$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa File: e2210da3-0122-3d9c-898b-b2cc95169f2a.roa (raw, json) Hash identifier: FtzI70fz/aqQUbAmgX6DkcHrOkWaT66g1OHMhvhldn0= Subject key identifier: F3:DF:08:6D:73:89:67:55:04:68:3F:ED:CC:4D:55:11:E6:DD:0E:2A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584ADD667A59D2273C28B221F800 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa Signing time: Fri 15 Aug 2025 13:00:41 +0000 ROA not before: Fri 15 Aug 2025 13:00:41 +0000 ROA not after: Thu 13 Nov 2025 14:00:41 +0000 asID: 7979 IP address blocks: 172.98.170.0/24 maxlen: 24 206.127.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:dd:66:7a:59:d2:27:3c:28:b2:21:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Aug 15 13:00:41 2025 GMT Not After : Nov 13 14:00:41 2025 GMT Subject: CN=5c75bca6-efd1-4b70-b088-8d900396c965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:61:c6:19:6d:64:65:1d:03:cf:5b:79:b4: 2e:72:64:be:eb:be:8d:e8:85:b1:7c:39:77:eb:f9: 78:df:10:aa:07:ac:9a:e2:ec:bb:13:e2:c7:e9:d1: 57:7f:ea:68:ca:36:93:ad:f2:52:d8:f0:e7:cc:2c: 4f:8c:79:54:ae:f3:86:56:4a:8c:21:a0:17:36:9a: a0:32:8a:f6:eb:23:40:0b:c8:34:bd:6c:b3:93:22: 07:39:3e:e9:61:0c:0c:67:29:d1:40:7b:fe:65:84: dc:1b:e2:2d:25:6a:2e:42:e7:4b:62:4e:50:22:08: 97:43:0b:44:37:fb:c7:42:9e:c0:ff:68:f3:c8:9e: ac:1e:d1:e6:ad:c0:42:25:e2:a0:40:ce:44:2b:8e: a6:bf:27:00:95:f1:39:cb:41:b6:55:6a:e3:aa:6a: 51:0c:58:cb:a5:a5:fa:12:72:d5:a5:2d:ab:29:76: 71:70:f3:d7:f6:2c:a5:97:40:fd:94:11:41:de:1c: b1:e6:a7:84:12:1a:ec:1e:ef:89:cf:35:5e:9b:15: e5:c3:02:88:04:34:ac:07:46:6e:4d:89:5f:cb:67: ad:e0:7a:e6:79:da:b5:f4:4a:bf:0f:07:98:d4:4a: 42:d0:6c:b6:f5:f5:9b:59:4c:4a:bd:08:6f:83:19: d3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:DF:08:6D:73:89:67:55:04:68:3F:ED:CC:4D:55:11:E6:DD:0E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/e2210da3-0122-3d9c-898b-b2cc95169f2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.170.0/24 206.127.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:ca:ab:b7:03:f1:34:c6:0b:88:7f:46:16:e3:e2:6f:22:3d: fd:21:19:b6:0f:59:01:8d:7c:e7:68:9d:20:38:29:2d:35:f5: f6:dd:0b:1c:1e:72:06:5e:ef:d1:f0:e6:61:6a:64:5c:9c:b5: fc:08:85:0f:a7:57:94:ce:b3:d4:48:7f:1d:00:6f:a1:dc:db: 19:fb:67:ea:91:1f:29:b4:db:bd:73:71:fd:41:f4:e7:71:c5: fd:d5:e1:e7:6a:33:9b:5d:23:0b:19:56:6e:a2:0c:6e:27:ee: 60:ac:da:fe:28:79:77:ad:b4:12:d6:5c:e5:2c:19:69:73:b4: 5c:53:df:31:95:f9:fb:cb:4c:54:3e:56:db:dd:d4:1d:12:d3: d4:17:5f:c9:64:e1:05:ab:8b:67:5e:9f:e9:a3:c9:b5:8c:ea: b9:c1:5e:16:ba:ca:9d:ed:37:03:ce:14:ef:a4:58:63:a6:12: 2b:bb:ec:9e:f1:14:41:01:00:95:f5:64:72:7e:1a:7d:0f:38: a2:92:b6:c8:ca:09:29:ce:c3:d8:79:7b:76:b0:5f:83:d7:7d: 6e:56:67:f2:1a:97:60:78:f4:22:71:27:9d:20:2d:8d:7a:9c: 1e:05:d4:9d:52:a3:11:ae:fe:d9:1b:5b:c5:ae:fe:dd:15:94: 49:a0:2d:72 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErdZnpZ0ic8KLIh+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk NWM3NWJjYTYtZWZkMS00YjcwLWIwODgtOGQ5MDAzOTZjOTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6nNhxhltZGUdA89bebQucmS+676N6IWxfDl3 6/l43xCqB6ya4uy7E+LH6dFXf+poyjaTrfJS2PDnzCxPjHlUrvOGVkqMIaAXNpqg Mor26yNAC8g0vWyzkyIHOT7pYQwMZynRQHv+ZYTcG+ItJWouQudLYk5QIgiXQwtE N/vHQp7A/2jzyJ6sHtHmrcBCJeKgQM5EK46mvycAlfE5y0G2VWrjqmpRDFjLpaX6 EnLVpS2rKXZxcPPX9iyll0D9lBFB3hyx5qeEEhrsHu+JzzVemxXlwwKIBDSsB0Zu TYlfy2et4Hrmedq19Eq/DweY1EpC0Gy29fWbWUxKvQhvgxnTqwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPPfCG1ziWdVBGg/7cxNVRHm3Q4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZTIyMTBkYTMtMDEyMi0z ZDljLTg5OGItYjJjYzk1MTY5ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQArGKqAwQA zn/UMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABHKq7cD8TTGC4h/Rhbj4m8iPf0hGbYPWQGNfOdonSA4KS01 9fbdCxwecgZe79Hw5mFqZFyctfwIhQ+nV5TOs9RIfx0Ab6Hc2xn7Z+qRHym0271z cf1B9Odxxf3V4edqM5tdIwsZVm6iDG4n7mCs2v4oeXettBLWXOUsGWlztFxT3zGV +fvLTFQ+Vtvd1B0S09QXX8lk4QWri2den+mjybWM6rnBXha6yp3tNwPOFO+kWGOm Eiu77J7xFEEBAJX1ZHJ+Gn0POKKStsjKCSnOw9h5e3awX4PXfW5WZ/Ial2B49CJx J50gLY16nB4F1J1SoxGu/tkbW8Wu/t0VlEmgLXI= -----END CERTIFICATE-----Generated at Sun Aug 24 01:30:18 2025 by rpki-client