$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa File: 1034cd89-feb8-3e94-8574-e39249d96e14.roa (raw, json) Hash identifier: 5KM4pg0QU7+3/QXgNDXzkrdrtdeUsYGsv9aTsgzjAR0= Subject key identifier: 28:2E:3E:F5:35:6A:2C:F9:5C:A0:02:BB:3A:87:89:A3:60:86:50:C4 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285848090FBABE6B8474F78979F300 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 7029 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:ba:be:6b:84:74:f7:89:79:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=6aecb6f2-d274-4739-8d12-c7c4b4289626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:17:6f:a1:e8:ac:db:2c:06:88:20:66:95:0f: cf:52:b6:e8:20:80:de:fa:f2:c5:a7:5e:51:95:13: 68:9f:6c:56:54:cf:5b:37:96:a6:f2:0f:a2:00:8d: 45:a4:f6:3f:29:99:95:01:0b:f1:59:bb:a8:6e:31: 3e:da:41:b8:b7:a1:b1:3f:18:c3:ed:1a:98:e1:99: e1:b9:67:43:78:04:f4:21:12:d5:40:63:f2:33:be: b3:f2:e4:1f:05:e5:04:0a:28:be:aa:72:7b:e0:ee: 4d:35:20:62:d0:15:32:a0:05:4b:3c:39:85:a7:d5: 2e:77:16:8e:38:bb:a3:28:ad:02:71:ac:d0:0a:44: 43:c3:e9:3f:03:b1:f3:8a:8d:75:19:22:0a:9a:77: 99:02:8d:34:c8:8f:5a:d6:6f:96:ba:eb:43:58:b4: 9a:0b:d9:12:bd:40:5e:37:6f:c8:7d:30:26:13:4f: 3e:ea:ac:14:f5:e2:65:86:93:73:45:c0:27:85:56: 9b:9b:97:c5:6a:48:73:d1:f1:92:a2:23:2e:39:4b: c4:fe:2c:73:29:e3:65:c5:5d:db:87:0c:76:c0:63: 06:4d:5b:9e:91:43:5d:ef:ad:c7:fc:7d:ae:3e:e7: 62:48:c8:ba:85:32:54:d4:71:0d:bb:ea:7e:1f:65: 5c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:2E:3E:F5:35:6A:2C:F9:5C:A0:02:BB:3A:87:89:A3:60:86:50:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/1034cd89-feb8-3e94-8574-e39249d96e14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:b2:7a:c9:e8:81:b9:2a:e3:00:07:30:eb:06:da:03:f6:8e: 51:5c:04:f7:81:d0:31:2c:be:d0:44:80:51:0b:ef:54:10:fe: 80:c5:88:fa:5c:d3:c3:3e:74:9d:b6:55:9d:7b:9b:fe:92:18: 1c:b5:e8:ae:d4:c4:d2:48:17:7f:66:e1:cf:d0:90:83:b1:3f: 43:a5:a6:e6:79:e6:20:20:e9:9f:5a:cd:83:88:23:50:22:86: 1d:d9:20:fc:64:52:76:8c:e0:7e:29:d4:87:a1:91:f7:9c:cd: 15:1a:4f:45:96:fc:87:f6:47:c4:f3:c3:4e:32:80:18:f1:9d: 47:a0:a3:1c:5c:9c:ae:73:a2:a7:49:b0:f4:d9:91:6e:d7:83: 4c:5f:ad:f4:c9:77:2a:39:b2:a8:d1:2e:f8:b6:d5:1e:8d:db: 5c:50:70:55:18:26:18:c1:d0:7b:2d:2f:a9:b4:af:d8:d6:23: 26:66:b3:0c:0d:49:59:63:bf:b5:e7:ac:c1:5c:5c:1f:93:98: 07:0b:bc:c8:15:65:66:07:4d:62:59:7c:b3:1e:5b:d4:70:2f: f6:bd:8f:de:fa:07:c6:b8:41:40:1b:34:a6:7e:48:12:21:d1: b8:5f:44:3d:be:1f:7b:ac:19:b4:04:96:f4:50:17:75:02:98: ed:5b:8e:f1 -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEgJD7q+a4R094l58wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk NmFlY2I2ZjItZDI3NC00NzM5LThkMTItYzdjNGI0Mjg5NjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixdvoeis2ywGiCBmlQ/PUrboIIDe+vLFp15R lRNon2xWVM9bN5am8g+iAI1FpPY/KZmVAQvxWbuobjE+2kG4t6GxPxjD7RqY4Znh uWdDeAT0IRLVQGPyM76z8uQfBeUECii+qnJ74O5NNSBi0BUyoAVLPDmFp9UudxaO OLujKK0CcazQCkRDw+k/A7Hzio11GSIKmneZAo00yI9a1m+WuutDWLSaC9kSvUBe N2/IfTAmE08+6qwU9eJlhpNzRcAnhVabm5fFakhz0fGSoiMuOUvE/ixzKeNlxV3b hwx2wGMGTVuekUNd763H/H2uPudiSMi6hTJU1HENu+p+H2Vc8QIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFCguPvU1aiz5XKACuzqHiaNghlDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTAzNGNkODktZmViOC0z ZTk0LTg1NzQtZTM5MjQ5ZDk2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFiyesnogbkq4wAHMOsG2gP2jlFcBPeB 0DEsvtBEgFEL71QQ/oDFiPpc08M+dJ22VZ17m/6SGBy16K7UxNJIF39m4c/QkIOx P0OlpuZ55iAg6Z9azYOII1Aihh3ZIPxkUnaM4H4p1IehkfeczRUaT0WW/If2R8Tz w04ygBjxnUegoxxcnK5zoqdJsPTZkW7Xg0xfrfTJdyo5sqjRLvi21R6N21xQcFUY JhjB0HstL6m0r9jWIyZmswwNSVljv7XnrMFcXB+TmAcLvMgVZWYHTWJZfLMeW9Rw L/a9j976B8a4QUAbNKZ+SBIh0bhfRD2+H3usGbQElvRQF3UCmO1bjvE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:09 2025 by rpki-client