$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa File: d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa (raw, json) Hash identifier: vZlxi7Vbr2jWuf29O9jnnEXv8suiJgNWSYZr38kLzAM= Subject key identifier: 0E:4F:2F:39:BC:CA:02:2A:E6:10:A5:05:78:C1:F2:91:C2:21:4C:35 Certificate issuer: /CN=1e268aaa-6306-4988-99f7-d5802a67b577 Certificate serial: 010D0C9F4328584919417327FF6DD35D1FE88800 Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 397763 IP address blocks: 129.224.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:73:27:ff:6d:d3:5d:1f:e8:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=e7bbd8bc-c5c8-440d-b584-07a366e4b9a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:c1:ac:38:ef:ba:19:77:36:5b:b9:4c:83: c7:af:dc:0d:2b:eb:79:73:0f:88:12:13:36:c1:ad: e8:8c:09:b9:15:43:5d:50:9b:0f:af:b6:9a:12:cb: f1:ac:2c:18:40:d3:9e:7f:85:f9:36:93:aa:66:5e: f2:a7:a1:75:d4:a1:55:a5:91:db:ef:8b:c0:84:e1: 41:c6:ce:2c:a0:08:80:53:1a:70:16:51:76:ed:42: 85:23:a7:00:c2:9a:dd:15:ff:d5:04:09:e5:76:d0: fe:e2:f5:23:3b:5a:08:d8:67:2f:bc:81:d3:7f:4a: 4a:2d:90:03:42:a7:3e:07:61:3a:49:d1:08:b4:27: b5:72:15:71:62:c3:14:3c:46:97:dc:2b:62:1b:bd: dd:22:bf:18:a2:5b:bc:c2:6b:c8:94:95:00:ab:5c: de:04:c5:f1:69:5f:d6:58:d5:68:c5:a3:93:a7:0c: ee:9f:4e:74:4b:92:9f:11:01:5f:c9:54:ac:0d:0f: d8:53:22:e3:7b:f6:c0:23:ef:c4:70:a7:58:6e:99: 57:68:4f:0f:85:2c:a8:5e:a5:17:d3:c2:14:e8:61: e8:2e:34:ab:1d:19:91:a7:23:37:e0:3d:13:86:89: 87:55:e7:0d:30:8a:28:1c:9d:78:f5:3e:d9:41:20: 98:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:4F:2F:39:BC:CA:02:2A:E6:10:A5:05:78:C1:F2:91:C2:21:4C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/d7fe131f-c321-36df-a23a-78c1bd3c3a50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl X509v3 Authority Key Identifier: keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer sbgp-ipAddrBlock: critical IPv4: 129.224.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:65:19:65:dd:09:da:63:6e:f2:eb:c8:63:cf:da:ab:1a:a7: 7f:26:d6:e6:cc:29:50:01:e2:22:70:45:dc:bb:74:92:5f:a2: 48:22:ba:7e:aa:6f:4d:ea:88:17:41:6d:71:51:ea:f8:c0:0b: 61:8d:42:66:62:9b:28:d9:20:17:05:05:43:77:69:9e:90:ae: 18:b6:07:3c:98:8d:eb:d3:85:f2:ad:6f:6f:69:e2:33:97:a4: 4c:3b:bd:54:98:d4:72:b2:2b:5b:0a:bb:e5:23:3f:9f:03:da: 41:b2:56:48:c5:7e:c7:40:a0:45:24:be:47:07:50:f5:ae:74: 8a:ed:6d:65:e4:a3:37:16:b1:95:ef:4b:18:cd:2f:4d:63:ff: 0d:d5:b1:5a:09:bd:c6:c6:0c:1e:9d:b6:42:aa:ac:40:bb:4c: 98:f7:f0:ea:41:c0:b1:b1:e3:06:70:14:e1:bc:ac:5b:e4:4a: 18:2f:b9:bf:47:79:a6:5e:2c:16:d2:ee:57:2a:c4:3f:b0:42: be:0a:a0:fd:3b:34:9c:07:af:eb:98:01:99:8b:f2:de:66:b1: cd:cf:c0:4c:28:7b:01:e9:d1:86:dc:95:fc:66:28:f8:53:e0: 1c:01:81:e7:32:e0:cd:09:ed:9c:11:52:52:ac:bb:27:ff:12: 5e:dd:c6:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXMn/23TXR/oiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi NTc3MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZTdiYmQ4YmMtYzVjOC00NDBkLWI1ODQtMDdhMzY2ZTRiOWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+zBrDjvuhl3Nlu5TIPHr9wNK+t5cw+IEhM2 wa3ojAm5FUNdUJsPr7aaEsvxrCwYQNOef4X5NpOqZl7yp6F11KFVpZHb74vAhOFB xs4soAiAUxpwFlF27UKFI6cAwprdFf/VBAnldtD+4vUjO1oI2GcvvIHTf0pKLZAD Qqc+B2E6SdEItCe1chVxYsMUPEaX3CtiG73dIr8Yolu8wmvIlJUAq1zeBMXxaV/W WNVoxaOTpwzun050S5KfEQFfyVSsDQ/YUyLje/bAI+/EcKdYbplXaE8PhSyoXqUX 08IU6GHoLjSrHRmRpyM34D0ThomHVecNMIooHJ149T7ZQSCY9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA5PLzm8ygIq5hClBXjB8pHCIUw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2 OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvZDdmZTEzMWYtYzMyMS0z NmRmLWEyM2EtNzhjMWJkM2MzYTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5 ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3 YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgeDdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFlGWXdCdpjbvLryGPP2qsap38m1ubMKVAB4iJwRdy7dJJfokgiun6q b03qiBdBbXFR6vjAC2GNQmZimyjZIBcFBUN3aZ6Qrhi2BzyYjevThfKtb29p4jOX pEw7vVSY1HKyK1sKu+UjP58D2kGyVkjFfsdAoEUkvkcHUPWudIrtbWXkozcWsZXv SxjNL01j/w3VsVoJvcbGDB6dtkKqrEC7TJj38OpBwLGx4wZwFOG8rFvkShgvub9H eaZeLBbS7lcqxD+wQr4KoP07NJwHr+uYAZmL8t5msc3PwEwoewHp0YbclfxmKPhT 4BwBgecy4M0J7ZwRUlKsuyf/El7dxrM= -----END CERTIFICATE-----Generated at Sun Apr 6 03:33:58 2025 by rpki-client