$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa File: 3258c7fc-1720-34bf-ab89-6483fdf010ea.roa (raw, json) Hash identifier: FM0pXipEKyMWnVdr3M6P478Fo3z/Gz+2sKeYFoyGXUc= Subject key identifier: FE:A1:E7:E7:96:F4:F0:1D:00:FF:50:9F:1E:61:42:9D:DF:4C:D2:5F Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858485F9AE4C064023C8E555BF680 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 46261 IP address blocks: 172.98.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e4:c0:64:02:3c:8e:55:5b:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=715ee99c-d48b-4525-a371-c83a8b79bc97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:b0:d6:7f:a5:da:10:72:85:af:4e:7a:48: 7a:f6:95:f3:b2:0e:0b:a0:4b:45:bf:d3:46:87:52: 98:f0:88:bc:9c:d2:e9:bb:5f:5c:1d:89:97:21:3c: 62:bc:80:4c:d3:3d:d8:1f:bb:f8:1d:c7:39:12:09: 00:79:10:b0:25:f8:47:02:5e:80:fb:06:c4:84:96: db:61:e0:c6:24:68:9c:85:75:3f:3c:7e:c4:95:89: ac:e4:d7:41:02:2b:05:cf:f2:89:90:a1:23:f1:70: dc:94:d7:fd:4d:03:d3:3c:85:78:f2:a8:4d:a8:ae: 8c:23:79:69:4e:30:f8:1e:99:a7:86:94:ee:b6:e8: 7a:19:74:59:82:bf:56:8f:33:54:c5:2b:bf:b5:77: 6f:1d:f5:95:fd:b8:d4:d1:69:42:2b:76:a5:1d:97: f1:83:14:a0:fb:3b:f9:0b:a0:3a:96:d1:08:3a:9c: b7:9e:9f:7b:33:a7:2a:1d:19:b1:35:03:2e:10:ba: 14:0a:4b:b9:df:af:55:43:d8:82:06:98:f3:bc:73: 19:d7:81:23:6b:b0:b4:98:6f:6a:be:8c:2a:2c:6b: c6:d7:6c:be:3f:54:b2:82:cd:0c:0d:09:23:ad:a6: 04:c6:e5:97:d9:a2:b9:4f:f6:08:c6:06:3c:9b:98: 85:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A1:E7:E7:96:F4:F0:1D:00:FF:50:9F:1E:61:42:9D:DF:4C:D2:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3258c7fc-1720-34bf-ab89-6483fdf010ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:10:df:d2:d9:69:88:97:8e:aa:a1:66:1c:46:d1:25:f0:f6: 3a:b7:3b:ed:1a:96:08:6d:08:3c:10:a2:ea:8e:ad:fb:d5:38: c7:02:6f:c4:06:ab:5e:7b:71:48:6c:a0:ee:01:45:e1:2d:f3: ef:52:d0:c1:88:48:19:37:f6:c9:8d:02:2d:1b:cd:69:08:b9: 3b:c2:75:f9:e9:ff:1a:38:6a:14:fc:4d:1c:28:5a:c8:68:c4: 7d:33:57:78:86:17:7d:66:00:eb:b8:ad:e7:9e:67:5a:bc:93: 31:9a:e2:b4:d6:7b:ca:03:0d:b3:cb:56:7b:ca:f1:53:08:49: e9:af:4c:09:4f:9a:3f:37:12:61:9d:ba:53:a8:29:a8:45:f6: 59:27:b8:3a:4f:42:79:27:fe:58:f1:82:48:7e:81:80:60:c4: bd:db:ae:07:4e:83:39:62:5f:26:62:38:9b:21:0f:78:66:ec: 41:c7:51:90:23:24:6b:dd:10:5a:68:8b:c2:70:96:b2:4e:cf: 06:82:5e:e2:3e:4f:94:e4:f9:75:fb:e3:8d:e8:c5:44:6e:1b: eb:a9:34:43:4f:27:a1:77:62:fe:7a:6e:e2:27:95:a0:32:b7: 00:81:a1:54:62:cf:93:90:13:d6:cb:24:12:a7:80:8b:ed:1f: be:7d:e3:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuTAZAI8jlVb9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk NzE1ZWU5OWMtZDQ4Yi00NTI1LWEzNzEtYzgzYThiNzliYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAmw1n+l2hByha9Oekh69pXzsg4LoEtFv9NG h1KY8Ii8nNLpu19cHYmXITxivIBM0z3YH7v4Hcc5EgkAeRCwJfhHAl6A+wbEhJbb YeDGJGichXU/PH7ElYms5NdBAisFz/KJkKEj8XDclNf9TQPTPIV48qhNqK6MI3lp TjD4HpmnhpTutuh6GXRZgr9WjzNUxSu/tXdvHfWV/bjU0WlCK3alHZfxgxSg+zv5 C6A6ltEIOpy3np97M6cqHRmxNQMuELoUCku5369VQ9iCBpjzvHMZ14Eja7C0mG9q vowqLGvG12y+P1Sygs0MDQkjraYExuWX2aK5T/YIxgY8m5iFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6h5+eW9PAdAP9Qnx5hQp3fTNJfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMzI1OGM3ZmMtMTcyMC0z NGJmLWFiODktNjQ4M2ZkZjAxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoQ39LZaYiXjqqhZhxG0SXw9jq3O+0alghtCDwQouqOrfvVOMcCb8QG q157cUhsoO4BReEt8+9S0MGISBk39smNAi0bzWkIuTvCdfnp/xo4ahT8TRwoWsho xH0zV3iGF31mAOu4reeeZ1q8kzGa4rTWe8oDDbPLVnvK8VMISemvTAlPmj83EmGd ulOoKahF9lknuDpPQnkn/ljxgkh+gYBgxL3brgdOgzliXyZiOJshD3hm7EHHUZAj JGvdEFpoi8JwlrJOzwaCXuI+T5Tk+XX7443oxURuG+upNENPJ6F3Yv56buInlaAy twCBoVRiz5OQE9bLJBKngIvtH7594/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:12 2025 by rpki-client