$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa File: d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa (raw, json) Hash identifier: ZAm/Svj0Jra3DEidiEW6MyZlh8j+3c6W5VtSHwwS9Us= Subject key identifier: C1:5B:BA:F6:AE:13:85:EF:A2:2D:85:92:30:FA:A4:64:4E:C7:BE:C2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858485F9AE4AF13AF99D94893CB00 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa Signing time: Mon 30 Dec 2024 02:00:39 +0000 ROA not before: Mon 30 Dec 2024 02:00:39 +0000 ROA not after: Sun 30 Mar 2025 01:00:39 +0000 asID: 46261 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5f:9a:e4:af:13:af:99:d9:48:93:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Dec 30 02:00:39 2024 GMT Not After : Mar 30 01:00:39 2025 GMT Subject: CN=8852fffe-9211-48bd-a31f-4b560c94b745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:4d:11:00:f1:47:a8:cb:fe:c2:40:a8:3d:35: 9b:a0:7f:ee:8d:d5:f7:0b:1f:b5:af:38:d4:9b:7e: 43:5f:5c:bd:39:d7:32:30:f2:a9:8b:ff:e6:e9:85: 63:4f:12:0d:f5:26:d2:04:43:b4:0d:ea:3b:3c:f5: ae:84:e5:89:23:6c:c4:57:d1:81:66:5a:5c:49:31: bf:5b:a5:ff:e4:d1:d4:6b:db:8a:65:ac:6b:e1:32: 5e:fa:be:22:13:45:6e:3e:31:b4:e1:0e:f1:fd:21: 8f:1c:d9:47:69:ca:d3:86:c1:79:47:dc:3c:09:33: fd:3c:82:27:cd:b8:64:d4:bc:df:49:5b:31:5a:1e: 79:6c:10:06:5f:02:04:46:28:0b:4c:03:35:a9:e0: 25:15:04:c7:95:a7:46:4d:44:db:54:09:ca:93:2a: a7:c8:2b:76:5d:a3:61:62:3c:fa:15:47:92:4a:af: e3:b9:e1:af:43:40:88:d3:4e:96:3a:75:00:0e:f9: ab:17:1a:27:57:48:9c:41:48:a4:52:73:b1:c7:af: fa:da:f7:02:66:77:be:33:55:76:5c:86:0f:aa:44: 92:5c:56:eb:cf:8e:fa:14:df:68:1b:ed:b9:72:f7: 98:36:1b:d2:34:1a:1a:8d:50:6d:b7:52:9d:db:28: c1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5B:BA:F6:AE:13:85:EF:A2:2D:85:92:30:FA:A4:64:4E:C7:BE:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/d34f3fde-cc93-37ff-8c41-0d20ade6ff1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d5:e1:6c:d3:7b:b1:0f:d5:c9:3a:94:d7:30:21:6b:e9:a2: 47:66:78:fd:95:45:2b:0f:ee:f4:4b:6e:aa:6e:d1:b5:24:b5: 79:b9:1d:7b:c2:a2:d7:81:ca:5a:be:c6:2f:e6:90:36:ac:fa: 35:dc:91:cd:70:cd:4a:fa:f9:9f:fa:7f:ea:1a:e8:16:85:f2: 89:23:ae:41:3e:a7:b9:42:7b:25:b8:b0:d7:38:1d:d5:73:7b: 02:24:1c:f3:0b:47:a0:f8:d6:b2:63:56:ff:15:4e:8d:9f:3f: 8c:74:8d:50:0b:6c:0b:d8:03:82:4f:bf:46:ea:c5:bf:e5:3c: e5:31:e0:53:0b:c9:25:4d:39:79:dd:c5:c5:07:9d:97:9b:9f: b8:b5:40:5e:ec:a7:10:7f:7f:1e:49:14:21:da:3f:5f:85:e9: 49:a9:65:47:ff:ed:b4:1c:26:cc:8b:db:68:f2:ab:8c:1a:95: 28:b0:da:5e:82:7c:2e:1a:7a:a7:44:bd:88:8c:f7:e1:56:16: c7:a0:2b:41:7d:ca:22:f6:3b:c6:78:bb:cf:8d:f1:53:ac:03: cb:fa:fd:b7:16:ff:cc:2c:96:fb:d1:23:d7:db:e4:13:90:e4: 41:e4:df:64:62:22:ab:ea:ae:40:4c:ec:52:f2:b2:f4:0d:5b: 78:b1:a8:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhfmuSvE6+Z2UiTywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI0MTIzMDAyMDAzOVoXDTI1MDMzMDAxMDAzOVowLzEtMCsGA1UEAxMk ODg1MmZmZmUtOTIxMS00OGJkLWEzMWYtNGI1NjBjOTRiNzQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAik0RAPFHqMv+wkCoPTWboH/ujdX3Cx+1rzjU m35DX1y9OdcyMPKpi//m6YVjTxIN9SbSBEO0Deo7PPWuhOWJI2zEV9GBZlpcSTG/ W6X/5NHUa9uKZaxr4TJe+r4iE0VuPjG04Q7x/SGPHNlHacrThsF5R9w8CTP9PIIn zbhk1LzfSVsxWh55bBAGXwIERigLTAM1qeAlFQTHladGTUTbVAnKkyqnyCt2XaNh Yjz6FUeSSq/jueGvQ0CI006WOnUADvmrFxonV0icQUikUnOxx6/62vcCZne+M1V2 XIYPqkSSXFbrz476FN9oG+25cveYNhvSNBoajVBtt1Kd2yjBSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFbuvauE4Xvoi2FkjD6pGROx77CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvZDM0ZjNmZGUtY2M5My0z N2ZmLThjNDEtMGQyMGFkZTZmZjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3V4WzTe7EP1ck6lNcwIWvpokdmeP2VRSsP7vRLbqpu0bUktXm5HXvC oteBylq+xi/mkDas+jXckc1wzUr6+Z/6f+oa6BaF8okjrkE+p7lCeyW4sNc4HdVz ewIkHPMLR6D41rJjVv8VTo2fP4x0jVALbAvYA4JPv0bqxb/lPOUx4FMLySVNOXnd xcUHnZebn7i1QF7spxB/fx5JFCHaP1+F6UmpZUf/7bQcJsyL22jyq4walSiw2l6C fC4aeqdEvYiM9+FWFsegK0F9yiL2O8Z4u8+N8VOsA8v6/bcW/8wslvvRI9fb5BOQ 5EHk32RiIqvqrkBM7FLysvQNW3ixqIs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:36 2025 by rpki-client