$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa File: 1034cd89-feb8-3e94-8574-e39249d96e14.roa (raw, json) Hash identifier: R+1/bChzYjnBzjurkoEvHp0cHfmkXcp7XGa3r0e81aA= Subject key identifier: 3F:66:74:6A:9C:F7:1F:85:53:A9:27:C0:86:F8:B2:C1:C5:A7:42:3A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584B8917751ED5AF26579E5DABA0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa Signing time: Thu 16 Oct 2025 01:00:30 +0000 ROA not before: Thu 16 Oct 2025 01:00:30 +0000 ROA not after: Wed 14 Jan 2026 02:00:30 +0000 asID: 7029 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:89:17:75:1e:d5:af:26:57:9e:5d:ab:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 16 01:00:30 2025 GMT Not After : Jan 14 02:00:30 2026 GMT Subject: CN=030ebd84-c464-486f-802f-254ece34d615 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d3:c8:4a:85:fd:7b:12:98:be:db:e6:78:81: e1:75:1f:7f:f3:e9:80:5f:7b:33:38:9e:78:5f:1f: 36:0b:7e:e3:f8:a7:6f:f4:39:00:fc:5e:e9:7a:cc: cb:6d:32:d6:57:1d:ce:76:4f:96:5b:fd:32:ce:dd: d0:25:59:bc:bf:19:1d:4b:b6:c2:43:04:4d:62:05: c5:c5:fd:36:af:0c:73:2d:b1:43:07:c1:3e:d0:ce: 85:41:05:5f:c9:d7:5e:6c:3a:25:9b:c9:80:31:bf: 7a:f3:8a:db:cc:61:80:89:ac:fc:23:03:56:50:8e: f8:a8:62:e6:c3:a5:10:1e:e7:5b:b9:ce:44:6b:27: b5:8f:c8:bd:35:bd:cf:8d:f2:71:6a:49:1e:98:d2: 03:da:b0:75:99:40:42:b2:d4:89:96:11:48:e9:dd: c9:7c:54:97:68:c2:2e:54:4f:9c:4e:44:1e:c0:ff: fa:ac:f8:a5:21:d9:90:1f:c0:1f:ae:d2:a0:18:34: 5d:81:7b:f0:34:f5:0c:f5:0f:ea:3e:14:58:7a:f9: 0d:63:76:c1:95:e0:62:ce:4d:ab:d2:92:53:d1:3d: c3:ce:ea:14:ae:b0:18:92:49:67:e7:a4:39:92:d4: b8:88:42:12:87:81:33:06:6c:90:54:e8:29:de:88: b6:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:66:74:6A:9C:F7:1F:85:53:A9:27:C0:86:F8:B2:C1:C5:A7:42:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:a5:42:a4:10:d0:3b:e1:ed:37:2f:8b:4e:5e:b2:b7:70:51: 23:ff:1c:d0:f1:0d:d4:25:96:9e:94:45:f5:fd:c8:36:58:64: 29:e6:45:6e:ea:3e:57:43:f1:5d:f7:31:e6:27:ba:e1:d3:87: 31:49:37:6e:6b:95:e9:4e:78:4f:f7:28:8e:c4:a9:48:93:dc: c6:7d:d9:ba:fa:e0:2f:00:a2:e3:73:cb:1a:67:d2:c1:15:c5: 27:15:27:de:e8:80:41:69:d6:5b:76:c7:57:53:22:b2:e1:9d: ab:cf:ec:56:88:14:24:85:79:9c:87:6b:79:6c:33:e0:cf:1a: f6:ec:17:06:e5:43:0d:c9:61:70:da:5d:2a:ec:72:f5:4d:b1: dc:07:69:44:30:e4:78:fe:ae:9f:a6:78:48:b8:9e:ab:d6:b1: fb:22:bb:4e:50:9a:5a:79:14:ba:9d:40:e3:95:70:fa:a1:45: 61:3e:33:d3:74:8a:71:22:44:b3:65:f0:c7:57:3c:5b:07:a1: 29:46:fd:2b:4a:1c:83:82:09:22:c3:b9:8b:89:a2:a7:75:be: 75:8b:ed:48:2c:a5:36:99:68:7c:55:19:4e:6f:ef:9f:04:70: 94:04:f6:1a:6d:9e:31:17:cb:74:98:62:b2:14:4e:71:15:57: ff:87:18:0b -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEuJF3Ue1a8mV55dq6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MTAxNjAxMDAzMFoXDTI2MDExNDAyMDAzMFowLzEtMCsGA1UEAxMk MDMwZWJkODQtYzQ2NC00ODZmLTgwMmYtMjU0ZWNlMzRkNjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltPISoX9exKYvtvmeIHhdR9/8+mAX3szOJ54 Xx82C37j+Kdv9DkA/F7peszLbTLWVx3Odk+WW/0yzt3QJVm8vxkdS7bCQwRNYgXF xf02rwxzLbFDB8E+0M6FQQVfyddebDolm8mAMb9684rbzGGAiaz8IwNWUI74qGLm w6UQHudbuc5Eaye1j8i9Nb3PjfJxakkemNID2rB1mUBCstSJlhFI6d3JfFSXaMIu VE+cTkQewP/6rPilIdmQH8AfrtKgGDRdgXvwNPUM9Q/qPhRYevkNY3bBleBizk2r 0pJT0T3DzuoUrrAYkkln56Q5ktS4iEISh4EzBmyQVOgp3oi26wIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFD9mdGqc9x+FU6knwIb4ssHFp0I6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTAzNGNkODktZmViOC0z ZTk0LTg1NzQtZTM5MjQ5ZDk2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGWlQqQQ0Dvh7Tcvi05esrdwUSP/HNDx DdQllp6URfX9yDZYZCnmRW7qPldD8V33MeYnuuHThzFJN25rlelOeE/3KI7EqUiT 3MZ92br64C8AouNzyxpn0sEVxScVJ97ogEFp1lt2x1dTIrLhnavP7FaIFCSFeZyH a3lsM+DPGvbsFwblQw3JYXDaXSrscvVNsdwHaUQw5Hj+rp+meEi4nqvWsfsiu05Q mlp5FLqdQOOVcPqhRWE+M9N0inEiRLNl8MdXPFsHoSlG/StKHIOCCSLDuYuJoqd1 vnWL7UgspTaZaHxVGU5v758EcJQE9hptnjEXy3SYYrIUTnEVV/+HGAs= -----END CERTIFICATE-----Generated at Sun Oct 19 17:26:59 2025 by rpki-client