$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa File: 34cf4545-7377-3604-bfb9-15fe8de88b2e.roa (raw, json) Hash identifier: ngCLjmPGjfBe8Qj/PlcH+QcDLUp2FYoZBl+farIEuQk= Subject key identifier: 74:12:F2:21:EB:78:82:59:AB:BA:F1:E0:02:E1:AC:1D:52:40:00:B0 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968DC7A9BF762C498E1524 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 129.41.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8d:c7:a9:bf:76:2c:49:8e:15:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=d80379e2-7b29-4444-a11e-1084f467f48c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:fa:a5:c2:48:81:59:36:2e:54:b3:1a:ce: 54:9d:e2:aa:4e:03:61:68:47:e4:a0:89:aa:8a:68: be:8e:ec:d7:e0:9e:72:6e:02:65:00:48:1e:e5:96: d7:06:85:7b:08:3b:e3:ac:5d:da:51:0a:77:b5:09: 1c:3a:0a:04:19:6f:e4:b0:69:ef:a2:da:ce:2e:73: 4b:18:21:8f:ea:c3:40:7e:f7:57:fa:b3:7b:6f:37: ae:96:9b:7e:57:93:2e:52:4a:f6:cb:28:aa:e3:28: 1f:bf:32:e9:9c:0e:04:a3:61:fc:ef:e0:b5:cd:96: 33:6c:85:03:9c:53:73:e5:35:14:3a:c9:48:38:f2: b2:2a:a9:bd:bd:31:c0:be:10:af:cb:7c:a7:c5:94: 7e:0a:12:4a:6f:4c:a5:82:f5:7a:ca:ad:1a:e0:72: 9b:4b:19:57:ef:75:e1:4a:9c:e6:02:ed:e4:b5:53: 23:27:39:1d:fa:69:7b:f8:45:89:00:38:af:2f:ac: a1:71:1f:72:f6:93:83:03:c6:f1:a5:f8:bb:2d:8d: 31:84:e3:47:2d:62:6b:47:39:41:71:0d:ee:bd:41: d6:26:5e:d5:9f:9f:01:2d:32:fa:0a:76:90:13:85: 2b:b2:b6:8d:17:a8:c1:04:32:9f:10:b5:e0:e4:03: ce:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:12:F2:21:EB:78:82:59:AB:BA:F1:E0:02:E1:AC:1D:52:40:00:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/34cf4545-7377-3604-bfb9-15fe8de88b2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c8:88:08:55:07:d2:93:ba:50:24:23:b6:53:75:a4:0d:2d: 36:3d:6b:bc:27:6c:5b:34:9f:c1:cb:1f:dc:87:c7:e2:bf:b1: 57:cc:27:4a:c4:32:1f:f6:79:c6:55:a6:e8:8e:bc:55:57:4a: ac:86:7c:01:52:81:8d:37:3c:40:a2:3d:12:7b:26:39:a9:2d: c9:28:37:50:d1:10:f6:37:ec:77:0f:ad:d6:02:23:2a:e5:44: 0f:ab:e0:d1:11:8f:b0:8f:6c:a8:af:37:0e:f2:30:dd:f6:85: f7:90:2c:72:92:9e:0c:6a:e7:dc:4e:20:1f:0a:2c:4d:3d:6a: 7a:71:9b:14:31:f9:66:5c:7d:96:05:8a:e2:08:10:10:c6:99: d1:61:a7:33:88:8d:61:b2:fa:63:f2:bf:88:48:34:d6:4d:7d: 85:cd:73:9d:48:ea:ef:56:b5:23:42:38:2f:2c:af:5e:9e:32: 82:45:6c:75:e4:15:c0:1f:aa:7f:19:02:b2:82:52:26:62:35: df:6d:1c:ad:f8:4c:17:b7:4e:ca:e1:5b:49:56:6e:35:14:9b: dd:35:18:06:be:b2:f5:2c:a1:1d:50:e7:f8:ac:97:e9:a5:26: 7a:f7:59:2c:92:6c:61:ce:bd:c0:79:b6:cc:0a:8e:90:ea:28: 0f:54:73:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo3Hqb92LEmOFSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZDgwMzc5ZTItN2IyOS00NDQ0LWExMWUtMTA4NGY0NjdmNDhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7n6pcJIgVk2LlSzGs5UneKqTgNhaEfkoImq imi+juzX4J5ybgJlAEge5ZbXBoV7CDvjrF3aUQp3tQkcOgoEGW/ksGnvotrOLnNL GCGP6sNAfvdX+rN7bzeulpt+V5MuUkr2yyiq4ygfvzLpnA4Eo2H87+C1zZYzbIUD nFNz5TUUOslIOPKyKqm9vTHAvhCvy3ynxZR+ChJKb0ylgvV6yq0a4HKbSxlX73Xh SpzmAu3ktVMjJzkd+ml7+EWJADivL6yhcR9y9pODA8bxpfi7LY0xhONHLWJrRzlB cQ3uvUHWJl7Vn58BLTL6CnaQE4UrsraNF6jBBDKfELXg5APO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQS8iHreIJZq7rx4ALhrB1SQACwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMzRjZjQ1NDUtNzM3Ny0z NjA0LWJmYjktMTVmZThkZTg4YjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/IiAhVB9KTulAkI7ZTdaQNLTY9a7wnbFs0n8HLH9yHx+K/sVfMJ0rE Mh/2ecZVpuiOvFVXSqyGfAFSgY03PECiPRJ7JjmpLckoN1DREPY37HcPrdYCIyrl RA+r4NERj7CPbKivNw7yMN32hfeQLHKSngxq59xOIB8KLE09anpxmxQx+WZcfZYF iuIIEBDGmdFhpzOIjWGy+mPyv4hINNZNfYXNc51I6u9WtSNCOC8sr16eMoJFbHXk FcAfqn8ZArKCUiZiNd9tHK34TBe3TsrhW0lWbjUUm901GAa+svUsoR1Q5/isl+ml Jnr3WSySbGHOvcB5tswKjpDqKA9Ucyg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:10:01 2025 by rpki-client