$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa File: 416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json) Hash identifier: nnO+3ljDxXePm8MsJq0oJFAhZAW3hDFyfia/kfTeqLw= Subject key identifier: 92:4E:9E:9C:78:41:3F:3E:3B:9B:9D:3E:A0:2C:2A:BB:19:37:FC:8A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584949FE8EA9CF7008FB7A9057C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 1239 IP address blocks: 172.98.161.0/24 maxlen: 24 172.98.167.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8e:a9:cf:70:08:fb:7a:90:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=90cb4bc3-e094-42af-b9a2-833c4d0c6b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:78:6a:0a:4e:0e:ca:29:e4:32:b9:93:b8:81: 58:a9:5d:53:a4:b2:2a:c9:ff:e6:4f:a9:d5:68:33: 10:0b:b2:3d:b9:6e:92:77:81:e7:dc:fb:5f:99:92: 65:06:41:79:75:77:81:b9:3d:58:d2:d2:24:00:33: 28:7f:79:f1:de:ca:8b:e1:d9:47:f9:f4:7e:79:85: b7:ff:98:13:d7:6a:0b:1a:48:32:5b:d9:3c:8a:cc: a3:18:d8:6d:da:bd:26:19:97:96:54:47:b9:6d:7e: e8:71:ad:bf:3e:03:3f:7d:96:94:10:b8:eb:0f:80: b8:02:b1:bf:5c:b7:5b:28:a2:c8:bc:df:83:3c:13: a9:4d:70:00:93:3d:ed:e6:3a:0a:bc:58:2e:fc:32: 7e:88:31:12:a2:8a:31:cb:54:2a:74:c8:8c:0e:ad: ad:a7:8b:00:72:9b:a2:fe:77:aa:42:c3:88:ab:63: 75:bd:0b:77:e5:ca:08:35:e4:f9:c0:65:d8:80:a4: 7e:43:bd:c9:45:7f:88:df:ec:ad:bd:53:9b:25:8b: 8c:50:2d:28:7e:83:1b:dd:07:17:e4:a8:22:80:c3: 31:26:e8:c5:ef:d2:1d:8b:67:f8:e6:63:a9:c4:c6: ed:ef:40:7a:bb:93:02:84:06:d7:6b:ac:60:e5:8c: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:4E:9E:9C:78:41:3F:3E:3B:9B:9D:3E:A0:2C:2A:BB:19:37:FC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 172.98.167.0/24 172.98.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c4:74:1d:ac:8e:b4:c3:d4:d2:3d:05:09:9c:11:82:79:15: 92:ac:62:f8:0e:f8:71:bc:fc:07:06:4c:8e:4f:94:85:39:18: c6:31:4b:ef:d2:ad:cd:fc:c5:eb:52:09:91:a1:62:3e:10:d9: dd:3d:a5:25:3e:52:c5:d2:ee:88:f7:fe:b4:ae:97:58:c1:53: ea:78:0c:46:f7:cb:a9:f0:55:3c:01:4e:53:a0:c2:f6:a1:72: 67:49:a3:24:9e:ac:c0:b1:d8:be:03:ca:2d:54:bb:b1:aa:b4: 34:2f:46:ac:25:ac:a9:31:6f:14:f8:25:8c:93:54:c0:d1:18: e6:01:c1:a6:c5:00:f5:e5:9f:95:36:6e:3b:a0:04:71:11:c6: 46:13:90:9e:e1:23:24:d3:18:cc:7c:d9:87:99:7c:84:f3:66: 92:02:84:7f:75:dd:2a:4d:b4:02:2a:20:e7:9f:f3:b3:da:c6: cd:9b:d7:4d:b5:91:c5:a9:cd:aa:c2:70:23:18:7f:0c:f1:0f: 34:37:df:43:dd:47:4e:de:33:e9:3a:7f:05:a5:88:40:41:2f: af:57:b9:b9:17:86:8e:de:50:99:5a:d0:2b:1e:79:1d:1b:36: 73:40:46:bc:0e:cf:eb:af:a7:22:27:c3:2a:b8:f5:06:59:6d: 04:6c:16:cf -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWElJ/o6pz3AI+3qQV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk OTBjYjRiYzMtZTA5NC00MmFmLWI5YTItODMzYzRkMGM2YjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHhqCk4OyinkMrmTuIFYqV1TpLIqyf/mT6nV aDMQC7I9uW6Sd4Hn3PtfmZJlBkF5dXeBuT1Y0tIkADMof3nx3sqL4dlH+fR+eYW3 /5gT12oLGkgyW9k8isyjGNht2r0mGZeWVEe5bX7oca2/PgM/fZaUELjrD4C4ArG/ XLdbKKLIvN+DPBOpTXAAkz3t5joKvFgu/DJ+iDESoooxy1QqdMiMDq2tp4sAcpui /neqQsOIq2N1vQt35coINeT5wGXYgKR+Q73JRX+I3+ytvVObJYuMUC0ofoMb3QcX 5KgigMMxJujF79Idi2f45mOpxMbt70B6u5MChAbXa6xg5Yx6uQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFJJOnpx4QT8+O5udPqAsKrsZN/yKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDE2Zjg2NDEtYTBlZC0z YmMxLWI1ZGQtM2Y5NTczMWEyYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGKhAwQA rGKnAwQArGK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAFHEdB2sjrTD1NI9BQmcEYJ5FZKsYvgO+HG8/AcG TI5PlIU5GMYxS+/Src38xetSCZGhYj4Q2d09pSU+UsXS7oj3/rSul1jBU+p4DEb3 y6nwVTwBTlOgwvahcmdJoySerMCx2L4Dyi1Uu7GqtDQvRqwlrKkxbxT4JYyTVMDR GOYBwabFAPXln5U2bjugBHERxkYTkJ7hIyTTGMx82YeZfITzZpIChH913SpNtAIq IOef87Paxs2b1021kcWpzarCcCMYfwzxDzQ330PdR07eM+k6fwWliEBBL69XubkX ho7eUJla0CseeR0bNnNARrwOz+uvpyInwyq49QZZbQRsFs8= -----END CERTIFICATE-----Generated at Thu Apr 17 12:29:48 2025 by rpki-client