$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa File: d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa (raw, json) Hash identifier: G9Vk8pIBzP/AveMix724XmEdeJqRDdz7z5PWtsXPc+g= Subject key identifier: CD:0D:CF:BE:1A:8A:C3:17:CC:6C:21:BB:26:41:94:29:95:B7:72:DA Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584A374ACE1AA1F54B2DECBB4700 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa Signing time: Tue 17 Jun 2025 01:00:48 +0000 ROA not before: Tue 17 Jun 2025 01:00:48 +0000 ROA not after: Mon 15 Sep 2025 01:00:48 +0000 asID: 9009 IP address blocks: 172.98.162.0/24 maxlen: 24 172.98.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:37:4a:ce:1a:a1:f5:4b:2d:ec:bb:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jun 17 01:00:48 2025 GMT Not After : Sep 15 01:00:48 2025 GMT Subject: CN=db7f2206-0234-4b7f-a8c1-d8ec7ecf5878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c8:69:ae:f6:5e:be:26:31:7f:49:c1:ca:bd: 4f:e5:ca:8b:b3:28:51:1e:20:a2:6b:5e:7e:9d:22: ac:ec:a2:6d:e2:af:a4:94:ab:64:18:c8:dd:0c:34: c7:18:d1:1f:0a:0d:fd:01:22:dc:fe:4c:49:cd:69: 94:f4:90:c4:81:78:d5:33:6c:7f:a8:34:6a:ff:76: 0d:56:57:b9:01:c4:c0:fc:d6:e4:61:98:b8:fb:88: f8:4a:14:08:3c:b8:34:86:6e:70:13:7f:1b:7b:af: e3:f9:8a:c4:10:85:89:82:72:8a:80:36:80:e1:2a: f4:b1:2e:f9:de:27:c1:7d:32:6c:8a:d0:ed:1d:6b: a0:f7:4a:f0:8b:98:9d:6d:dd:d2:e9:69:79:f2:6a: 79:b4:71:b3:97:c6:37:92:50:31:96:4b:eb:ed:3a: 93:a0:83:d4:49:ef:2a:bb:9c:99:4d:34:39:ce:15: 90:3b:e4:fa:16:fe:ca:db:fa:3a:76:5a:1b:40:e7: cf:e8:da:bc:72:3e:31:6e:ab:72:b0:93:c0:eb:de: 43:ce:09:20:aa:8c:88:d9:f8:8b:65:bf:0a:95:db: e8:c7:c6:47:8c:aa:99:d0:ea:e6:7a:fa:4d:61:a2: b9:ee:9c:95:d1:af:f9:67:8b:19:c8:b3:b0:a5:05: b0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0D:CF:BE:1A:8A:C3:17:CC:6C:21:BB:26:41:94:29:95:B7:72:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d1d5734c-efbc-3d98-913a-e60b8d7e33f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.162.0/24 172.98.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:89:ec:9b:9f:85:aa:f3:b5:9d:aa:cc:62:a7:92:3a:4c:b3: 5d:a2:9a:dc:0a:b5:46:ec:fc:94:18:2f:85:9f:3f:e7:d7:74: 03:d1:eb:9f:4f:77:3b:dc:93:43:17:92:f4:5a:c9:f8:9e:6c: be:9e:76:0a:c3:f8:c0:8c:fd:e3:52:2c:06:16:fc:5f:cf:39: f4:c9:8a:33:12:85:ef:0b:75:e6:42:a7:4c:17:b7:f5:5d:b2: b2:da:8d:44:6d:8e:d1:62:a7:cc:43:59:2e:f3:21:30:24:1a: 65:fb:d7:08:7b:5a:1a:fc:b5:3a:53:4c:d1:f1:7a:e8:b1:96: de:9e:1d:44:ea:b0:1a:e2:f3:63:17:a1:88:28:a9:7e:f7:c7: eb:20:8e:86:14:44:46:a6:37:eb:9b:cb:7c:fe:37:13:39:15: d8:82:c4:57:05:57:61:28:79:c1:54:3c:5b:fe:86:1a:e4:1d: cb:ef:94:c7:bd:f0:69:bf:54:06:f4:84:ad:09:ca:f6:2d:07: 4e:2d:81:c1:41:fe:fb:dc:b1:0e:75:51:96:82:85:1c:65:27: 86:16:b2:31:41:36:0d:5e:10:c8:5f:2a:5c:9a:0d:a8:37:30: 48:84:d9:44:fc:d7:54:3e:9a:e1:e2:c4:7f:0d:d6:dc:d2:e9: f6:06:70:a1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEo3Ss4aofVLLey7RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDYxNzAxMDA0OFoXDTI1MDkxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZGI3ZjIyMDYtMDIzNC00YjdmLWE4YzEtZDhlYzdlY2Y1ODc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8hprvZeviYxf0nByr1P5cqLsyhRHiCia15+ nSKs7KJt4q+klKtkGMjdDDTHGNEfCg39ASLc/kxJzWmU9JDEgXjVM2x/qDRq/3YN Vle5AcTA/NbkYZi4+4j4ShQIPLg0hm5wE38be6/j+YrEEIWJgnKKgDaA4Sr0sS75 3ifBfTJsitDtHWug90rwi5idbd3S6Wl58mp5tHGzl8Y3klAxlkvr7TqToIPUSe8q u5yZTTQ5zhWQO+T6Fv7K2/o6dlobQOfP6Nq8cj4xbqtysJPA695DzgkgqoyI2fiL Zb8Kldvox8ZHjKqZ0OrmevpNYaK57pyV0a/5Z4sZyLOwpQWwiQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFM0Nz74aisMXzGwhuyZBlCmVt3LaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDFkNTczNGMtZWZiYy0z ZDk4LTkxM2EtZTYwYjhkN2UzM2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKiAwQA rGKsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABOJ7JufharztZ2qzGKnkjpMs12imtwKtUbs/JQYL4WfP+fX dAPR659Pdzvck0MXkvRayfiebL6edgrD+MCM/eNSLAYW/F/POfTJijMShe8LdeZC p0wXt/VdsrLajURtjtFip8xDWS7zITAkGmX71wh7Whr8tTpTTNHxeuixlt6eHUTq sBri82MXoYgoqX73x+sgjoYUREamN+uby3z+NxM5FdiCxFcFV2EoecFUPFv+hhrk HcvvlMe98Gm/VAb0hK0JyvYtB04tgcFB/vvcsQ51UZaChRxlJ4YWsjFBNg1eEMhf KlyaDag3MEiE2UT811Q+muHixH8N1tzS6fYGcKE= -----END CERTIFICATE-----Generated at Sun Jun 29 01:39:34 2025 by rpki-client