$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: IKeMoewe+hyrZ5wTJdUBdFjY/uGLoDzR8s35vAlfHus= Subject key identifier: 35:91:A1:0E:07:E5:11:F3:8D:26:17:B3:FF:50:DA:D0:1A:33:20:2D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A3B7AF25D168B80541C98B1C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Wed 18 Jun 2025 13:01:06 +0000 ROA not before: Wed 18 Jun 2025 13:01:06 +0000 ROA not after: Tue 16 Sep 2025 13:01:06 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3b:7a:f2:5d:16:8b:80:54:1c:98:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 18 13:01:06 2025 GMT Not After : Sep 16 13:01:06 2025 GMT Subject: CN=9ed77944-0f1c-4fd6-9c6d-f74d8cdb0673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:3d:bc:30:ec:3a:a1:00:fb:6e:36:95:84: 51:a0:79:ad:39:fa:cc:06:e5:52:ac:04:e9:66:d0: 5e:02:a5:b3:76:4f:79:38:a6:e1:fd:a3:6d:3c:67: 18:7f:87:83:a9:ba:80:a6:ae:33:5f:70:df:b2:a5: cf:a1:87:49:41:69:ac:85:ea:58:75:a0:4a:8f:99: e1:a4:86:87:aa:9f:6b:71:b0:10:83:56:c7:22:2d: 61:5c:ce:ca:2b:ce:82:c9:ca:48:6f:e5:ed:96:07: a3:d2:b9:24:2b:8c:34:c1:8a:65:5c:c9:ca:40:79: ea:33:d7:0d:7d:44:9e:73:66:11:72:69:dd:8d:a1: 3b:67:0e:bc:14:62:7d:31:52:73:f7:a4:37:2d:dc: 3e:dc:ef:77:af:59:33:4c:5a:bd:20:4e:7a:89:ce: f1:03:10:f6:44:f2:b7:b5:35:3e:fa:06:16:f9:ee: 45:88:fb:8b:53:0b:9c:df:92:07:12:16:a7:c4:d8: ae:0d:f9:18:86:3c:16:32:d3:8d:65:90:45:8c:20: ba:bc:1f:c9:98:d1:3c:bb:81:3f:f7:57:fc:d3:5e: 5f:13:30:26:a0:a7:6c:33:1e:c1:74:b9:ae:0d:f5: fe:e1:1a:45:a6:e6:46:10:19:d1:a0:5a:a9:8e:e7: 48:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:91:A1:0E:07:E5:11:F3:8D:26:17:B3:FF:50:DA:D0:1A:33:20:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:ff:7f:27:bc:a6:90:6f:cd:a1:6f:a8:7b:e1:ff:7e:24:bb: 4a:ac:9c:2d:2a:28:8a:0f:15:74:4d:d2:78:8a:9b:37:c7:0f: 33:42:41:15:08:bf:e1:d8:fc:21:ce:04:db:68:05:17:85:e6: 70:7b:bf:44:22:8c:4c:02:bd:0e:26:a9:3e:d8:1b:3b:27:05: 22:7c:2a:20:35:9a:69:00:ca:32:a1:be:5d:2a:7a:5d:f6:2a: d2:01:65:27:d1:47:9d:b1:53:18:11:ca:08:90:41:71:07:7a: 64:7d:dd:01:3c:91:3b:0b:98:b3:94:58:61:f1:95:98:6e:59: 4e:85:d6:ac:88:4f:eb:9c:1a:ea:1d:e0:7a:9f:cf:91:f7:81: 10:1f:9a:ee:bd:68:83:82:52:61:fb:ca:6a:e2:81:5c:1b:a0: 31:37:32:cb:54:38:5b:95:00:58:80:1d:d1:c4:1c:7f:ce:82: 96:55:7c:06:b9:fc:95:00:3c:9f:03:b9:3f:b3:f6:74:ac:17: f1:7a:a3:36:e8:23:04:9d:11:d7:38:2e:c3:1c:2b:6f:9d:35: de:cb:bf:89:3c:99:90:fc:1e:28:3e:ff:8f:97:2f:b4:10:be: a8:27:24:c6:74:e5:3d:45:70:a7:c8:71:33:fb:04:43:f6:b6: 7e:07:de:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evJdFouAVByYscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk OWVkNzc5NDQtMGYxYy00ZmQ2LTljNmQtZjc0ZDhjZGIwNjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx049vDDsOqEA+242lYRRoHmtOfrMBuVSrATp ZtBeAqWzdk95OKbh/aNtPGcYf4eDqbqApq4zX3DfsqXPoYdJQWmshepYdaBKj5nh pIaHqp9rcbAQg1bHIi1hXM7KK86CycpIb+Xtlgej0rkkK4w0wYplXMnKQHnqM9cN fUSec2YRcmndjaE7Zw68FGJ9MVJz96Q3Ldw+3O93r1kzTFq9IE56ic7xAxD2RPK3 tTU++gYW+e5FiPuLUwuc35IHEhanxNiuDfkYhjwWMtONZZBFjCC6vB/JmNE8u4E/ 91f8015fEzAmoKdsMx7BdLmuDfX+4RpFpuZGEBnRoFqpjudI0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWRoQ4H5RHzjSYXs/9Q2tAaMyAtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAID/fye8ppBvzaFvqHvh/34ku0qsnC0qKIoPFXRN0niKmzfHDzNCQRUI v+HY/CHOBNtoBReF5nB7v0QijEwCvQ4mqT7YGzsnBSJ8KiA1mmkAyjKhvl0qel32 KtIBZSfRR52xUxgRygiQQXEHemR93QE8kTsLmLOUWGHxlZhuWU6F1qyIT+ucGuod 4Hqfz5H3gRAfmu69aIOCUmH7ymrigVwboDE3MstUOFuVAFiAHdHEHH/OgpZVfAa5 /JUAPJ8DuT+z9nSsF/F6ozboIwSdEdc4LsMcK2+dNd7Lv4k8mZD8Hig+/4+XL7QQ vqgnJMZ05T1FcKfIcTP7BEP2tn4H3j8= -----END CERTIFICATE-----Generated at Sun Jun 29 01:38:30 2025 by rpki-client