$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa File: 416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa (raw, json) Hash identifier: 1043i4Oi88xCWE+7AibwBZfni287Vfkdj0yFtKE2TbU= Subject key identifier: 3B:85:3C:11:7F:96:A9:86:FA:D5:03:C7:FB:AD:9C:78:3C:60:D8:2E Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858486960657257F6A4D9B10FD780 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa Signing time: Thu 02 Jan 2025 14:00:52 +0000 ROA not before: Thu 02 Jan 2025 14:00:52 +0000 ROA not after: Wed 02 Apr 2025 13:00:52 +0000 asID: 1239 IP address blocks: 172.98.161.0/24 maxlen: 24 172.98.167.0/24 maxlen: 24 172.98.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:69:60:65:72:57:f6:a4:d9:b1:0f:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 2 14:00:52 2025 GMT Not After : Apr 2 13:00:52 2025 GMT Subject: CN=5c8a73f5-31a3-4bc3-b8d7-866955ea2232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d6:3f:85:44:07:4e:de:8e:5f:6b:d7:d7:c7: 10:44:a6:87:46:29:56:65:c4:9d:4c:a0:cb:6a:e5: 86:23:b3:c4:f6:cb:28:82:77:ab:78:39:b5:6a:59: 6d:a0:46:52:d7:38:a5:87:b9:0c:5c:24:41:b9:21: 8d:27:8c:88:60:81:fb:2a:21:3e:ab:07:a9:78:3c: 40:bf:74:1a:8d:95:86:c8:a9:d1:b8:5b:90:a2:ba: 93:1b:e2:4c:fa:95:52:c8:c3:0c:4c:3b:79:29:9b: 8f:6b:82:fc:d6:7b:89:96:eb:e0:2f:99:81:79:16: d0:22:54:f5:de:6b:19:dd:b4:67:ad:b4:67:6a:55: 07:23:e2:99:ce:a6:be:af:f7:58:79:05:30:dd:d1: 71:ac:aa:ae:fa:bf:d0:3f:23:39:46:ff:d7:1a:b8: 29:f0:77:32:31:3c:5e:03:51:2a:90:65:cb:69:c3: 29:dc:2b:09:da:cb:05:16:fa:68:d2:2b:5f:50:89: 3f:12:c3:88:e5:5e:78:c7:b5:75:fd:03:0d:8e:f7: ac:6b:e8:72:d0:a7:3f:60:f8:d5:4a:01:6c:d9:31: 6c:5d:23:64:1e:b2:6e:4c:da:f9:a5:2e:80:81:e6: aa:85:76:0d:19:7d:c0:7b:aa:4a:31:05:c7:21:58: 54:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:85:3C:11:7F:96:A9:86:FA:D5:03:C7:FB:AD:9C:78:3C:60:D8:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/416f8641-a0ed-3bc1-b5dd-3f95731a2c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 172.98.167.0/24 172.98.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:96:e3:cf:be:5e:15:95:df:98:b4:db:08:83:63:96:31:4c: b7:86:2c:31:c7:c7:88:8b:ae:20:8e:1b:dd:21:05:86:45:27: 46:14:e4:ec:f4:1b:60:0a:a3:85:73:fe:ff:ca:87:66:62:01: c9:07:ed:a3:e1:ec:1f:9a:2e:85:35:02:dd:27:01:27:2a:31: af:98:0c:e0:f2:0f:a3:6f:6d:e0:03:66:27:94:28:97:26:0b: b3:1a:be:16:40:40:ea:26:59:59:01:18:32:de:2f:92:47:d9: 3a:78:c6:71:cb:20:a0:8c:f7:04:ce:17:d5:08:7e:19:8d:79: ac:09:d6:15:d5:cb:68:ec:57:84:99:dc:a1:bc:21:4f:41:e1: c5:10:bd:d2:ac:75:3f:fa:3b:b1:f3:4e:d2:c6:22:84:08:8a: 54:e7:d0:b9:65:c1:d1:3a:f1:e4:07:3f:69:86:c6:7e:83:d1: ae:d3:51:7e:30:08:33:6f:c3:af:a7:0e:a4:51:81:22:1f:16: b3:94:62:83:ff:ab:a8:13:e1:a5:cb:89:4d:96:af:f1:05:6b: b6:f8:ec:ea:35:d2:da:a0:c1:7e:22:75:62:07:9c:45:e2:42: 8a:4e:b0:b0:b9:ab:4c:41:21:e5:bc:ee:98:2a:a4:3b:bd:a2: d4:8a:d7:34 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEhpYGVyV/ak2bEP14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDEwMjE0MDA1MloXDTI1MDQwMjEzMDA1MlowLzEtMCsGA1UEAxMk NWM4YTczZjUtMzFhMy00YmMzLWI4ZDctODY2OTU1ZWEyMjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotY/hUQHTt6OX2vX18cQRKaHRilWZcSdTKDL auWGI7PE9ssognereDm1alltoEZS1zilh7kMXCRBuSGNJ4yIYIH7KiE+qwepeDxA v3QajZWGyKnRuFuQorqTG+JM+pVSyMMMTDt5KZuPa4L81nuJluvgL5mBeRbQIlT1 3msZ3bRnrbRnalUHI+KZzqa+r/dYeQUw3dFxrKqu+r/QPyM5Rv/XGrgp8HcyMTxe A1EqkGXLacMp3CsJ2ssFFvpo0itfUIk/EsOI5V54x7V1/QMNjvesa+hy0Kc/YPjV SgFs2TFsXSNkHrJuTNr5pS6AgeaqhXYNGX3Ae6pKMQXHIVhUSwIDAQABo4IDYTCC A10wHQYDVR0OBBYEFDuFPBF/lqmG+tUDx/utnHg8YNguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNDE2Zjg2NDEtYTBlZC0z YmMxLWI1ZGQtM2Y5NTczMWEyYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQArGKhAwQA rGKnAwQArGK9MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBAIiW48++XhWV35i02wiDY5YxTLeGLDHHx4iLriCO G90hBYZFJ0YU5Oz0G2AKo4Vz/v/Kh2ZiAckH7aPh7B+aLoU1At0nAScqMa+YDODy D6NvbeADZieUKJcmC7MavhZAQOomWVkBGDLeL5JH2Tp4xnHLIKCM9wTOF9UIfhmN eawJ1hXVy2jsV4SZ3KG8IU9B4cUQvdKsdT/6O7HzTtLGIoQIilTn0LllwdE68eQH P2mGxn6D0a7TUX4wCDNvw6+nDqRRgSIfFrOUYoP/q6gT4aXLiU2Wr/EFa7b47Oo1 0tqgwX4idWIHnEXiQopOsLC5q0xBIeW87pgqpDu9otSK1zQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:04 2025 by rpki-client