$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa File: 28225ffa-6f14-3d86-8834-6e467dd2ec93.roa (raw, json) Hash identifier: H/TPMazYjY4r2+trX8einR4xWy+aCOcTJDkA4E8mu1s= Subject key identifier: 5C:2C:0C:B6:54:A1:C8:05:14:2C:6B:59:F1:7A:DB:AD:D7:9E:11:4A Certificate issuer: /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Certificate serial: 010D0C9F432858498339EEC9C8CFFB2C64887480 Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 9009 IP address blocks: 172.98.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ee:c9:c8:cf:fb:2c:64:88:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=567af205-3a83-4ef4-b2e8-0b49678410b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:16:76:b6:93:96:52:d2:be:26:aa:1a:ad:59: 05:07:a6:13:86:93:82:e9:7a:25:73:37:34:2c:c6: 87:33:5a:09:fa:5c:56:af:20:34:7f:35:0e:6f:65: 6f:6a:fa:3e:92:74:59:db:c7:54:d0:93:f4:43:30: ea:cc:4f:e2:2b:6d:78:e6:de:7e:83:dd:46:23:60: 6b:f4:26:02:a9:8e:cf:a8:c0:7b:87:a4:ad:7c:e0: 49:e2:fc:da:81:ec:d3:59:c4:b8:4d:c5:a4:b8:5b: d7:db:fd:42:20:93:82:1d:28:43:6c:5f:6d:e4:be: 32:e4:7a:54:ea:e4:1f:87:2b:e4:f4:50:b3:1d:12: 2b:4f:cd:79:a5:13:b5:77:ae:fd:8d:89:b6:ec:c6: 0b:e4:13:fa:cd:60:8b:18:12:15:50:78:99:3c:ee: bb:78:8e:5b:4f:6f:42:ed:33:76:26:ec:25:4f:55: e9:e8:65:9f:b6:e3:8f:0d:5a:fd:90:d8:6a:c6:c8: 08:85:0c:d4:48:51:af:05:72:c5:af:0a:66:1f:82: f5:16:59:0d:da:eb:b0:36:30:93:c1:9a:f0:ae:79: 5a:b4:25:2e:7a:1a:09:7e:7e:ac:fd:07:f9:90:f3: b1:96:f5:bd:ae:55:ef:a4:6e:b2:c9:c8:38:ba:69: da:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2C:0C:B6:54:A1:C8:05:14:2C:6B:59:F1:7A:DB:AD:D7:9E:11:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/28225ffa-6f14-3d86-8834-6e467dd2ec93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl X509v3 Authority Key Identifier: keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer sbgp-ipAddrBlock: critical IPv4: 172.98.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:fb:77:6b:4a:7d:3c:5e:8f:a7:a6:8d:b0:97:b3:b3:87:74: 1d:f9:6c:37:99:f6:ad:ed:3f:b8:29:3c:2f:90:a7:8c:29:1b: 8d:0c:fc:c3:58:7f:d4:05:c6:ea:ef:8c:2f:9f:64:f7:50:5a: 26:7e:d7:ec:4f:bc:1c:7c:83:c4:38:a0:56:b1:c0:fe:b5:89: db:cc:b4:ea:a3:58:c4:db:cc:be:2d:31:b9:5f:0d:10:bb:a4: 9b:69:2f:05:92:45:37:5d:6f:11:8b:1d:02:7d:e7:f2:5b:86: 28:98:3b:ab:6d:38:57:db:d5:b9:ec:e7:ef:ed:76:9f:a6:09: 75:6f:74:7d:5e:4e:3b:d8:a0:0f:d2:3b:48:8a:d0:bf:ad:c9: e7:89:74:68:a5:6c:d7:ed:0e:02:ca:04:fb:92:7b:ff:ec:8e: 37:c0:f5:1d:22:b4:d0:18:3d:1c:07:28:42:b6:cf:1d:62:be: 6e:f0:2c:71:d1:75:a2:80:ee:8f:07:0d:fa:8f:1e:18:df:57: 72:5a:7e:a5:33:9d:57:ca:eb:c7:2a:10:1e:5c:bf:b5:44:24: ec:fd:56:a0:8e:8c:96:a5:b9:96:61:b0:27:a0:cf:7e:49:80: 24:a3:e9:5f:3b:b8:f7:13:05:4c:72:53:2f:46:33:77:e8:e5: 4f:94:b9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOe7JyM/7LGSIdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi NWVlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTY3YWYyMDUtM2E4My00ZWY0LWIyZTgtMGI0OTY3ODQxMGI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RZ2tpOWUtK+JqoarVkFB6YThpOC6Xolczc0 LMaHM1oJ+lxWryA0fzUOb2Vvavo+knRZ28dU0JP0QzDqzE/iK2145t5+g91GI2Br 9CYCqY7PqMB7h6StfOBJ4vzagezTWcS4TcWkuFvX2/1CIJOCHShDbF9t5L4y5HpU 6uQfhyvk9FCzHRIrT815pRO1d679jYm27MYL5BP6zWCLGBIVUHiZPO67eI5bT29C 7TN2JuwlT1Xp6GWftuOPDVr9kNhqxsgIhQzUSFGvBXLFrwpmH4L1FlkN2uuwNjCT wZrwrnlatCUuehoJfn6s/Qf5kPOxlvW9rlXvpG6yycg4umnagQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFwsDLZUocgFFCxrWfF6263XnhFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2 ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvMjgyMjVmZmEtNmYxNC0z ZDg2LTg4MzQtNmU0NjdkZDJlYzkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3 ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm ODljM2I1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH7d2tKfTxej6emjbCXs7OHdB35bDeZ9q3tP7gpPC+Qp4wpG40M/MNY f9QFxurvjC+fZPdQWiZ+1+xPvBx8g8Q4oFaxwP61idvMtOqjWMTbzL4tMblfDRC7 pJtpLwWSRTddbxGLHQJ95/JbhiiYO6ttOFfb1bns5+/tdp+mCXVvdH1eTjvYoA/S O0iK0L+tyeeJdGilbNftDgLKBPuSe//sjjfA9R0itNAYPRwHKEK2zx1ivm7wLHHR daKA7o8HDfqPHhjfV3JafqUznVfK68cqEB5cv7VEJOz9VqCOjJaluZZhsCegz35J gCSj6V87uPcTBUxyUy9GM3fo5U+UuYY= -----END CERTIFICATE-----Generated at Sat Apr 26 16:01:57 2025 by rpki-client