$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa File: 21aee54d-c4e1-3466-8a02-2480fde4af39.roa (raw, json) Hash identifier: yMM3+b97Vq2uOaY/nPNLKgEw5Wk3Rn2buen903rnMj8= Subject key identifier: 63:F4:28:12:7D:20:97:32:F0:D8:ED:1C:F3:23:20:B1:FC:48:C1:60 Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F4328584957F40EE033A11F0B3E0E0508 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 212238 IP address blocks: 141.193.202.0/24 maxlen: 24 207.230.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f4:0e:e0:33:a1:1f:0b:3e:0e:05:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=a1bc9f25-ec8f-4a06-bee0-0ded91381a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:e7:f7:76:53:f9:4f:13:7c:f5:ae:d8:62: 73:11:20:f2:86:fb:61:71:99:7d:3c:d0:90:00:1d: 4b:2b:63:1a:0d:48:3f:c8:3c:f7:5c:5a:2d:75:2b: 76:4d:5c:2c:30:ad:43:05:ea:9b:16:41:65:d7:87: 44:34:21:60:0e:db:af:5f:9f:d4:d3:60:e3:4a:c3: 28:6f:1e:05:63:7e:9e:dc:46:37:6a:1c:68:79:f8: 94:bd:a2:70:b1:76:b6:86:3f:a0:25:93:54:95:2b: 48:c8:5f:7b:f3:ae:af:83:8a:67:91:0c:3e:6d:f3: 50:94:d9:37:c1:a3:3f:1a:20:94:95:90:d0:50:85: 0c:0f:c7:91:98:d1:64:ac:f5:4e:d0:d6:6a:a8:f5: ac:bf:3a:70:7c:bd:29:34:73:87:18:61:dc:87:8c: c7:af:e4:da:11:36:cb:98:b6:b6:f2:bd:73:da:d1: 99:01:2c:86:b8:49:4f:e0:69:d7:77:a0:17:80:c0: 2b:d4:ca:ef:16:9a:ba:9e:cf:c4:24:58:6f:ef:cb: 28:96:af:87:e7:22:b9:8f:4a:d9:85:2f:c4:87:1c: 75:e7:19:8d:4e:d2:a1:66:15:ca:ea:0c:7b:5b:a0: 25:a3:76:fe:b7:f5:07:da:51:73:c5:c2:3c:08:a1: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:F4:28:12:7D:20:97:32:F0:D8:ED:1C:F3:23:20:B1:FC:48:C1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/21aee54d-c4e1-3466-8a02-2480fde4af39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 141.193.202.0/24 207.230.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:9b:7b:ce:4c:94:ad:9f:cd:ac:63:f5:2e:ac:58:53:b2:ea: 0c:43:c6:d0:f0:c1:2a:13:a4:a0:90:06:d1:10:16:25:1d:65: 15:24:da:85:7f:38:46:fe:f1:77:67:05:00:73:a6:b4:6d:ed: 65:73:47:c6:d9:93:9f:96:2f:00:d2:cf:08:c2:e2:56:94:e1: 79:e6:0c:39:0e:08:8d:7c:34:44:07:28:98:04:f2:68:f5:2f: 15:35:07:11:94:4c:e2:ec:89:20:25:05:5e:b8:ca:62:67:67: 4d:f6:1b:2a:46:c9:32:fd:49:27:b8:50:d7:1b:2a:c4:33:37: 5d:fc:65:d5:53:0b:22:de:ce:d9:d3:09:43:82:d6:37:1c:86: ff:0b:c1:22:06:8e:36:37:fe:80:08:5b:dd:f7:e2:87:83:06: fb:ce:32:db:c1:c6:b2:7f:b8:04:ec:0c:12:49:60:41:f5:cd: b4:4a:47:8a:f2:93:7f:74:1f:d7:f7:53:34:1b:02:3e:fb:52: cb:26:07:48:7b:3a:d0:ea:eb:15:26:9c:11:c6:4c:80:aa:58: 55:35:b7:18:63:2a:cf:81:00:d0:2b:36:81:e3:1f:e5:42:d7: 49:63:b6:7b:d3:f8:61:71:1f:97:6d:f7:65:af:53:53:2e:66: 07:51:50:c7 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElX9A7gM6EfCz4OBQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk YTFiYzlmMjUtZWM4Zi00YTA2LWJlZTAtMGRlZDkxMzgxYTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY7n93ZT+U8TfPWu2GJzESDyhvthcZl9PNCQ AB1LK2MaDUg/yDz3XFotdSt2TVwsMK1DBeqbFkFl14dENCFgDtuvX5/U02DjSsMo bx4FY36e3EY3ahxoefiUvaJwsXa2hj+gJZNUlStIyF97866vg4pnkQw+bfNQlNk3 waM/GiCUlZDQUIUMD8eRmNFkrPVO0NZqqPWsvzpwfL0pNHOHGGHch4zHr+TaETbL mLa28r1z2tGZASyGuElP4GnXd6AXgMAr1MrvFpq6ns/EJFhv78solq+H5yK5j0rZ hS/Ehxx15xmNTtKhZhXK6gx7W6Alo3b+t/UH2lFzxcI8CKHoXwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFGP0KBJ9IJcy8NjtHPMjILH8SMFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjFhZWU1NGQtYzRlMS0z NDY2LThhMDItMjQ4MGZkZTRhZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjcHKAwQA z+Z/MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABqbe85MlK2fzaxj9S6sWFOy6gxDxtDwwSoTpKCQBtEQFiUd ZRUk2oV/OEb+8XdnBQBzprRt7WVzR8bZk5+WLwDSzwjC4laU4XnmDDkOCI18NEQH KJgE8mj1LxU1BxGUTOLsiSAlBV64ymJnZ032GypGyTL9SSe4UNcbKsQzN138ZdVT CyLeztnTCUOC1jcchv8LwSIGjjY3/oAIW9334oeDBvvOMtvBxrJ/uATsDBJJYEH1 zbRKR4ryk390H9f3UzQbAj77UssmB0h7OtDq6xUmnBHGTICqWFU1txhjKs+BANAr NoHjH+VC10ljtnvT+GFxH5dt92WvU1MuZgdRUMc= -----END CERTIFICATE-----Generated at Sat Apr 26 18:38:58 2025 by rpki-client