$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa File: 61f2645f-1281-3f43-b68c-68cc423e77b6.roa (raw, json) Hash identifier: h3bY/UPEMfFw4xnuhMg27UthmKcBtBrrp52s9CMFXR4= Subject key identifier: D6:F9:C8:6A:C3:E6:71:26:64:41:51:D0:CA:80:88:AC:B3:4B:7B:A9 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858489D05E7B5A5274BCCA671F980 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa Signing time: Tue 21 Jan 2025 02:00:39 +0000 ROA not before: Tue 21 Jan 2025 02:00:39 +0000 ROA not after: Mon 21 Apr 2025 01:00:39 +0000 asID: 264617 IP address blocks: 172.98.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9d:05:e7:b5:a5:27:4b:cc:a6:71:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Jan 21 02:00:39 2025 GMT Not After : Apr 21 01:00:39 2025 GMT Subject: CN=fdd0f003-3a98-4eb4-932f-b5d5e730533e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:fe:8e:de:c0:d0:2f:a2:88:3c:1a:c0:38:37: 8d:42:e6:7a:0e:14:c3:3b:d8:79:87:ba:5f:51:29: 9d:51:03:7d:a8:7a:a4:4a:63:d1:8b:01:36:81:21: c2:e1:39:b5:37:e4:3e:b1:52:1c:06:83:3f:03:9e: d4:7c:37:2d:df:f5:a0:9f:fe:21:a3:f7:77:19:4b: 59:26:3c:be:94:6f:98:27:0a:9f:3b:c9:6e:08:ae: c0:54:89:37:24:5f:77:91:cb:60:62:88:b7:f3:c2: ef:50:de:15:ef:2d:b4:b3:96:18:c7:b1:ff:14:36: a5:47:b5:9a:5a:b1:97:c0:14:b2:3e:cc:c8:6c:0b: a5:6c:f7:ee:51:c5:99:35:86:4c:2d:73:1a:60:99: 07:d3:1d:cc:83:d4:74:1d:4d:60:11:cd:9e:72:8f: 39:e3:fa:85:39:5e:29:35:5d:dd:c9:58:db:4f:cf: a0:ee:0f:a7:54:c5:9f:d3:27:a6:30:d0:44:6c:9d: da:68:81:37:c6:b1:da:f1:e2:39:a9:07:43:37:29: 71:96:fe:e9:2c:fc:7f:d9:0e:37:79:4e:17:39:52: be:17:4e:0b:cb:cb:a3:09:5c:96:bb:80:6c:1a:c2: 4d:87:54:a6:2e:46:25:d2:d2:7a:49:70:6e:6c:13: 49:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:F9:C8:6A:C3:E6:71:26:64:41:51:D0:CA:80:88:AC:B3:4B:7B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/61f2645f-1281-3f43-b68c-68cc423e77b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:bb:b0:a1:e1:48:d2:ca:72:9f:a2:cb:ae:fa:64:4f:e3:58: 56:ab:54:9d:58:05:d7:05:98:fd:7e:0f:00:c0:1a:88:28:ba: 62:a8:14:84:b0:79:a9:79:c0:ab:ed:41:59:23:76:d2:af:a7: 9c:8e:00:10:a6:03:31:68:06:35:a8:49:f1:3a:21:b5:8b:c7: 59:f5:73:4f:6d:7d:0e:f8:7b:9e:54:f4:d0:01:1e:35:ac:42: 1c:f5:6b:5c:ed:44:a6:45:79:65:a9:da:ec:7f:8a:d4:18:ca: ef:c7:c5:24:4e:70:41:43:2d:13:3a:0f:2c:b0:bb:ad:2f:55: e6:55:7b:d3:73:93:6f:82:e0:38:ff:85:e4:19:10:f7:ab:12: 7b:75:dd:0c:fe:91:d4:30:fa:a9:75:9f:17:69:e2:80:a3:16: 52:37:47:97:7d:0b:f0:57:0a:74:83:c2:0e:d6:2b:fd:c8:8e: 6c:65:ef:cc:d6:d4:25:bc:bb:f9:87:22:91:c7:9b:52:75:fc: 6b:0d:16:5d:b5:bc:af:ca:45:48:88:d0:71:df:4c:1b:13:c9: 8a:83:a1:c3:17:a7:83:d6:11:3f:d9:b5:d0:7e:70:30:cf:e8: ae:1c:0f:74:50:80:a4:71:21:da:ae:03:51:f5:d8:fb:0f:c2: f7:29:78:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEidBee1pSdLzKZx+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDEyMTAyMDAzOVoXDTI1MDQyMTAxMDAzOVowLzEtMCsGA1UEAxMk ZmRkMGYwMDMtM2E5OC00ZWI0LTkzMmYtYjVkNWU3MzA1MzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgf6O3sDQL6KIPBrAODeNQuZ6DhTDO9h5h7pf USmdUQN9qHqkSmPRiwE2gSHC4Tm1N+Q+sVIcBoM/A57UfDct3/Wgn/4ho/d3GUtZ Jjy+lG+YJwqfO8luCK7AVIk3JF93kctgYoi388LvUN4V7y20s5YYx7H/FDalR7Wa WrGXwBSyPszIbAulbPfuUcWZNYZMLXMaYJkH0x3Mg9R0HU1gEc2eco854/qFOV4p NV3dyVjbT8+g7g+nVMWf0yemMNBEbJ3aaIE3xrHa8eI5qQdDNylxlv7pLPx/2Q43 eU4XOVK+F04Ly8ujCVyWu4BsGsJNh1SmLkYl0tJ6SXBubBNJXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb5yGrD5nEmZEFR0MqAiKyzS3upMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjFmMjY0NWYtMTI4MS0z ZjQzLWI2OGMtNjhjYzQyM2U3N2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIa7sKHhSNLKcp+iy676ZE/jWFarVJ1YBdcFmP1+DwDAGogoumKoFISw eal5wKvtQVkjdtKvp5yOABCmAzFoBjWoSfE6IbWLx1n1c09tfQ74e55U9NABHjWs Qhz1a1ztRKZFeWWp2ux/itQYyu/HxSROcEFDLRM6Dyywu60vVeZVe9Nzk2+C4Dj/ heQZEPerEnt13Qz+kdQw+ql1nxdp4oCjFlI3R5d9C/BXCnSDwg7WK/3Ijmxl78zW 1CW8u/mHIpHHm1J1/GsNFl21vK/KRUiI0HHfTBsTyYqDocMXp4PWET/ZtdB+cDDP 6K4cD3RQgKRxIdquA1H12PsPwvcpeE0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:07 2025 by rpki-client