQo9 8QrgGgphd63qi9k2w5AOF9WjzxEmf6k1gqE6Z4OjgXdCG0/BF2THl3UNCIua/jRK sF3UskTXMtKb3X/yyV/pCK2WGt+C6a57Dp3m+4TJ1v0snYiA5onlSnruJkSavAer M/nc3SWkKlYTDgqhPFLNMYoit+4HwgAGAgpNwh70FBq5mTt2RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUnOFac2PJBf22I49ntnoShBsBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADo5KYF7edkSR6hPXfSjRKyCwjIQS08k8hgqpY3kCAny0L4bEyXJndfx A8YqpT4QvL99JAZD+56B6NfqliyBoEYl848AuSvZ6nUWEoKakSaxiu9giaVnTl9J 05eLd76TlB0wZrk3lnZtct6+2dA8PlmyHaWfqVgpjUk3Bk74048oHLOdtxk2HAzT fln0JiNiSNdB4h8WoyhixlAG3xWMlQyzf3wFsllxxE8M5cGX+rQDyL2IWjmD77E+ NoJrdgBJgee/sLYppLBoveSrKMdf2BtmKpPXTCaLNyOdVal/wSuxweP+MAvizq/Q T2+R48k+62FeaX862QB1EqsE1vE4d7E= -----END CERTIFICATE-----Generated at Mon Aug 4 22:16:14 2025 by rpki-client