$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: ynJ1ovMPDuHM8TnomFyHJVKb2pRTLWNe3s2JUiFMMbQ= Subject key identifier: E0:BA:B3:2F:8A:A1:9B:FD:CB:BE:79:E0:BA:B9:E7:38:9D:F2:26:22 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285848E16BEA868A6845B4D621F900 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Fri 14 Feb 2025 14:00:52 +0000 ROA not before: Fri 14 Feb 2025 14:00:52 +0000 ROA not after: Thu 15 May 2025 13:00:52 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e1:6b:ea:86:8a:68:45:b4:d6:21:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Feb 14 14:00:52 2025 GMT Not After : May 15 13:00:52 2025 GMT Subject: CN=f27e263e-d120-494c-a0b8-f9dfe673f453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c2:a3:45:3a:a3:58:ab:dd:9c:d9:37:c3:a4: 31:ec:93:83:d7:b0:fa:71:b9:e9:b1:2a:a3:ff:63: 7e:27:9a:d5:55:20:fe:47:b6:64:fb:14:01:cd:74: 32:f9:ec:70:01:ad:10:33:7d:f7:6b:31:41:a5:5b: fd:a7:4e:96:1f:b9:91:b6:97:ef:88:b2:45:d2:ec: ae:51:89:18:36:43:a9:4f:03:44:66:43:a7:2c:7a: a5:00:78:f4:70:c9:b0:e3:55:ff:75:2b:ab:39:28: c8:8c:44:30:e5:fd:71:85:a2:d2:8b:6c:78:45:ff: ff:67:bb:10:09:4a:32:e3:fb:63:a3:7d:36:3b:83: 47:77:53:9c:3b:b5:ce:d7:c8:3b:7b:a1:df:99:78: 1d:e4:f2:55:79:06:03:43:cc:b6:4a:dd:12:70:cc: 20:13:43:90:0f:6f:32:67:b8:42:cb:a2:33:7e:a0: 4c:2b:82:12:37:23:2e:3c:d7:68:38:9b:2a:a0:d7: 8c:52:87:d8:11:9b:ce:2a:0b:6f:9f:1f:5f:c7:80: fa:a7:b8:56:1e:b7:e4:f6:98:bc:e3:04:8d:4c:13: 62:d1:e9:f6:18:1e:df:c0:65:35:e7:a0:34:9f:9f: 15:3c:c5:08:da:3a:29:30:c5:3f:b8:97:9d:b3:f8: b7:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BA:B3:2F:8A:A1:9B:FD:CB:BE:79:E0:BA:B9:E7:38:9D:F2:26:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:31:92:d2:70:a1:d3:b5:5f:1a:6a:bc:a9:45:2a:63:ca:fb: 30:0b:dc:90:b6:30:6c:93:78:5f:7a:b4:ec:aa:8e:b4:01:ea: 04:10:17:f4:05:e7:7d:8a:12:ed:32:09:c4:19:00:be:bc:b6: c3:0c:36:d9:fc:ad:34:97:af:e5:4f:a8:e7:c7:3c:57:b8:bb: 28:01:62:3e:d7:4d:8b:6c:d1:20:a7:6d:eb:46:2e:72:4f:de: f0:80:40:53:d3:a4:2e:e7:af:0b:2e:40:c9:89:08:06:8a:8c: ec:b1:1e:b9:70:10:7c:da:8e:3c:40:fa:ff:ef:2a:f9:cf:1c: 5b:1d:63:3e:eb:49:d7:65:2b:b4:c3:be:56:3b:59:16:ec:c7: 0e:14:1e:3e:ee:bb:20:72:8a:4c:5f:70:e1:04:7c:a8:3c:d5: 23:dc:67:fb:67:0a:fd:e8:61:2e:6f:4b:b0:a0:1c:47:ee:dd: 5b:1e:30:58:fb:b0:57:d1:58:d7:d8:92:2d:12:b2:c1:45:10: b8:6d:85:5b:5e:a6:c3:c5:21:82:b1:42:40:a4:8c:e2:27:23: 7a:7b:0c:42:6a:c0:bf:1d:c3:40:aa:d2:3a:33:e7:d9:fd:bc: 30:34:b1:d6:0f:9f:8e:52:07:f2:ff:90:12:4d:1f:76:52:1d: f1:52:f9:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha+qGimhFtNYh+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjI3ZTI2M2UtZDEyMC00OTRjLWEwYjgtZjlkZmU2NzNmNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMKjRTqjWKvdnNk3w6Qx7JOD17D6cbnpsSqj /2N+J5rVVSD+R7Zk+xQBzXQy+exwAa0QM333azFBpVv9p06WH7mRtpfviLJF0uyu UYkYNkOpTwNEZkOnLHqlAHj0cMmw41X/dSurOSjIjEQw5f1xhaLSi2x4Rf//Z7sQ CUoy4/tjo302O4NHd1OcO7XO18g7e6HfmXgd5PJVeQYDQ8y2St0ScMwgE0OQD28y Z7hCy6IzfqBMK4ISNyMuPNdoOJsqoNeMUofYEZvOKgtvnx9fx4D6p7hWHrfk9pi8 4wSNTBNi0en2GB7fwGU156A0n58VPMUI2jopMMU/uJeds/i39QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOC6sy+KoZv9y7554Lq55zid8iYiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoxktJwodO1XxpqvKlFKmPK+zAL3JC2MGyTeF96tOyqjrQB6gQQF/QF 532KEu0yCcQZAL68tsMMNtn8rTSXr+VPqOfHPFe4uygBYj7XTYts0SCnbetGLnJP 3vCAQFPTpC7nrwsuQMmJCAaKjOyxHrlwEHzajjxA+v/vKvnPHFsdYz7rSddlK7TD vlY7WRbsxw4UHj7uuyByikxfcOEEfKg81SPcZ/tnCv3oYS5vS7CgHEfu3VseMFj7 sFfRWNfYki0SssFFELhthVtepsPFIYKxQkCkjOInI3p7DEJqwL8dw0Cq0joz59n9 vDA0sdYPn45SB/L/kBJNH3ZSHfFS+ds= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:09 2025 by rpki-client