$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: 3qZTN7blL1yFZQYT+ZunukfLU0QexXHka93+n+5sj1o= Subject key identifier: 38:82:1B:42:D9:B5:2F:7E:36:E4:CA:99:D7:B6:86:FF:28:85:F5:40 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584526A5A45B0879A8279E4E88C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Sat 09 Mar 2024 14:00:31 +0000 ROA not before: Sat 09 Mar 2024 14:00:31 +0000 ROA not after: Fri 07 Jun 2024 13:00:31 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 28 Apr 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:26:a5:a4:5b:08:79:a8:27:9e:4e:88:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 9 14:00:31 2024 GMT Not After : Jun 7 13:00:31 2024 GMT Subject: CN=b8265658-07b5-4d7e-9640-80804f0f3b90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:6c:d2:ca:df:7c:ef:69:15:af:ac:f5:4e: 01:7a:f4:ee:09:6c:1a:a9:e0:7f:84:03:4c:e4:07: d0:81:74:71:4d:9c:92:4d:24:c7:4a:7c:8f:f5:dd: 31:98:c9:69:39:7c:8d:48:0f:a1:78:9b:d2:81:db: 56:09:15:44:6d:d2:61:63:e0:d4:b5:53:63:77:60: 69:04:c2:9b:3a:29:6b:eb:d6:ba:dd:9a:cf:83:a7: 85:e2:f1:77:eb:b4:9d:79:09:48:33:cb:cb:35:18: dc:33:53:da:31:73:0d:0b:8b:54:7c:2e:76:7f:e0: 25:a2:17:79:1d:c2:27:70:70:97:44:a9:67:de:82: c5:c6:5a:cc:ad:13:b1:ee:7a:df:95:ce:57:50:aa: f2:3c:50:f6:80:f1:c6:05:f0:2a:95:89:1e:09:58: f2:84:59:18:b1:9c:a7:5f:e4:17:96:91:42:49:5d: 2d:02:f1:f6:de:a1:f0:af:ad:f0:8e:a4:1c:4d:6d: ba:06:ea:bf:88:d8:2c:c0:67:db:64:93:91:48:21: a4:67:2d:87:87:3e:f2:86:30:f1:0d:b6:c7:61:c3: 69:35:a0:7c:06:72:b9:d6:91:3e:f6:39:0a:b3:c3: 7c:23:e4:2f:61:a8:76:c7:05:e3:22:04:d1:7b:f8: f8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:82:1B:42:D9:B5:2F:7E:36:E4:CA:99:D7:B6:86:FF:28:85:F5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:8b:af:af:86:82:09:f4:9b:50:78:62:1b:9d:10:07:0c:b9: 69:4d:d2:4c:a3:82:bf:6d:ff:da:04:f1:b7:fd:37:9a:ca:1c: 94:4e:69:67:ed:42:cb:6e:16:d0:a7:fa:9e:24:49:db:e5:98: ff:b1:ed:03:a7:15:27:a6:45:4d:de:00:88:77:e0:8b:c8:df: 86:e5:a9:f2:dc:42:f4:fd:46:ea:92:31:92:af:2c:68:c2:bb: 5a:83:6c:de:80:78:15:3d:dc:ac:0e:1b:7a:93:dd:18:ce:cc: b7:c7:5b:2e:5e:cd:a9:8c:01:f7:f6:17:a1:26:91:b5:e9:ab: d2:89:d6:27:1d:64:5e:ea:39:1d:80:88:2c:5f:37:d2:d5:fa: ba:9e:05:24:f3:aa:d5:0a:56:53:ea:05:25:64:e5:3c:2a:83: 6d:da:88:be:9e:18:3e:12:fd:12:56:a1:8b:b3:ba:4d:04:06: 6d:1a:3b:10:b4:29:d1:09:7f:79:65:b5:29:50:34:93:4c:72: bf:66:8b:9e:62:db:f9:61:92:b1:99:01:49:ae:e8:8f:cb:7f: 12:25:bd:22:0a:ed:66:73:8b:4f:7c:b2:ce:43:54:a8:b0:3e: 95:d5:0c:19:0b:2b:b2:39:45:79:b2:e1:f6:cd:ce:33:48:08: b0:39:7c:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEUmpaRbCHmoJ55OiMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDMwOTE0MDAzMVoXDTI0MDYwNzEzMDAzMVowLzEtMCsGA1UEAxMk YjgyNjU2NTgtMDdiNS00ZDdlLTk2NDAtODA4MDRmMGYzYjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhs0srffO9pFa+s9U4BevTuCWwaqeB/hANM 5AfQgXRxTZySTSTHSnyP9d0xmMlpOXyNSA+heJvSgdtWCRVEbdJhY+DUtVNjd2Bp BMKbOilr69a63ZrPg6eF4vF367SdeQlIM8vLNRjcM1PaMXMNC4tUfC52f+Alohd5 HcIncHCXRKln3oLFxlrMrROx7nrflc5XUKryPFD2gPHGBfAqlYkeCVjyhFkYsZyn X+QXlpFCSV0tAvH23qHwr63wjqQcTW26Buq/iNgswGfbZJORSCGkZy2Hhz7yhjDx DbbHYcNpNaB8BnK51pE+9jkKs8N8I+QvYah2xwXjIgTRe/j4vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDiCG0LZtS9+NuTKmde2hv8ohfVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+Lr6+Gggn0m1B4YhudEAcMuWlN0kyjgr9t/9oE8bf9N5rKHJROaWft QstuFtCn+p4kSdvlmP+x7QOnFSemRU3eAIh34IvI34blqfLcQvT9RuqSMZKvLGjC u1qDbN6AeBU93KwOG3qT3RjOzLfHWy5ezamMAff2F6EmkbXpq9KJ1icdZF7qOR2A iCxfN9LV+rqeBSTzqtUKVlPqBSVk5Twqg23aiL6eGD4S/RJWoYuzuk0EBm0aOxC0 KdEJf3lltSlQNJNMcr9mi55i2/lhkrGZAUmu6I/LfxIlvSIK7WZzi098ss5DVKiw PpXVDBkLK7I5RXmy4fbNzjNICLA5fGw= -----END CERTIFICATE-----Generated at Sat Apr 27 15:34:33 2024 by rpki-client on console-ams.rpki-client.org