$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa File: a4195330-20b7-302b-9d71-3532e3e7d26e.roa (raw, json) Hash identifier: MX4blO0rSO5wIKlvUMwhxizc/Ss8EHFTOg55akoGKz4= Subject key identifier: F7:50:C9:B6:1B:B4:F1:23:16:EE:BD:BA:96:56:49:90:5A:C0:A8:9F Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849C0A4E93284D0477BE12E2230 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 5511 IP address blocks: 172.98.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e9:32:84:d0:47:7b:e1:2e:22:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=365913c0-90e3-4ef1-bd09-d418c860c1cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:10:ae:f9:c1:68:99:1b:5f:61:64:c1:fd: 82:6a:ab:c0:f1:2b:f6:df:02:3e:2d:33:fd:bf:dd: e9:b5:7e:a6:8d:f2:f3:6d:d9:f2:62:62:65:e7:08: 67:2e:10:95:ad:d3:a7:4e:b5:9e:4a:93:15:f9:c3: b1:02:99:5c:cd:1c:40:7d:0e:91:49:d4:ea:86:24: 75:7e:2f:ef:26:18:91:70:af:9b:6c:7c:8c:81:86: 5b:2e:55:cf:f9:2f:c7:1b:8b:b7:a1:53:26:48:13: cc:f7:8e:45:8f:19:be:f3:b3:80:9a:a9:79:fd:05: 21:05:f5:d6:d9:d3:5f:b1:d4:82:fe:2d:64:e5:bb: 2a:07:e2:db:3d:ec:fe:80:9b:50:45:92:fd:c9:b1: 3a:2c:46:d9:f0:e8:22:aa:53:de:c9:72:d8:ca:2d: 6c:cd:15:48:6e:ef:e7:cc:af:f4:2c:09:bd:8e:4c: 1a:f8:66:38:17:df:f2:ce:7b:57:3a:f1:31:c7:b5: 06:24:d1:c6:c2:95:3f:cb:68:40:3a:72:f9:0b:19: 3d:5d:aa:98:0d:96:e0:40:b5:2f:c0:7a:b0:4a:04: a2:56:bd:cd:5f:c3:1b:ae:46:db:ea:11:a5:94:21: 61:c3:da:c8:13:1c:8d:51:a0:d3:34:8b:b8:8a:81: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:50:C9:B6:1B:B4:F1:23:16:EE:BD:BA:96:56:49:90:5A:C0:A8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/a4195330-20b7-302b-9d71-3532e3e7d26e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c0:8f:84:0a:88:e3:df:95:03:f9:4b:a4:1d:c4:2d:9e:1e: 7b:b0:92:18:64:89:ba:7c:7e:b2:a2:3d:1d:83:02:f8:37:da: 16:9a:60:3c:8f:6c:f1:47:c6:df:21:fa:d8:ef:f6:ad:e7:14: 89:55:85:ca:cf:ad:f1:2e:01:5a:19:3f:55:47:8b:ac:54:15: 0c:96:bc:ec:6a:ec:9f:9f:40:2e:be:5a:ff:a2:c8:37:05:55: d2:98:a9:7a:31:5b:4d:ff:53:cc:56:eb:41:83:a6:06:18:2a: 0c:b6:0a:5a:b9:f1:27:cd:b3:c7:b9:ed:c3:4a:95:73:1e:92: 1b:90:ca:d9:6d:c8:7a:2d:44:78:0f:de:cf:06:4a:d1:83:ea: 5c:64:46:e9:6b:a5:1e:bb:c6:a4:ff:20:12:37:f4:03:88:62: 09:63:b6:e7:70:41:fa:d2:57:32:8f:a3:33:40:19:7b:3b:a3: 51:32:f4:23:70:28:bd:4b:19:19:16:cd:20:3a:db:43:c3:39: a2:d7:0e:f9:df:a7:d5:f2:78:b5:95:b4:d5:27:ca:17:13:4e: d7:d6:8c:19:69:a4:d0:c7:ce:17:4d:d8:10:b5:47:dc:4c:69: 11:a7:fd:1d:98:b0:05:03:c5:4e:dd:24:d2:ca:6b:aa:33:8a: 73:77:ac:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOkyhNBHe+EuIjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk MzY1OTEzYzAtOTBlMy00ZWYxLWJkMDktZDQxOGM4NjBjMWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5QQrvnBaJkbX2Fkwf2CaqvA8Sv23wI+LTP9 v93ptX6mjfLzbdnyYmJl5whnLhCVrdOnTrWeSpMV+cOxAplczRxAfQ6RSdTqhiR1 fi/vJhiRcK+bbHyMgYZbLlXP+S/HG4u3oVMmSBPM945Fjxm+87OAmql5/QUhBfXW 2dNfsdSC/i1k5bsqB+LbPez+gJtQRZL9ybE6LEbZ8OgiqlPeyXLYyi1szRVIbu/n zK/0LAm9jkwa+GY4F9/yzntXOvExx7UGJNHGwpU/y2hAOnL5Cxk9XaqYDZbgQLUv wHqwSgSiVr3NX8Mbrkbb6hGllCFhw9rIExyNUaDTNIu4ioGwmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdQybYbtPEjFu69upZWSZBawKifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvYTQxOTUzMzAtMjBiNy0z MDJiLTlkNzEtMzUzMmUzZTdkMjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/Aj4QKiOPflQP5S6QdxC2eHnuwkhhkibp8frKiPR2DAvg32haaYDyP bPFHxt8h+tjv9q3nFIlVhcrPrfEuAVoZP1VHi6xUFQyWvOxq7J+fQC6+Wv+iyDcF VdKYqXoxW03/U8xW60GDpgYYKgy2Clq58SfNs8e57cNKlXMekhuQytltyHotRHgP 3s8GStGD6lxkRulrpR67xqT/IBI39AOIYgljtudwQfrSVzKPozNAGXs7o1Ey9CNw KL1LGRkWzSA620PDOaLXDvnfp9XyeLWVtNUnyhcTTtfWjBlppNDHzhdN2BC1R9xM aRGn/R2YsAUDxU7dJNLKa6ozinN3rJs= -----END CERTIFICATE-----Generated at Tue May 6 00:52:02 2025 by rpki-client