$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: Zuc4Lul2whSC+HRX1VV9KnkM5MYTWSTkqNOSLhIrfig= Subject key identifier: 69:FB:36:7B:D1:A9:CF:B1:BF:8E:DF:E0:F3:58:78:D9:21:96:1C:1D Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285844FF90195DF9EE4D6506047440 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Sat 24 Feb 2024 14:00:31 +0000 ROA not before: Sat 24 Feb 2024 14:00:31 +0000 ROA not after: Fri 24 May 2024 13:00:31 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 19 Apr 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:ff:90:19:5d:f9:ee:4d:65:06:04:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 24 14:00:31 2024 GMT Not After : May 24 13:00:31 2024 GMT Subject: CN=9fd2ab54-ef8d-483c-b2a8-54f36c66958f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7f:0c:39:19:f0:29:02:f8:a6:29:a5:6f:60: a3:7a:6d:4e:e2:af:81:32:ab:3d:20:5f:1c:91:8e: bd:7c:e5:dc:e1:de:d2:84:83:34:70:d5:db:12:b9: aa:07:93:79:6c:ed:ad:55:67:01:88:a0:a4:75:85: 4f:09:8d:eb:c1:60:93:e3:14:e1:34:d1:9c:76:fc: 57:75:96:b3:78:a3:02:dd:a0:18:14:c9:8b:42:ef: e5:2e:2b:98:97:c4:2e:34:a5:08:2b:ca:8d:54:6b: db:3b:7d:ac:80:ec:b5:ec:74:49:b3:01:1e:ba:c3: c1:99:b9:db:68:ab:3c:74:e4:06:7c:41:5e:2a:1b: 67:f5:a9:cb:a5:b6:48:3d:60:40:08:8e:c2:d1:7b: 3c:90:22:a1:1d:94:14:0c:58:7f:28:ce:2a:62:bd: c5:84:1e:8e:f9:57:db:5a:4d:93:34:7c:8c:97:8f: 1f:ba:7c:be:ce:93:24:3e:8d:15:71:09:f4:ec:80: 78:01:97:ee:8f:ed:1d:f6:fc:65:48:a0:ac:c4:e2: e4:e9:be:ba:41:96:74:66:b7:73:d1:78:e4:a6:7c: 95:6d:53:7f:32:dd:4a:88:c1:6b:fc:cc:67:92:0f: 4b:aa:a7:6f:e9:55:3d:1e:7b:00:24:62:9e:07:ed: 64:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FB:36:7B:D1:A9:CF:B1:BF:8E:DF:E0:F3:58:78:D9:21:96:1C:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:bd:a4:50:be:19:f9:93:a3:bb:64:6f:73:be:83:33:9d:e7: f6:9e:5f:0c:78:23:bf:e4:0a:05:15:fe:d6:e5:b1:9a:40:ce: 24:81:76:1a:15:7f:57:c1:e6:a6:49:57:65:31:33:ad:be:38: 17:84:d6:df:1c:7c:4b:f5:57:9b:5d:5f:f6:e5:9b:2e:33:c9: f6:3a:dd:6c:d0:f5:a4:74:23:2a:97:3e:0f:cd:ed:e1:4b:39: 9d:ac:2f:50:a2:7e:d5:9f:24:87:f2:e9:00:c8:91:0b:73:fb: 47:c9:ac:d0:13:01:82:a3:6d:e2:b9:c8:23:b5:33:b4:51:2d: e0:60:18:a4:51:d8:84:cd:8c:9d:eb:0e:4f:9c:ba:ed:84:34: d3:c2:70:3b:08:0b:c8:a1:72:b7:45:bd:d3:5d:6a:f8:c6:ce: d5:09:c5:98:45:26:df:6e:b8:80:f1:ee:3e:a8:ec:83:59:40: cd:99:97:0a:92:d5:24:3d:6b:f3:7c:c5:57:06:67:4c:bc:0a: e0:28:07:5c:3a:db:dd:aa:f1:b0:af:5a:93:07:b7:db:ab:f6: ba:7d:71:5d:89:2c:4c:6e:75:f6:2d:af:99:78:06:b0:62:da: b0:8b:61:cb:83:1a:f3:ce:16:55:b0:b6:0d:1e:80:16:10:50: b3:4a:e8:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET/kBld+e5NZQYEdEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDIyNDE0MDAzMVoXDTI0MDUyNDEzMDAzMVowLzEtMCsGA1UEAxMk OWZkMmFiNTQtZWY4ZC00ODNjLWIyYTgtNTRmMzZjNjY5NThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj38MORnwKQL4pimlb2Cjem1O4q+BMqs9IF8c kY69fOXc4d7ShIM0cNXbErmqB5N5bO2tVWcBiKCkdYVPCY3rwWCT4xThNNGcdvxX dZazeKMC3aAYFMmLQu/lLiuYl8QuNKUIK8qNVGvbO32sgOy17HRJswEeusPBmbnb aKs8dOQGfEFeKhtn9anLpbZIPWBACI7C0Xs8kCKhHZQUDFh/KM4qYr3FhB6O+Vfb Wk2TNHyMl48funy+zpMkPo0VcQn07IB4AZfuj+0d9vxlSKCsxOLk6b66QZZ0Zrdz 0XjkpnyVbVN/Mt1KiMFr/Mxnkg9Lqqdv6VU9HnsAJGKeB+1kCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGn7NnvRqc+xv47f4PNYeNkhlhwdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACC9pFC+GfmTo7tkb3O+gzOd5/aeXwx4I7/kCgUV/tblsZpAziSBdhoV f1fB5qZJV2UxM62+OBeE1t8cfEv1V5tdX/blmy4zyfY63WzQ9aR0IyqXPg/N7eFL OZ2sL1CiftWfJIfy6QDIkQtz+0fJrNATAYKjbeK5yCO1M7RRLeBgGKRR2ITNjJ3r Dk+cuu2ENNPCcDsIC8ihcrdFvdNdavjGztUJxZhFJt9uuIDx7j6o7INZQM2ZlwqS 1SQ9a/N8xVcGZ0y8CuAoB1w6292q8bCvWpMHt9ur9rp9cV2JLExudfYtr5l4BrBi 2rCLYcuDGvPOFlWwtg0egBYQULNK6Bo= -----END CERTIFICATE-----Generated at Wed Apr 17 21:13:33 2024 by rpki-client on console-ams.rpki-client.org