$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: a0oSDA5efOe8Gd3Ahsv/fGoCE9ZojTUNjX3wi+a49cU= Subject key identifier: 7E:8E:27:32:10:87:0A:41:2C:DC:2B:C3:2F:6C:8A:B1:A8:A2:C4:C9 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285844E23FDC4F1187646D3F047D00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Wed 14 Feb 2024 02:00:25 +0000 ROA not before: Wed 14 Feb 2024 02:00:25 +0000 ROA not after: Tue 14 May 2024 01:00:25 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:e2:3f:dc:4f:11:87:64:6d:3f:04:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 14 02:00:25 2024 GMT Not After : May 14 01:00:25 2024 GMT Subject: CN=b02448db-d992-44b7-b544-8d4595964d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3f:e7:11:ce:97:4b:cd:7b:bc:47:2e:9b:9f: 5c:15:c9:69:9c:1b:49:1e:58:87:43:8c:11:a0:5b: 9e:06:15:ad:c7:09:8c:75:5b:22:91:62:48:0c:e1: d7:cf:aa:f6:6c:82:9f:14:fa:ef:72:35:f0:d1:fc: 12:fb:de:45:c9:39:b6:b1:b4:2a:99:33:db:e3:09: 0c:da:d7:b5:6f:81:01:eb:52:74:d4:a0:5f:73:3b: d4:12:e6:1a:43:0b:0a:f2:91:32:b7:c6:03:09:8f: cd:48:e7:e9:2b:67:fc:91:66:0b:a5:fc:11:27:97: dc:2e:b8:63:40:3f:53:7a:d6:e0:ab:11:9b:00:68: eb:ec:00:2f:ab:17:81:26:07:06:45:0e:96:da:35: 59:30:7f:5e:fe:8e:fb:a4:9d:b1:fc:b9:e6:86:e0: 7a:a6:ed:7b:1b:30:1e:b1:61:72:7d:72:50:c7:d5: af:0b:7c:28:af:35:ed:36:b7:2f:e1:74:37:23:e2: 8c:5e:8a:e9:55:80:9b:b0:37:d3:e1:80:f1:90:8b: b1:48:f3:49:fd:e9:28:6b:0c:a0:47:de:fd:2e:2e: 97:fe:cc:8c:2d:e0:fb:fb:e1:61:8a:94:bb:c8:e5: 17:85:66:47:50:d3:ce:92:84:2a:fa:ae:40:f9:36: 3a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8E:27:32:10:87:0A:41:2C:DC:2B:C3:2F:6C:8A:B1:A8:A2:C4:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:72:69:62:02:b8:70:8d:37:60:23:3a:61:bc:4d:42:80:b0: 64:21:1a:5d:a0:2d:1c:73:c9:1e:f7:41:d7:2d:31:30:57:1d: 8b:fe:f2:d1:0c:69:b4:fc:7a:9d:32:4b:f9:23:a4:7f:3d:e9: 89:58:fc:a3:4c:52:25:e5:06:b7:78:09:f0:85:04:3e:7f:91: 8b:ac:3f:5c:3e:f4:30:90:0d:84:61:e1:50:7b:f7:e1:3e:16: ed:ff:af:9a:b7:d3:af:82:34:30:2c:60:96:70:b5:35:4f:df: d8:f1:1b:78:f2:45:59:d1:18:89:9e:10:ad:5a:3e:2b:c7:cb: 62:df:52:1b:21:df:08:a9:6c:0d:cd:d5:30:be:ec:3b:e9:83: e7:57:8f:9c:9c:ed:f7:5c:7e:cb:81:d4:a5:c0:09:54:f4:e9: 79:35:2f:fa:09:70:63:54:fe:ab:54:9a:ba:43:3f:79:1f:9b: e1:d6:84:77:28:c0:47:d6:9f:33:9a:c8:4b:7b:03:f8:31:79: fb:08:53:64:91:b7:c9:2b:1a:bf:55:12:12:b1:db:47:5f:86: 4c:b2:51:b4:02:bf:03:8d:51:66:85:eb:8d:25:6a:69:b8:42: e3:d6:18:fd:83:c2:53:46:15:2d:ee:56:60:af:37:6f:eb:d2: 50:4e:43:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWETiP9xPEYdkbT8EfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDIxNDAyMDAyNVoXDTI0MDUxNDAxMDAyNVowLzEtMCsGA1UEAxMk YjAyNDQ4ZGItZDk5Mi00NGI3LWI1NDQtOGQ0NTk1OTY0ZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjj/nEc6XS817vEcum59cFclpnBtJHliHQ4wR oFueBhWtxwmMdVsikWJIDOHXz6r2bIKfFPrvcjXw0fwS+95FyTm2sbQqmTPb4wkM 2te1b4EB61J01KBfczvUEuYaQwsK8pEyt8YDCY/NSOfpK2f8kWYLpfwRJ5fcLrhj QD9TetbgqxGbAGjr7AAvqxeBJgcGRQ6W2jVZMH9e/o77pJ2x/LnmhuB6pu17GzAe sWFyfXJQx9WvC3worzXtNrcv4XQ3I+KMXorpVYCbsDfT4YDxkIuxSPNJ/ekoawyg R979Li6X/syMLeD7++FhipS7yOUXhWZHUNPOkoQq+q5A+TY6LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6OJzIQhwpBLNwrwy9sirGoosTJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9yaWICuHCNN2AjOmG8TUKAsGQhGl2gLRxzyR73QdctMTBXHYv+8tEM abT8ep0yS/kjpH896YlY/KNMUiXlBrd4CfCFBD5/kYusP1w+9DCQDYRh4VB79+E+ Fu3/r5q306+CNDAsYJZwtTVP39jxG3jyRVnRGImeEK1aPivHy2LfUhsh3wipbA3N 1TC+7Dvpg+dXj5yc7fdcfsuB1KXACVT06Xk1L/oJcGNU/qtUmrpDP3kfm+HWhHco wEfWnzOayEt7A/gxefsIU2SRt8krGr9VEhKx20dfhkyyUbQCvwONUWaF640lamm4 QuPWGP2DwlNGFS3uVmCvN2/r0lBOQ24= -----END CERTIFICATE-----Generated at Thu May 2 04:28:00 2024 by rpki-client on console-fra.rpki-client.org