$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa File: 139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa (raw, json) Hash identifier: Y3Q52ZZk5sAjjFRsoZCig071Jr8c6FxhHTcrbXAkw8E= Subject key identifier: 90:93:10:57:B1:4E:54:4A:BD:AA:FA:51:39:32:65:1F:80:8E:AF:B2 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F43285849849EFD92538D6FBBB8B64580 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 42831 IP address blocks: 172.98.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:fd:92:53:8d:6f:bb:b8:b6:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=bb3c9ae3-609e-4736-be09-8a6c1301842b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:57:dd:e0:5a:e9:d5:79:e9:49:db:dd:fc:1c: 07:ec:ac:e4:71:78:fd:7c:9a:0f:a6:e9:f5:33:4c: b4:7f:14:6a:6a:e5:2b:7c:e0:f9:0b:9b:95:65:d8: 31:cb:e0:a6:f4:c5:5f:7d:b1:4b:b0:5e:99:bb:89: 39:d2:33:c8:8a:be:4a:7c:df:d7:e8:c4:06:95:3a: f3:34:25:f2:8d:f1:0c:10:5b:c0:e5:8b:13:00:c9: b1:42:8e:f4:27:2f:01:99:83:be:f6:c7:a3:7a:7f: da:cd:a0:fb:15:01:27:50:85:5b:a0:ac:c4:b5:3c: 70:f0:d4:9d:8c:7a:2f:73:0f:df:9e:89:2a:51:bc: 5a:2a:5e:25:f8:c7:9b:21:c4:bb:cf:d0:b8:d7:45: 31:40:96:78:94:71:6d:a1:dc:b8:66:db:5d:98:2b: f5:eb:74:72:57:2a:d0:0d:dd:52:ff:b4:20:c0:46: cf:f3:6e:e9:cc:df:40:ef:7b:1a:ef:b2:f0:3a:5f: ff:22:89:f1:75:8d:05:2b:4d:69:b4:62:bd:8d:07: 52:1e:20:f1:3d:7b:5b:37:65:99:c3:1b:35:ea:b6: 29:27:e9:dd:8d:c3:1f:d1:9f:d8:86:be:da:e5:71: 52:42:3d:c2:87:82:d2:d9:fe:5e:97:06:f8:f1:4a: 21:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:93:10:57:B1:4E:54:4A:BD:AA:FA:51:39:32:65:1F:80:8E:AF:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/139a9ff1-97be-3cd8-a519-a7ffc6b92d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:9b:5b:f1:22:5d:7c:54:d9:12:46:ea:74:4d:43:5b:ed:e2: b4:b2:fc:10:da:c1:a4:02:12:46:10:06:9a:c3:16:db:c1:71: 16:b9:92:ed:fb:fd:f2:e5:52:ad:a2:3e:2a:08:cf:c3:39:65: 90:56:09:44:63:88:b5:28:b3:05:63:a8:a9:4c:72:b9:cb:37: 95:47:bf:82:7f:55:e4:4e:34:28:97:71:fa:7b:f1:46:0c:13: 33:17:6d:79:2b:0c:12:a3:e0:fd:04:55:8e:ca:bc:36:ca:e9: 4a:3e:08:d9:78:aa:d8:c7:fe:5f:89:f1:0c:2b:61:cd:ca:b8: ee:86:88:c0:df:c2:4a:d1:fd:fc:1b:af:e3:4a:e8:72:47:bd: eb:d3:a4:10:be:d6:0b:1b:d3:de:88:eb:00:42:a5:b5:51:b8: c7:4b:b8:00:a8:96:67:d9:08:ed:19:cd:71:7a:e2:6f:8e:2a: 85:30:7f:7c:9f:4b:89:19:88:80:3c:81:18:44:5b:ec:cd:a8: ff:b4:20:a7:48:23:65:e7:7f:b2:24:eb:fd:56:73:fe:d9:b5: 51:78:c3:fa:72:ca:1c:c6:4b:49:26:8f:8a:8b:f5:7a:7e:5e: 0a:5c:9b:84:f8:bf:63:e3:82:10:57:f4:e3:8d:b8:a6:31:30: cf:d9:ac:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnv2SU41vu7i2RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk YmIzYzlhZTMtNjA5ZS00NzM2LWJlMDktOGE2YzEzMDE4NDJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1fd4Frp1XnpSdvd/BwH7KzkcXj9fJoPpun1 M0y0fxRqauUrfOD5C5uVZdgxy+Cm9MVffbFLsF6Zu4k50jPIir5KfN/X6MQGlTrz NCXyjfEMEFvA5YsTAMmxQo70Jy8BmYO+9sejen/azaD7FQEnUIVboKzEtTxw8NSd jHovcw/fnokqUbxaKl4l+MebIcS7z9C410UxQJZ4lHFtody4ZttdmCv163RyVyrQ Dd1S/7QgwEbP827pzN9A73sa77LwOl//IonxdY0FK01ptGK9jQdSHiDxPXtbN2WZ wxs16rYpJ+ndjcMf0Z/Yhr7a5XFSQj3Ch4LS2f5elwb48UohjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCTEFexTlRKvar6UTkyZR+Ajq+yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMTM5YTlmZjEtOTdiZS0z Y2Q4LWE1MTktYTdmZmM2YjkyZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKbW/EiXXxU2RJG6nRNQ1vt4rSy/BDawaQCEkYQBprDFtvBcRa5ku37 /fLlUq2iPioIz8M5ZZBWCURjiLUoswVjqKlMcrnLN5VHv4J/VeRONCiXcfp78UYM EzMXbXkrDBKj4P0EVY7KvDbK6Uo+CNl4qtjH/l+J8QwrYc3KuO6GiMDfwkrR/fwb r+NK6HJHvevTpBC+1gsb096I6wBCpbVRuMdLuAColmfZCO0ZzXF64m+OKoUwf3yf S4kZiIA8gRhEW+zNqP+0IKdII2Xnf7Ik6/1Wc/7ZtVF4w/pyyhzGS0kmj4qL9Xp+ Xgpcm4T4v2PjghBX9OONuKYxMM/ZrHA= -----END CERTIFICATE-----Generated at Sat Apr 26 12:51:08 2025 by rpki-client