$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa File: 9a6bc565-0a69-3578-89a9-774fc42e90c2.roa (raw, json) Hash identifier: vgBNj2uuJc8BcLXVQbVMY7B+jF+bJwJL3Q54z+mWmLU= Subject key identifier: DE:34:BC:92:D9:04:A5:DB:A6:AB:F7:D5:18:29:64:D1:31:9B:0E:94 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285847299B28A71A4A892CF5454708 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa Signing time: Tue 10 Sep 2024 01:00:30 +0000 ROA not before: Tue 10 Sep 2024 01:00:30 +0000 ROA not after: Mon 09 Dec 2024 02:00:30 +0000 asID: 399989 IP address blocks: 172.98.160.0/24 maxlen: 24 172.98.163.0/24 maxlen: 24 172.98.188.0/24 maxlen: 24 172.98.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:29:9b:28:a7:1a:4a:89:2c:f5:45:47:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Sep 10 01:00:30 2024 GMT Not After : Dec 9 02:00:30 2024 GMT Subject: CN=5f99e936-557d-4e15-9162-249dfb666624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7d:ee:e7:c7:b9:9c:47:3f:9f:c8:43:d8:98: f5:bc:7c:0d:db:ec:ad:57:cd:39:fe:37:25:2d:53: fd:18:62:6a:63:13:ab:a9:69:e7:b6:81:1d:86:58: 0d:34:02:16:3a:28:b9:fe:9e:36:b7:ac:4d:13:a0: 3c:08:a0:fa:89:37:92:9a:d3:a5:d0:90:b7:79:a2: 66:c5:28:20:1e:9e:e8:03:5b:dc:5c:45:62:85:40: c4:12:00:2d:fc:2f:30:1d:94:42:ab:e1:19:62:3f: 1b:28:f9:19:c8:bf:cf:c8:74:b5:bc:b3:9e:ac:fd: 8d:6f:ae:94:c0:ae:7e:4d:0d:01:61:29:a1:b8:d3: 4f:e5:79:97:15:dd:5a:45:db:8c:dc:d0:73:d6:13: 8d:48:02:80:8b:b7:6b:8e:99:b8:85:58:c8:83:62: 0f:7b:f9:18:1a:f0:52:ee:72:d3:56:7b:44:a3:2f: 9d:c5:6a:49:23:3a:4d:c9:52:f2:5e:b8:66:40:94: f9:d9:e1:06:c0:9c:c3:b7:50:92:19:b9:87:84:ad: cd:88:bc:1e:b1:ab:19:ab:91:b2:ad:e6:53:87:de: 17:63:8a:6a:30:fe:74:6c:80:40:3f:ff:6f:5b:43: ac:64:eb:1f:b6:dc:23:86:5a:5f:cf:aa:84:91:88: a4:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:34:BC:92:D9:04:A5:DB:A6:AB:F7:D5:18:29:64:D1:31:9B:0E:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/9a6bc565-0a69-3578-89a9-774fc42e90c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.160.0/24 172.98.163.0/24 172.98.188.0/24 172.98.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:ea:d6:b6:f3:01:9a:fd:de:bc:dc:5c:74:d3:38:4d:1f:5c: e8:36:54:b7:5c:b9:df:ae:77:3c:f6:47:f3:5b:86:03:8c:99: d2:0b:9f:aa:96:88:05:89:91:b0:11:db:f2:24:29:c3:a8:89: 9e:d7:92:5b:5d:ae:96:21:e6:8a:a9:65:56:6a:9e:09:bb:79: 29:de:99:c1:23:44:3d:6b:e3:2a:40:bf:3f:db:03:e0:c1:40: 5a:18:fc:e7:e9:fd:16:23:39:77:f7:8b:53:47:31:c5:41:00: 89:44:77:59:73:87:3f:c3:5b:15:77:cb:40:09:01:39:73:74: 33:4e:09:83:da:e7:2e:c2:15:74:15:6f:ea:02:9b:bb:46:a3: d1:21:23:09:95:50:db:de:5b:cc:8e:ea:90:6f:e1:0c:41:eb: 67:5f:b7:2e:af:4a:a5:c2:4b:e6:cb:a5:9d:f7:97:45:dd:6d: 2a:3a:22:c4:dc:ba:ff:40:c0:8d:1e:a3:e6:2d:b4:fe:60:d6: d1:b7:73:9e:40:21:0a:54:4f:3e:89:8c:1c:c2:bd:5d:c6:d1: 9e:51:4d:19:e1:f8:c8:f9:5c:c1:d4:c3:77:6c:da:b2:e1:31: 04:8b:56:54:22:63:55:57:00:d2:34:e3:20:e1:bf:f0:6b:05: 55:1f:2e:5d -----BEGIN CERTIFICATE----- MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEcpmyinGkqJLPVFRwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MDkxMDAxMDAzMFoXDTI0MTIwOTAyMDAzMFowLzEtMCsGA1UEAxMk NWY5OWU5MzYtNTU3ZC00ZTE1LTkxNjItMjQ5ZGZiNjY2NjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArX3u58e5nEc/n8hD2Jj1vHwN2+ytV805/jcl LVP9GGJqYxOrqWnntoEdhlgNNAIWOii5/p42t6xNE6A8CKD6iTeSmtOl0JC3eaJm xSggHp7oA1vcXEVihUDEEgAt/C8wHZRCq+EZYj8bKPkZyL/PyHS1vLOerP2Nb66U wK5+TQ0BYSmhuNNP5XmXFd1aRduM3NBz1hONSAKAi7drjpm4hVjIg2IPe/kYGvBS 7nLTVntEoy+dxWpJIzpNyVLyXrhmQJT52eEGwJzDt1CSGbmHhK3NiLwesasZq5Gy reZTh94XY4pqMP50bIBAP/9vW0OsZOsfttwjhlpfz6qEkYikoQIDAQABo4IDZzCC A2MwHQYDVR0OBBYEFN40vJLZBKXbpqv31RgpZNExmw6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOWE2YmM1NjUtMGE2OS0z NTc4LTg5YTktNzc0ZmM0MmU5MGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQArGKgAwQA rGKjAwQArGK8AwQArGK/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHrq1rbzAZr93rzcXHTTOE0fXOg2VLdc ud+udzz2R/NbhgOMmdILn6qWiAWJkbAR2/IkKcOoiZ7XkltdrpYh5oqpZVZqngm7 eSnemcEjRD1r4ypAvz/bA+DBQFoY/Ofp/RYjOXf3i1NHMcVBAIlEd1lzhz/DWxV3 y0AJATlzdDNOCYPa5y7CFXQVb+oCm7tGo9EhIwmVUNveW8yO6pBv4QxB62dfty6v SqXCS+bLpZ33l0XdbSo6IsTcuv9AwI0eo+YttP5g1tG3c55AIQpUTz6JjBzCvV3G 0Z5RTRnh+Mj5XMHUw3ds2rLhMQSLVlQiY1VXANI04yDhv/BrBVUfLl0= -----END CERTIFICATE-----Generated at Sun Nov 24 21:48:44 2024 by rpki-client on console-ams.rpki-client.org