$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa File: 79f9299b-0362-3137-aef0-5e220b4411a3.roa (raw, json) Hash identifier: AUanhEz1+wdHRMC1jfBR1gyGe4glcQWuNf5P0H806AY= Subject key identifier: 7A:EF:A2:63:DD:81:AD:EE:DE:E7:0C:4F:CD:AF:DB:56:F0:AB:5F:0B Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584AF0F13B02BF1E4A533A900380 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa Signing time: Fri 22 Aug 2025 13:00:41 +0000 ROA not before: Fri 22 Aug 2025 13:00:41 +0000 ROA not after: Thu 20 Nov 2025 14:00:41 +0000 asID: 205659 IP address blocks: 172.98.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f0:f1:3b:02:bf:1e:4a:53:3a:90:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 22 13:00:41 2025 GMT Not After : Nov 20 14:00:41 2025 GMT Subject: CN=b6bdc381-80de-42a4-8d0f-ec0cb6371140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a6:d0:5e:c1:a1:7c:1c:7f:b3:10:c8:4a:b1: de:3c:d2:f4:7f:2a:4d:e2:9b:5c:d5:4d:8c:3c:5c: 7b:4a:ca:25:cc:41:4a:5f:32:b5:35:6d:b7:5a:b9: 3a:c3:4d:e7:85:d8:2a:1c:7e:aa:8d:a2:89:c4:70: fd:ab:5f:4d:43:3d:9a:2a:2d:9c:bf:c5:bf:da:4f: ef:b3:5f:24:25:02:f7:b1:3c:83:1c:3d:a1:15:fb: 3f:5c:07:f2:cf:fb:7a:d5:94:eb:4f:be:cd:6c:6c: 63:77:2b:6e:84:2b:3f:cb:30:f0:35:ae:94:87:92: 7e:d0:ca:50:c1:68:88:63:f0:a8:9a:77:57:2f:83: 40:7f:35:09:b4:b1:85:ba:35:ff:82:20:3a:47:bc: 49:7d:8a:4f:dd:9e:e8:20:d5:46:8f:06:1a:bb:25: c8:77:74:cc:6c:ac:20:99:4b:8a:68:cb:cb:d9:38: 25:3d:6c:6b:98:0d:d6:e8:52:7c:2e:84:88:88:06: 46:08:96:75:cc:ef:c9:89:03:87:45:64:17:93:8a: 5b:09:bf:57:0b:e4:16:ba:52:de:33:88:2a:ea:57: 91:21:73:30:80:40:a6:c3:0f:88:ed:4a:82:9b:07: 7e:77:91:a5:95:7b:d6:c4:2f:13:3a:84:38:f1:e1: 3a:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EF:A2:63:DD:81:AD:EE:DE:E7:0C:4F:CD:AF:DB:56:F0:AB:5F:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/79f9299b-0362-3137-aef0-5e220b4411a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:1d:cc:b3:b3:54:29:19:8b:d5:4a:dc:7b:75:c4:95:ce:ad: 27:bd:f9:90:9d:07:2f:fa:c3:f1:4e:3d:43:1b:fe:f5:a2:12: f6:53:b5:9a:2e:48:5b:3e:94:25:8a:77:e7:41:02:d9:3a:f4: 8c:d6:34:a8:df:90:e9:d6:df:41:e0:d0:e2:b8:52:15:fb:2a: 88:9c:da:7f:38:95:d7:03:10:b1:d8:e0:0b:c4:1f:0d:5a:a3: ef:fb:16:03:17:3c:c8:ed:d8:b6:b5:38:d7:59:9f:b6:5a:8f: 67:d6:ef:be:cc:a3:56:f4:e0:d6:70:64:0d:b9:0e:a0:16:43: fb:f9:e7:12:f1:b7:bc:fc:18:1d:de:18:28:e5:dc:86:e1:f4: 39:e6:b6:7f:f8:6f:17:8c:27:5c:97:9a:06:d3:19:cd:72:0e: 97:23:aa:15:e2:16:f4:f1:d3:b3:68:da:47:18:4b:19:4f:5a: 23:56:4d:d6:e2:aa:15:dd:dd:c1:7f:22:fa:2e:d0:09:93:bc: 57:c7:00:ad:f6:72:db:f4:c1:78:24:af:da:e6:3e:3c:e1:45: b2:8b:9c:b5:02:f5:76:2c:32:d1:c0:62:45:9c:29:b3:06:c3: 13:3a:6a:08:01:4d:c8:21:77:a6:52:21:53:89:40:47:f3:9a: a2:73:d2:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8TsCvx5KUzqQA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk YjZiZGMzODEtODBkZS00MmE0LThkMGYtZWMwY2I2MzcxMTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqbQXsGhfBx/sxDISrHePNL0fypN4ptc1U2M PFx7SsolzEFKXzK1NW23Wrk6w03nhdgqHH6qjaKJxHD9q19NQz2aKi2cv8W/2k/v s18kJQL3sTyDHD2hFfs/XAfyz/t61ZTrT77NbGxjdytuhCs/yzDwNa6Uh5J+0MpQ wWiIY/ComndXL4NAfzUJtLGFujX/giA6R7xJfYpP3Z7oINVGjwYauyXId3TMbKwg mUuKaMvL2TglPWxrmA3W6FJ8LoSIiAZGCJZ1zO/JiQOHRWQXk4pbCb9XC+QWulLe M4gq6leRIXMwgECmww+I7UqCmwd+d5GllXvWxC8TOoQ48eE6vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrvomPdga3u3ucMT82v21bwq18LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNzlmOTI5OWItMDM2Mi0z MTM3LWFlZjAtNWUyMjBiNDQxMWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAdzLOzVCkZi9VK3Ht1xJXOrSe9+ZCdBy/6w/FOPUMb/vWiEvZTtZou SFs+lCWKd+dBAtk69IzWNKjfkOnW30Hg0OK4UhX7Koic2n84ldcDELHY4AvEHw1a o+/7FgMXPMjt2La1ONdZn7Zaj2fW777Mo1b04NZwZA25DqAWQ/v55xLxt7z8GB3e GCjl3Ibh9Dnmtn/4bxeMJ1yXmgbTGc1yDpcjqhXiFvTx07No2kcYSxlPWiNWTdbi qhXd3cF/Ivou0AmTvFfHAK32ctv0wXgkr9rmPjzhRbKLnLUC9XYsMtHAYkWcKbMG wxM6aggBTcghd6ZSIVOJQEfzmqJz0lE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:50:30 2025 by rpki-client