$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa File: aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json) Hash identifier: erYbwOb+Mc8+ZHc2n9KYhAapV/rXVvBs2mPPkQgGXxo= Subject key identifier: EA:27:C2:89:8C:1C:80:A0:CC:00:89:A2:B2:A7:C8:50:0B:9F:20:60 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968D9CD855668ED48937C0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8d:9c:d8:55:66:8e:d4:89:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=a5738bc3-1296-4541-93c5-2e5191fb82da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c8:d9:f4:89:8b:41:56:d1:7a:d1:ea:51:0d: 60:ea:ca:20:3a:05:33:45:a2:47:e1:e7:ec:34:69: fd:a1:d2:f2:02:40:41:57:9d:60:d3:e2:8c:5c:44: 4e:53:63:c5:a2:b3:bf:db:b0:f0:cb:20:2f:61:6a: 9d:20:8d:cb:85:e1:44:d9:b3:99:0d:70:b3:f4:9c: 7d:73:8e:6c:89:51:22:ad:d5:5a:ca:12:32:5e:2a: ed:cb:04:1c:91:f5:2e:e6:a4:d0:1f:25:f3:bc:6e: 3e:3f:d5:11:f4:e4:a5:d4:89:e1:ba:ae:3c:8a:0d: 95:76:fb:9b:83:ee:9f:c0:c8:5f:8c:af:27:6b:9a: 04:50:36:94:80:e6:89:9a:31:b7:22:e4:b5:73:4b: 49:13:6b:a8:00:73:27:6b:c8:15:f6:66:5e:ca:57: 64:92:bb:0f:76:95:f3:9a:0c:77:99:d3:30:8e:e2: 2d:db:37:07:85:1a:e6:ff:52:23:d5:4c:2b:50:c7: 54:80:74:72:8b:a8:e8:8c:1b:1a:8d:17:86:f5:2d: 61:68:ae:ce:3f:cc:df:1a:48:15:33:32:f0:a2:2f: ee:6c:0f:ae:71:4d:c5:6e:30:ca:15:02:38:0a:4d: 77:ce:3a:ad:6b:d5:31:c3:d6:bd:59:c5:7b:fe:fe: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:27:C2:89:8C:1C:80:A0:CC:00:89:A2:B2:A7:C8:50:0B:9F:20:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4a:87:bd:53:e0:00:ef:2d:1c:11:a8:d2:3f:cd:00:87:dc: 08:15:a7:b7:c2:c7:17:8e:08:ab:d3:46:83:b2:e3:86:70:9f: b3:55:bd:96:bb:8c:08:e7:d8:5a:f1:e8:a6:db:4f:88:07:34: 4b:1a:20:45:32:88:72:d5:00:cb:8e:dd:18:b0:ff:fa:fa:52: 7a:6f:48:59:6a:9f:47:6c:60:81:8e:fa:53:cc:5d:3f:85:18: 12:08:90:0e:fa:6d:bf:b6:a3:aa:92:db:87:ff:24:11:4b:d9: b8:8e:bb:65:db:55:33:d8:65:a5:e6:d7:6c:85:31:c9:bf:97: 00:a4:d4:d6:0d:3d:b8:ac:ef:81:62:37:ec:39:a3:85:f8:5b: 11:6f:a2:e0:99:be:3f:5f:60:c0:be:76:72:59:61:73:2b:c5: cf:78:27:0b:c4:9f:c6:20:ea:e1:e4:9f:41:88:73:ff:8d:c8: f8:42:c3:7f:b6:9b:8a:24:d5:02:9e:17:be:ac:1e:50:32:22: f1:11:09:bb:9d:ec:c4:c4:95:16:c6:f8:48:fa:8d:53:87:02: 69:cb:39:ac:82:91:57:f6:8c:3f:b2:59:1c:4a:61:79:02:cd: 61:51:5e:7b:47:34:a0:c0:9f:c0:b9:66:e6:d3:85:32:90:47: 8b:cc:cd:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo2c2FVmjtSJN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YTU3MzhiYzMtMTI5Ni00NTQxLTkzYzUtMmU1MTkxZmI4MmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cjZ9ImLQVbRetHqUQ1g6sogOgUzRaJH4efs NGn9odLyAkBBV51g0+KMXEROU2PForO/27DwyyAvYWqdII3LheFE2bOZDXCz9Jx9 c45siVEirdVayhIyXirtywQckfUu5qTQHyXzvG4+P9UR9OSl1Inhuq48ig2Vdvub g+6fwMhfjK8na5oEUDaUgOaJmjG3IuS1c0tJE2uoAHMna8gV9mZeyldkkrsPdpXz mgx3mdMwjuIt2zcHhRrm/1Ij1UwrUMdUgHRyi6jojBsajReG9S1haK7OP8zfGkgV MzLwoi/ubA+ucU3FbjDKFQI4Ck13zjqta9Uxw9a9WcV7/v4prQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOonwomMHICgzACJorKnyFALnyBgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYWViMzk5MGItNWQ0OS0z OTY1LTkxZGEtOWJjYzhlNWY3ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJKh71T4ADvLRwRqNI/zQCH3AgVp7fCxxeOCKvTRoOy44Zwn7NVvZa7 jAjn2Frx6KbbT4gHNEsaIEUyiHLVAMuO3Riw//r6UnpvSFlqn0dsYIGO+lPMXT+F GBIIkA76bb+2o6qS24f/JBFL2biOu2XbVTPYZaXm12yFMcm/lwCk1NYNPbis74Fi N+w5o4X4WxFvouCZvj9fYMC+dnJZYXMrxc94JwvEn8Yg6uHkn0GIc/+NyPhCw3+2 m4ok1QKeF76sHlAyIvERCbud7MTElRbG+Ej6jVOHAmnLOayCkVf2jD+yWRxKYXkC zWFRXntHNKDAn8C5ZubThTKQR4vMzcg= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:36 2025 by rpki-client