$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa File: fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa (raw, json) Hash identifier: rFOV50xCkXi/30NQr4Obju61w8T4Wsrv2It1FUGeNW4= Subject key identifier: 06:02:E1:40:A8:FF:49:6D:B5:87:D9:BF:51:C3:DB:51:09:C1:E1:75 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A1E2AA70982D07FDBC937B180 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa Signing time: Sun 08 Jun 2025 01:00:49 +0000 ROA not before: Sun 08 Jun 2025 01:00:49 +0000 ROA not after: Sat 06 Sep 2025 01:00:49 +0000 asID: 9009 IP address blocks: 172.98.164.0/24 maxlen: 24 172.98.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:1e:2a:a7:09:82:d0:7f:db:c9:37:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 8 01:00:49 2025 GMT Not After : Sep 6 01:00:49 2025 GMT Subject: CN=6651b7f5-6c8a-47b8-a9c2-1ffa8ab6c8fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f8:2d:b4:4d:a7:a7:d3:12:8c:a2:52:1e:e8: 49:04:01:fb:8f:9d:1a:bd:f2:6f:7a:67:63:1e:ed: fb:3e:18:31:3a:7d:e5:25:0c:18:51:37:ba:28:44: e5:ea:3f:b2:b9:ed:08:a8:65:d1:af:9b:41:1c:fe: 63:51:44:02:19:fc:d3:83:bf:4e:73:24:ee:54:f5: b7:96:a7:6d:68:5d:e7:a4:6a:42:3b:23:c7:45:bb: fd:94:a2:de:c8:0e:ed:13:89:48:03:0c:06:ad:35: 94:bc:05:95:30:29:19:85:c3:fa:a1:f1:69:0e:10: 17:aa:e0:80:f5:7a:97:04:b0:14:f7:10:15:dc:d5: c3:c3:e2:7f:fd:0c:5e:e6:df:2b:bf:af:e8:19:02: a5:c3:e9:78:e4:b0:61:da:01:65:d5:e8:02:ae:2d: db:b3:6c:1b:76:84:9b:65:7f:6e:3f:ad:23:c7:24: b4:87:6e:ab:3a:7f:9a:9e:09:24:ef:f2:02:a4:04: 26:2a:85:e6:52:af:0e:d7:4d:4b:51:47:42:1e:eb: 3b:da:f1:91:db:a1:bf:28:2b:ce:6d:d7:7f:25:c1: 0a:e1:e2:c3:23:a4:cd:96:3a:f5:34:96:75:b6:fa: 42:3a:85:d7:8b:7f:9f:70:8d:33:2f:bd:46:27:ef: 36:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:E1:40:A8:FF:49:6D:B5:87:D9:BF:51:C3:DB:51:09:C1:E1:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/fcd75202-2bc5-36de-a5a2-3c0b00a81f31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.164.0/24 172.98.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:74:c3:13:e2:dc:18:1d:09:2e:78:c0:1f:5b:ca:bf:a4:5f: 26:14:5d:b8:5b:8a:51:02:2e:30:3c:6f:dd:75:69:97:44:bc: f8:ce:85:d7:e1:6b:45:8d:bc:40:2d:a0:fe:9b:e5:24:57:eb: 12:6a:5f:79:d1:11:c8:d6:f8:b7:72:06:5c:87:bd:2e:29:33: 05:c3:5f:3f:f7:86:5d:6c:16:06:08:81:e9:64:b2:68:52:b0: 81:b1:79:5e:88:44:01:c2:8f:be:bf:a3:07:5d:7c:40:14:a3: c5:66:88:b5:b6:79:85:8e:73:d2:cb:5d:18:98:f0:12:c4:1a: 7f:1b:24:61:37:e5:3f:04:7a:a5:02:4a:c9:96:15:51:af:59: 1b:10:3d:30:ef:49:9c:a1:f3:d0:1f:8e:cd:d7:57:b6:82:c4: 2a:11:b7:e9:0b:f7:b7:ad:cb:16:74:cb:38:66:5d:04:25:01: 8b:b0:df:57:b8:da:61:4f:c2:e8:3a:1d:77:68:9c:c2:09:ac: 86:71:80:c0:fe:d5:7b:41:b1:93:63:9b:92:40:33:bf:71:8f: 3c:8f:26:08:9c:8a:85:81:8c:b5:98:e9:f7:26:3b:dc:da:56: aa:b4:5d:0e:5f:38:61:3b:34:7e:2f:ba:da:f4:1b:17:7d:27: 59:60:d2:1e -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoeKqcJgtB/28k3sYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk NjY1MWI3ZjUtNmM4YS00N2I4LWE5YzItMWZmYThhYjZjOGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/gttE2np9MSjKJSHuhJBAH7j50avfJvemdj Hu37PhgxOn3lJQwYUTe6KETl6j+yue0IqGXRr5tBHP5jUUQCGfzTg79OcyTuVPW3 lqdtaF3npGpCOyPHRbv9lKLeyA7tE4lIAwwGrTWUvAWVMCkZhcP6ofFpDhAXquCA 9XqXBLAU9xAV3NXDw+J//Qxe5t8rv6/oGQKlw+l45LBh2gFl1egCri3bs2wbdoSb ZX9uP60jxyS0h26rOn+angkk7/ICpAQmKoXmUq8O101LUUdCHus72vGR26G/KCvO bdd/JcEK4eLDI6TNljr1NJZ1tvpCOoXXi3+fcI0zL71GJ+821QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFAYC4UCo/0lttYfZv1HD21EJweF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZmNkNzUyMDItMmJjNS0z NmRlLWE1YTItM2MwYjAwYTgxZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKkAwQA rGK6MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAp0wxPi3BgdCS54wB9byr+kXyYUXbhbilECLjA8b911aZdE vPjOhdfha0WNvEAtoP6b5SRX6xJqX3nREcjW+LdyBlyHvS4pMwXDXz/3hl1sFgYI gelksmhSsIGxeV6IRAHCj76/owddfEAUo8VmiLW2eYWOc9LLXRiY8BLEGn8bJGE3 5T8EeqUCSsmWFVGvWRsQPTDvSZyh89Afjs3XV7aCxCoRt+kL97etyxZ0yzhmXQQl AYuw31e42mFPwug6HXdonMIJrIZxgMD+1XtBsZNjm5JAM79xjzyPJgicioWBjLWY 6fcmO9zaVqq0XQ5fOGE7NH4vutr0Gxd9J1lg0h4= -----END CERTIFICATE-----Generated at Sun Jun 15 02:45:36 2025 by rpki-client