$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa File: e2210da3-0122-3d9c-898b-b2cc95169f2a.roa (raw, json) Hash identifier: c79RZ+FdP3YjjYHuiVaLmaCkDcw8oHQBlliKE8J3FA8= Subject key identifier: E8:20:D9:70:57:F5:25:A5:B5:76:B5:B6:7E:8F:74:3C:EB:44:97:67 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584BBE403B78BD3B5323F855DC80 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 7979 IP address blocks: 172.98.170.0/24 maxlen: 24 206.127.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:3b:78:bd:3b:53:23:f8:55:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=5426336a-3dd9-4445-8790-1a06b9efbeb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d6:ea:ea:9c:b7:c7:5d:4e:3d:fb:78:76:ef: 97:38:19:82:21:f6:78:54:83:eb:ed:4a:4e:ed:82: 7f:b2:de:d0:6a:d4:c8:39:62:6a:7a:94:e0:87:0f: 81:07:6a:c7:48:83:1c:da:1a:3b:7e:59:01:9c:47: c2:9b:c5:fe:7d:ab:65:df:ed:e4:00:2d:c4:19:d5: a3:ff:eb:11:0e:4b:84:a4:6b:69:00:54:36:6a:0a: 8e:bf:49:03:22:b7:cb:0f:74:a3:50:58:fc:55:c9: 49:83:2f:24:3d:fb:57:51:be:58:7c:33:cb:70:16: a7:c1:ee:c2:ed:22:7f:c4:d2:ad:1b:52:75:56:d3: 62:5f:9c:1d:20:92:23:1b:0f:2f:8e:21:02:1c:71: ba:83:dd:79:d0:be:1a:e9:57:e7:05:fe:be:be:81: 35:ea:b0:c1:30:91:72:7f:db:b9:b3:86:6d:41:48: 89:3c:8d:0f:37:81:5c:02:c8:ee:59:11:da:87:f4: 23:ea:0e:6c:34:d2:39:7b:76:e7:c6:97:f7:bf:01: f0:4e:a1:64:44:33:11:e9:be:18:4d:15:85:2a:5e: 83:9e:24:18:9e:e7:ec:3d:83:a6:fc:cc:c6:cb:d5: 49:00:b1:f3:2d:85:00:97:e2:f0:9f:1c:9a:58:ca: dd:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:20:D9:70:57:F5:25:A5:B5:76:B5:B6:7E:8F:74:3C:EB:44:97:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.170.0/24 206.127.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:5d:65:27:21:9b:02:c6:ff:b5:b1:cc:bd:a0:90:85:ff:5a: e5:ff:f7:17:ff:0a:9d:80:30:07:da:6b:c3:7b:7f:45:71:2d: e9:d5:c7:a3:9c:78:ce:b4:b5:89:0a:38:41:f1:a8:b7:c6:30: 50:9e:71:aa:dd:d9:48:fb:ca:61:77:9d:41:47:df:47:11:b9: 99:23:d8:08:f0:85:e6:c5:11:f1:c3:9c:49:00:65:7a:84:fc: 42:51:f6:13:05:d6:79:6e:cb:9f:ef:25:9a:4e:60:98:48:61: 15:5a:57:45:e9:6f:7a:5f:fc:e5:f0:ce:0d:f9:53:8d:42:9e: 84:ce:51:74:ab:8a:51:a0:3d:f6:7b:85:0b:ae:97:80:be:8b: 32:a6:89:12:21:50:f4:0d:0c:98:fd:8d:4f:80:61:59:1c:10: 25:03:7a:0a:ca:c5:c7:6e:83:0e:62:19:d5:b1:86:62:0f:83: 07:bf:d7:2d:2e:a8:77:19:e9:af:01:d6:00:7e:77:4e:82:16: 26:68:07:09:f4:e1:29:0b:4e:9f:02:bf:94:a5:87:73:d4:93: 48:1f:fc:8e:ec:3c:08:3c:51:7a:71:4d:76:f6:fa:e0:0d:b2: 13:dc:a1:96:4d:18:fc:8c:92:a7:d0:38:49:87:73:51:c3:a9: 5a:a9:b4:80 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEu+QDt4vTtTI/hV3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk NTQyNjMzNmEtM2RkOS00NDQ1LTg3OTAtMWEwNmI5ZWZiZWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9bq6py3x11OPft4du+XOBmCIfZ4VIPr7UpO 7YJ/st7QatTIOWJqepTghw+BB2rHSIMc2ho7flkBnEfCm8X+fatl3+3kAC3EGdWj /+sRDkuEpGtpAFQ2agqOv0kDIrfLD3SjUFj8VclJgy8kPftXUb5YfDPLcBanwe7C 7SJ/xNKtG1J1VtNiX5wdIJIjGw8vjiECHHG6g9150L4a6VfnBf6+voE16rDBMJFy f9u5s4ZtQUiJPI0PN4FcAsjuWRHah/Qj6g5sNNI5e3bnxpf3vwHwTqFkRDMR6b4Y TRWFKl6DniQYnufsPYOm/MzGy9VJALHzLYUAl+LwnxyaWMrd5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOgg2XBX9SWltXa1tn6PdDzrRJdnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTIyMTBkYTMtMDEyMi0z ZDljLTg5OGItYjJjYzk1MTY5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKqAwQA zn/UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAG5dZSchmwLG/7WxzL2gkIX/WuX/9xf/Cp2AMAfaa8N7f0Vx LenVx6OceM60tYkKOEHxqLfGMFCecard2Uj7ymF3nUFH30cRuZkj2AjwhebFEfHD nEkAZXqE/EJR9hMF1nluy5/vJZpOYJhIYRVaV0Xpb3pf/OXwzg35U41CnoTOUXSr ilGgPfZ7hQuul4C+izKmiRIhUPQNDJj9jU+AYVkcECUDegrKxcdugw5iGdWxhmIP gwe/1y0uqHcZ6a8B1gB+d06CFiZoBwn04SkLTp8Cv5Slh3PUk0gf/I7sPAg8UXpx TXb2+uANshPcoZZNGPyMkqfQOEmHc1HDqVqptIA= -----END CERTIFICATE-----Generated at Wed Nov 5 10:45:20 2025 by rpki-client