$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa File: 67301de7-be31-397f-b2d2-044259e8e1f3.roa (raw, json) Hash identifier: LRbvZYeNMiWCX1X+W307NnD1sP0yrjBaKuziurzt4Fw= Subject key identifier: F5:07:44:2C:C8:AA:6D:CE:89:BB:1C:AD:00:71:90:B1:B0:FD:BF:BE Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858479D76B4E75C6FDA5DC8B7D900 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa Signing time: Mon 21 Oct 2024 13:00:41 +0000 ROA not before: Mon 21 Oct 2024 13:00:41 +0000 ROA not after: Sun 19 Jan 2025 14:00:41 +0000 asID: 9009 IP address blocks: 172.98.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:9d:76:b4:e7:5c:6f:da:5d:c8:b7:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Oct 21 13:00:41 2024 GMT Not After : Jan 19 14:00:41 2025 GMT Subject: CN=04141639-9ea7-4764-ac46-8ccdf7bc993e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ae:b3:fa:0c:15:7a:fe:d4:89:d5:3b:be:13: 78:f8:c2:0c:70:30:46:a2:79:f2:11:7e:3e:e9:70: 48:62:5a:5a:ac:7f:71:12:6f:46:77:42:cd:c0:85: 37:59:5d:fb:aa:fe:ff:dd:9d:fa:dc:e5:ee:06:65: 75:12:75:e6:75:8d:5d:ab:d7:cb:a7:48:52:45:74: 9d:db:65:bb:dd:75:5a:f1:5c:fa:fe:67:da:c6:25: 9d:18:55:be:4a:40:9b:0e:30:78:8b:16:d4:f3:93: 6d:82:fb:9d:2f:42:cd:97:63:27:59:34:00:85:2f: b3:9c:78:bd:c8:c1:04:98:a3:4b:b1:0d:25:5c:71: fd:9a:d5:db:80:ab:27:78:e0:c3:a3:f8:6e:11:f1: d8:e3:b0:2b:eb:0b:82:e3:cc:4e:55:af:82:db:59: 2b:54:b4:bc:73:1f:9b:66:ad:0c:92:d6:c4:52:d3: 9d:97:54:ae:67:12:70:d4:a6:06:dc:c5:3e:dc:84: 3d:d9:f5:6d:aa:f6:c9:36:27:a9:ca:46:1c:80:67: fc:a6:b9:b9:77:ce:e7:c6:d5:fd:9f:40:28:d0:2d: 1c:18:c9:be:79:82:87:57:8c:69:fc:8d:7c:6a:d2: 50:41:84:0f:b2:64:1e:0f:18:95:47:38:65:b8:2d: f1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:07:44:2C:C8:AA:6D:CE:89:BB:1C:AD:00:71:90:B1:B0:FD:BF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/67301de7-be31-397f-b2d2-044259e8e1f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:01:b9:df:fd:3e:8f:61:9b:12:5a:0f:3d:5e:46:86:b2:f7: 9a:36:9c:9c:2a:e2:3f:bb:8c:62:73:1e:ba:be:5e:65:c4:bf: 6a:ef:37:b7:2a:4a:f9:5e:04:1f:76:9f:8f:29:ce:35:51:04: a4:d3:d4:98:82:f6:4d:ac:a3:52:71:99:ab:96:f4:04:96:e0: f0:48:d1:c6:bd:cb:19:33:d5:1d:74:8c:e2:50:fe:70:d8:53: 9d:66:e3:93:28:4c:86:02:37:64:4c:4c:7d:ac:2a:1f:99:f1: 21:3e:ab:68:c1:c8:64:57:3a:53:a1:07:42:b7:b2:90:73:f9: 3d:45:95:d7:e4:db:20:98:44:94:1e:17:f5:53:b8:38:f9:bd: 7f:05:ba:d4:24:51:84:c7:cd:49:fd:e9:dd:67:dd:c6:c6:6d: d1:2e:f3:88:3d:ce:cd:86:67:bb:ef:37:26:ff:ad:df:cb:7b: d2:c1:35:04:74:9f:43:a4:b7:80:d2:50:c5:d6:72:67:d5:d7: d4:97:f6:03:c6:f2:b1:b4:3b:90:2d:93:dd:08:99:53:ee:5a: 0c:69:f7:9d:c7:ef:cd:48:c0:86:6d:02:3d:41:9e:97:09:66: f5:b5:b8:49:a7:ab:9d:a7:04:41:2b:44:e0:38:5c:1a:f0:05: 04:8e:3d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEeddrTnXG/aXci32QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTAyMTEzMDA0MVoXDTI1MDExOTE0MDA0MVowLzEtMCsGA1UEAxMk MDQxNDE2MzktOWVhNy00NzY0LWFjNDYtOGNjZGY3YmM5OTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK6z+gwVev7UidU7vhN4+MIMcDBGonnyEX4+ 6XBIYlparH9xEm9Gd0LNwIU3WV37qv7/3Z363OXuBmV1EnXmdY1dq9fLp0hSRXSd 22W73XVa8Vz6/mfaxiWdGFW+SkCbDjB4ixbU85NtgvudL0LNl2MnWTQAhS+znHi9 yMEEmKNLsQ0lXHH9mtXbgKsneODDo/huEfHY47Ar6wuC48xOVa+C21krVLS8cx+b Zq0MktbEUtOdl1SuZxJw1KYG3MU+3IQ92fVtqvbJNiepykYcgGf8prm5d87nxtX9 n0Ao0C0cGMm+eYKHV4xp/I18atJQQYQPsmQeDxiVRzhluC3xPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUHRCzIqm3OibscrQBxkLGw/b++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvNjczMDFkZTctYmUzMS0z OTdmLWIyZDItMDQ0MjU5ZThlMWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQBud/9Po9hmxJaDz1eRoay95o2nJwq4j+7jGJzHrq+XmXEv2rvN7cq SvleBB92n48pzjVRBKTT1JiC9k2so1JxmauW9ASW4PBI0ca9yxkz1R10jOJQ/nDY U51m45MoTIYCN2RMTH2sKh+Z8SE+q2jByGRXOlOhB0K3spBz+T1Fldfk2yCYRJQe F/VTuDj5vX8FutQkUYTHzUn96d1n3cbGbdEu84g9zs2GZ7vvNyb/rd/Le9LBNQR0 n0Okt4DSUMXWcmfV19SX9gPG8rG0O5Atk90ImVPuWgxp953H781IwIZtAj1BnpcJ ZvW1uEmnq52nBEErROA4XBrwBQSOPeI= -----END CERTIFICATE-----Generated at Thu Nov 21 21:09:50 2024 by rpki-client on console-fra.rpki-client.org