$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa File: 3f3593ee-3773-397b-a47c-3d02f42f64d4.roa (raw, json) Hash identifier: 3X6nT7ubjXF2MmkJ2uQTx8xaHEmzkWlWHoppL6c/gk0= Subject key identifier: 6F:33:30:6F:24:8D:29:6B:B3:4E:79:98:11:21:D3:42:39:C1:3E:BC Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858494469337185E206B0BE549D00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa Signing time: Sat 22 Mar 2025 01:00:40 +0000 ROA not before: Sat 22 Mar 2025 01:00:40 +0000 ROA not after: Fri 20 Jun 2025 01:00:40 +0000 asID: 1239 IP address blocks: 141.193.96.0/23 maxlen: 23 158.115.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:44:69:33:71:85:e2:06:b0:be:54:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 22 01:00:40 2025 GMT Not After : Jun 20 01:00:40 2025 GMT Subject: CN=7faf7765-42e0-4a81-ae79-3d844ced4d0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:93:a0:37:9c:7d:af:0f:72:ae:7a:18:7c:4b: 38:4d:96:20:0e:1b:34:ca:9b:3d:4c:d6:4d:f5:0c: 23:7d:5b:58:a3:be:9f:2d:f5:f5:f8:59:e4:13:d2: 40:1c:57:fa:0c:10:23:67:53:54:39:53:53:be:71: ae:df:b1:d3:7e:62:69:10:aa:57:d8:b2:7a:30:c4: 67:05:22:73:54:4f:55:1e:78:67:4e:f8:a2:72:3f: eb:5b:f1:94:8c:c7:e7:63:17:2a:22:28:0d:56:cc: 1d:3c:6a:11:bd:a7:2a:11:e2:7a:2b:f1:39:1b:13: e8:92:b6:55:1e:1d:26:73:f3:cc:10:2b:de:e9:f9: 21:c9:ed:d1:e2:7a:be:23:2d:3e:bc:43:b4:25:5e: a9:f9:60:4e:ca:68:08:14:48:1c:b8:ca:9f:fd:82: a0:b4:bf:ea:54:f0:15:39:10:72:dd:24:a3:9d:0f: a8:77:e7:d4:de:08:89:f8:ff:f9:a4:cd:45:56:c5: 0b:9f:b4:11:f5:64:40:37:82:02:d7:ed:3b:32:e5: 56:08:b6:61:11:3c:1d:d4:e7:07:c0:55:23:31:93: d8:3d:b3:21:b1:d7:da:b9:7a:d9:db:6c:fa:fb:7e: 89:2a:99:82:f6:8d:2e:b4:47:51:6e:16:52:c8:24: 62:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:33:30:6F:24:8D:29:6B:B3:4E:79:98:11:21:D3:42:39:C1:3E:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/3f3593ee-3773-397b-a47c-3d02f42f64d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 141.193.96.0/23 158.115.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:eb:99:7d:dd:97:79:64:8e:ab:6b:5c:c9:60:59:d1:d9:29: e3:58:2f:69:2c:73:6e:ec:73:f9:1d:00:99:37:92:65:c2:c0: c4:c4:67:19:ff:e3:37:7e:e0:50:42:a4:e4:a0:96:a1:2f:9a: e9:6e:96:bc:d4:7a:92:aa:2f:38:cf:70:31:bc:b7:d1:c2:35: 6c:77:9f:3d:25:a8:8e:51:b0:62:ee:8f:24:18:9e:41:67:1e: bd:05:68:74:63:77:6e:73:4c:66:7a:dc:92:86:3d:90:2e:7f: 05:52:fa:1e:cf:3f:f6:b3:b7:63:a6:ed:5a:30:10:23:59:e6: 39:68:4c:c2:20:25:b6:df:ef:40:10:41:fb:62:ff:f6:6c:9a: a2:a8:0e:09:f8:fd:82:91:7a:61:0b:e4:9e:90:36:67:55:84: bc:cf:ec:5b:85:69:ce:df:44:1c:30:89:4c:61:c3:67:c7:23: 6e:8e:c9:53:3b:0c:fd:f1:97:1a:ad:08:ba:49:29:75:2a:4c: fa:82:cd:2e:e4:ca:dd:c3:1e:a4:a2:b5:e0:b0:09:b2:15:d3: a2:d4:5f:38:1e:ed:ad:a3:f9:f9:1a:80:78:de:fc:65:a5:e9: b7:7a:4f:62:44:61:db:4a:29:09:39:ee:2e:ac:03:d4:70:06: 10:d2:48:43 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElEaTNxheIGsL5UnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMyMjAxMDA0MFoXDTI1MDYyMDAxMDA0MFowLzEtMCsGA1UEAxMk N2ZhZjc3NjUtNDJlMC00YTgxLWFlNzktM2Q4NDRjZWQ0ZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipOgN5x9rw9yrnoYfEs4TZYgDhs0yps9TNZN 9QwjfVtYo76fLfX1+FnkE9JAHFf6DBAjZ1NUOVNTvnGu37HTfmJpEKpX2LJ6MMRn BSJzVE9VHnhnTviicj/rW/GUjMfnYxcqIigNVswdPGoRvacqEeJ6K/E5GxPokrZV Hh0mc/PMECve6fkhye3R4nq+Iy0+vEO0JV6p+WBOymgIFEgcuMqf/YKgtL/qVPAV ORBy3SSjnQ+od+fU3giJ+P/5pM1FVsULn7QR9WRAN4IC1+07MuVWCLZhETwd1OcH wFUjMZPYPbMhsdfauXrZ22z6+36JKpmC9o0utEdRbhZSyCRikQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFG8zMG8kjSlrs055mBEh00I5wT68MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvM2YzNTkzZWUtMzc3My0z OTdiLWE0N2MtM2QwMmY0MmY2NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBjcFgAwQB nnPkMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAHzrmX3dl3lkjqtrXMlgWdHZKeNYL2ksc27sc/kdAJk3kmXC wMTEZxn/4zd+4FBCpOSglqEvmululrzUepKqLzjPcDG8t9HCNWx3nz0lqI5RsGLu jyQYnkFnHr0FaHRjd25zTGZ63JKGPZAufwVS+h7PP/azt2Om7VowECNZ5jloTMIg Jbbf70AQQfti//ZsmqKoDgn4/YKRemEL5J6QNmdVhLzP7FuFac7fRBwwiUxhw2fH I26OyVM7DP3xlxqtCLpJKXUqTPqCzS7kyt3DHqSiteCwCbIV06LUXzge7a2j+fka gHje/GWl6bd6T2JEYdtKKQk57i6sA9RwBhDSSEM= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:04 2025 by rpki-client