$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: 1lzI4bhSawoHJmXIzDO+oOBvXiZUPSC0N6WGZ4WM8ME= Subject key identifier: 2C:0F:94:FD:6D:99:13:F9:72:79:6F:76:8B:C5:92:CF:82:BD:46:84 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858495C2436B98D464C2B14AAE2C0 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Sun 30 Mar 2025 13:01:02 +0000 ROA not before: Sun 30 Mar 2025 13:01:02 +0000 ROA not after: Sat 28 Jun 2025 13:01:02 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5c:24:36:b9:8d:46:4c:2b:14:aa:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 30 13:01:02 2025 GMT Not After : Jun 28 13:01:02 2025 GMT Subject: CN=e69fc441-3c32-480f-9c1d-6b748c311d1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b2:fb:08:75:ec:6b:eb:75:a8:4e:27:92:5a: 75:61:8b:eb:8b:02:ef:92:62:d6:fa:7c:c3:83:80: a9:0c:2f:7b:61:33:85:82:c4:76:b1:71:08:e7:f1: 37:9a:6d:07:2d:d9:ee:4e:cd:36:31:5e:20:21:85: d5:5a:7b:0b:2e:f7:65:11:cf:2e:05:9b:53:fb:76: 13:90:98:71:55:61:72:45:27:0b:dc:48:3c:34:64: 3b:71:e3:7c:5d:a6:8d:65:07:c3:67:2b:3f:5e:0a: aa:c1:4a:6d:1e:19:04:25:98:cc:1d:88:96:5c:a4: 81:02:3f:a7:52:43:cd:de:c7:74:13:5f:60:7b:9f: 3f:10:43:b3:e9:76:4a:ac:84:e0:36:f7:92:d4:af: b4:d5:3d:43:d9:a1:ae:40:0f:d4:37:f5:b3:16:dc: 4d:ea:ce:00:79:46:74:a4:28:37:cd:64:19:2d:07: df:f0:09:52:63:72:61:35:b7:6f:2d:f9:cb:17:1b: 92:60:ad:8a:27:41:47:32:d7:54:c0:b6:97:48:de: bc:6a:e2:9c:2a:f5:1d:b8:6e:fe:ba:ad:c7:41:a1: 50:00:06:e3:d8:a6:01:0f:8d:88:95:0e:a3:79:2c: 02:b3:ba:4d:05:22:5e:e3:9b:dd:88:c1:32:42:58: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:0F:94:FD:6D:99:13:F9:72:79:6F:76:8B:C5:92:CF:82:BD:46:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:a1:84:82:0f:08:9c:43:70:03:9e:9d:d1:ca:58:ce:bf:c9: 8c:0e:dd:9e:d0:98:57:9f:6c:7d:89:5d:15:82:ca:37:fe:ec: 17:85:aa:21:a3:10:1f:6a:47:7f:79:15:b2:d7:e6:e0:70:80: 69:a4:88:46:01:51:09:b9:10:93:62:06:ae:c1:1a:46:68:05: e4:61:6b:b5:d1:35:0e:65:6b:f9:7f:94:e9:73:13:13:4b:db: 0d:64:5c:01:94:49:ca:f5:9b:b5:1b:89:a8:73:5f:ae:c8:4f: 24:9f:03:48:e6:69:4b:e5:e9:85:7e:3c:b8:ca:42:a4:5b:e4: 5b:28:38:09:4f:64:fa:a5:9b:17:d8:a2:f4:a6:70:9c:5d:51: 68:64:5b:be:37:81:b1:89:7e:ac:6a:d7:6d:13:fe:f1:35:1e: bb:d3:13:cc:c5:4f:91:07:e6:28:3d:48:92:e8:4d:33:7d:c7: ef:dd:b7:cb:3f:a6:ab:c6:f5:88:b2:4f:3a:c0:55:a2:9e:3d: b3:6a:68:74:3d:c7:bd:63:4d:74:fa:a2:69:a7:d6:f4:f6:29: b0:6f:f6:81:95:7c:1d:74:df:62:69:a5:9f:ab:59:16:a3:cb: fa:25:fe:96:df:4c:81:2c:de:fc:0e:e8:0f:ae:d2:e3:af:92: 00:95:8d:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElcJDa5jUZMKxSq4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk ZTY5ZmM0NDEtM2MzMi00ODBmLTljMWQtNmI3NDhjMzExZDFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLL7CHXsa+t1qE4nklp1YYvriwLvkmLW+nzD g4CpDC97YTOFgsR2sXEI5/E3mm0HLdnuTs02MV4gIYXVWnsLLvdlEc8uBZtT+3YT kJhxVWFyRScL3Eg8NGQ7ceN8XaaNZQfDZys/XgqqwUptHhkEJZjMHYiWXKSBAj+n UkPN3sd0E19ge58/EEOz6XZKrITgNveS1K+01T1D2aGuQA/UN/WzFtxN6s4AeUZ0 pCg3zWQZLQff8AlSY3JhNbdvLfnLFxuSYK2KJ0FHMtdUwLaXSN68auKcKvUduG7+ uq3HQaFQAAbj2KYBD42IlQ6jeSwCs7pNBSJe45vdiMEyQlh1RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCwPlP1tmRP5cnlvdovFks+CvUaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGqhhIIPCJxDcAOendHKWM6/yYwO3Z7QmFefbH2JXRWCyjf+7BeFqiGj EB9qR395FbLX5uBwgGmkiEYBUQm5EJNiBq7BGkZoBeRha7XRNQ5la/l/lOlzExNL 2w1kXAGUScr1m7UbiahzX67ITySfA0jmaUvl6YV+PLjKQqRb5FsoOAlPZPqlmxfY ovSmcJxdUWhkW743gbGJfqxq120T/vE1HrvTE8zFT5EH5ig9SJLoTTN9x+/dt8s/ pqvG9YiyTzrAVaKePbNqaHQ9x71jTXT6ommn1vT2KbBv9oGVfB1032JppZ+rWRaj y/ol/pbfTIEs3vwO6A+u0uOvkgCVjao= -----END CERTIFICATE-----Generated at Sun Apr 6 17:44:26 2025 by rpki-client