$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: o/owObA1g7nrT8oFDxt7L9cmhZmtt8FrcfgWYvibVtA= Subject key identifier: DD:CC:04:E7:C7:51:15:22:37:5C:AC:15:E3:5E:5B:B3:27:E7:AB:01 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584940394C76E9DCF6B86E3F3000 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4c:76:e9:dc:f6:b8:6e:3f:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=c3ddde31-46eb-4207-88d5-6344610f6698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:07:7c:e6:0d:da:b6:e1:03:38:3b:8a:5e:4f: db:7a:ee:0b:65:88:0e:e8:83:81:cb:bc:28:53:37: 80:c0:84:e2:6b:2a:92:27:86:c1:fc:4d:b5:9d:08: de:07:54:99:74:96:c5:59:cb:17:7f:3f:62:55:d4: 87:7e:80:70:e9:ea:90:9b:f9:0a:0f:e6:dc:e3:02: 5e:24:43:da:5f:d8:29:95:d2:f8:c5:75:03:33:56: 06:35:32:db:0b:8d:c5:b0:92:ce:35:4c:ee:57:bc: 01:ed:fb:26:dc:0c:70:9a:9d:c4:d3:9a:fd:73:88: b5:51:a4:4d:6d:1d:00:9c:a6:8e:dd:af:e2:e7:4e: d5:42:0b:e7:24:9f:a2:33:03:c0:ca:a0:3e:dc:33: fb:4e:70:e8:16:39:87:2b:d9:bb:3e:4b:b2:c1:92: d1:a7:52:59:ab:83:6f:c6:a7:d6:aa:92:5b:99:12: a9:2b:f6:4a:31:19:e0:75:2b:32:ea:ec:bb:b0:98: 51:e2:9c:4c:31:42:c3:aa:ff:a6:89:46:a1:ff:19: c7:6f:a3:d1:1e:35:3e:22:c3:8c:fc:23:64:7e:6d: de:01:cc:65:fd:a1:f7:a8:a5:50:83:2a:bf:51:1a: 5f:ad:fb:de:3b:2c:dc:05:57:fb:3d:cf:9c:e3:fb: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CC:04:E7:C7:51:15:22:37:5C:AC:15:E3:5E:5B:B3:27:E7:AB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:2e:8c:9c:1e:f8:f0:50:ba:d7:f9:9c:7a:93:3a:e2:25:b7: e7:ad:fc:dc:61:d0:14:38:e9:1e:b7:c3:88:e2:5d:41:50:db: 33:de:7b:c5:d8:5c:26:fa:51:c0:04:fc:be:ad:3a:00:ee:8d: 59:1b:e9:11:2f:08:93:18:53:e4:8a:96:5e:39:34:f5:45:bc: a4:f3:b5:e1:92:14:fb:b8:17:6a:c4:68:07:42:76:93:ec:b7: 19:56:ad:ab:43:28:16:da:bd:a5:9b:6d:7b:ae:eb:90:b5:e7: 2b:d6:fd:0a:82:86:88:00:93:5d:26:5e:a5:cc:09:d4:b8:8f: 9d:18:4a:60:be:2c:11:f0:1a:3e:30:da:8b:bd:f5:a0:de:0d: 54:32:62:7e:fb:1f:83:87:03:2b:52:90:8a:57:d4:e1:58:dd: 5b:b7:0f:84:5a:e0:bd:25:0f:62:49:5b:8a:3d:5b:98:94:dd: fb:1f:21:c0:37:a2:7c:d4:4c:69:ae:ff:6d:26:24:ff:1a:1e: e0:56:68:d2:19:5b:07:64:86:ef:dd:c9:3d:cb:57:13:3d:77: 63:cd:22:9c:6b:01:c1:94:a5:16:d7:77:ba:1d:62:f8:98:7d: 92:60:c6:42:b8:43:e4:2f:a6:20:40:4a:cc:25:43:e6:e8:c5: 00:a3:cf:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOUx26dz2uG4/MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk YzNkZGRlMzEtNDZlYi00MjA3LTg4ZDUtNjM0NDYxMGY2Njk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4gd85g3atuEDODuKXk/beu4LZYgO6IOBy7wo UzeAwITiayqSJ4bB/E21nQjeB1SZdJbFWcsXfz9iVdSHfoBw6eqQm/kKD+bc4wJe JEPaX9gpldL4xXUDM1YGNTLbC43FsJLONUzuV7wB7fsm3Axwmp3E05r9c4i1UaRN bR0AnKaO3a/i507VQgvnJJ+iMwPAyqA+3DP7TnDoFjmHK9m7PkuywZLRp1JZq4Nv xqfWqpJbmRKpK/ZKMRngdSsy6uy7sJhR4pxMMULDqv+miUah/xnHb6PRHjU+IsOM /CNkfm3eAcxl/aH3qKVQgyq/URpfrfveOyzcBVf7Pc+c4/v1fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3MBOfHURUiN1ysFeNeW7Mn56sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIujJwe+PBQutf5nHqTOuIlt+et/Nxh0BQ46R63w4jiXUFQ2zPee8XY XCb6UcAE/L6tOgDujVkb6REvCJMYU+SKll45NPVFvKTzteGSFPu4F2rEaAdCdpPs txlWratDKBbavaWbbXuu65C15yvW/QqChogAk10mXqXMCdS4j50YSmC+LBHwGj4w 2ou99aDeDVQyYn77H4OHAytSkIpX1OFY3Vu3D4Ra4L0lD2JJW4o9W5iU3fsfIcA3 onzUTGmu/20mJP8aHuBWaNIZWwdkhu/dyT3LVxM9d2PNIpxrAcGUpRbXd7odYviY fZJgxkK4Q+QvpiBASswlQ+boxQCjz90= -----END CERTIFICATE-----Generated at Thu Apr 17 12:37:05 2025 by rpki-client