$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa File: a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa (raw, json) Hash identifier: AMSrrIbSjUumECx11z99jAiKjx0Pe/djGg9pGNzpVQ8= Subject key identifier: D1:60:4C:F8:B9:42:0F:24:48:14:89:F4:D3:9D:E3:93:6B:5F:24:44 Certificate issuer: /CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Certificate serial: 010D0C9F432858485E35B6E851F97DB0F002E600 Authority key identifier: 03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa Signing time: Sun 29 Dec 2024 14:00:53 +0000 ROA not before: Sun 29 Dec 2024 14:00:53 +0000 ROA not after: Sat 29 Mar 2025 13:00:53 +0000 asID: 14041 IP address blocks: 129.19.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:5e:35:b6:e8:51:f9:7d:b0:f0:02:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1d2e348-ffa8-4555-99f7-3526834e2fd5 Validity Not Before: Dec 29 14:00:53 2024 GMT Not After : Mar 29 13:00:53 2025 GMT Subject: CN=f336a521-fccf-488b-807c-5b8f9ed7cf90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ea:cc:99:02:cd:1e:31:68:92:39:ef:ef:35: 5e:b6:62:dd:30:9e:a4:1a:c9:ee:e7:92:44:47:37: 19:8e:01:7d:3d:e1:89:6a:71:3d:e1:47:61:0b:94: 46:76:9d:a7:1d:1e:16:fb:61:24:11:be:f9:c4:00: ec:bf:95:31:71:a2:ac:27:e7:0d:47:48:23:be:93: a0:5e:96:a9:7f:5d:92:ce:90:a9:56:1b:22:d1:32: 69:27:df:fb:b8:00:cc:1d:55:04:b6:64:62:18:52: 0a:34:0c:b0:3e:f7:cd:a3:12:f8:a2:fb:26:27:c1: 83:c6:d6:ad:38:58:c2:2a:34:ec:01:d6:33:64:9b: 27:a1:a3:e3:c1:99:4d:15:41:ba:ef:bb:0d:8f:74: 9b:3b:c0:41:0c:f8:62:2f:a4:3f:45:19:12:85:3c: bb:f4:f8:a0:80:5c:fe:d2:2b:d6:2e:7f:0c:a0:4c: cb:49:47:1e:60:cc:30:7b:4e:07:ab:af:fc:1f:47: 8c:cb:aa:0e:65:a9:5c:74:9f:04:aa:dd:09:a7:d9: 51:3b:84:8d:5e:0b:22:9e:18:fb:7a:28:82:ed:c3: 73:04:ae:66:7c:02:2d:57:9a:bf:96:c3:30:18:82: 7e:f7:ed:5c:9b:a7:92:98:e3:d9:87:47:df:d6:b3: 9a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:60:4C:F8:B9:42:0F:24:48:14:89:F4:D3:9D:E3:93:6B:5F:24:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a8471413-3bde-38c1-8ef5-3cf69cd9ea1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5/a1d2e348-ffa8-4555-99f7-3526834e2fd5.crl X509v3 Authority Key Identifier: keyid:03:14:62:0F:E5:0D:1C:6D:F8:78:06:D8:77:0C:11:DE:C0:0B:6F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a1d2e348-ffa8-4555-99f7-3526834e2fd5.cer sbgp-ipAddrBlock: critical IPv4: 129.19.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:26:74:cb:69:4a:e9:97:98:ff:7e:80:aa:99:50:d5:18:b9: f0:ea:72:d0:83:0d:e7:9a:72:64:66:49:32:ac:13:46:4e:d2: 95:23:94:40:ed:5f:80:9f:8b:be:35:44:52:99:6b:f3:87:26: 6c:e8:99:c4:da:0c:92:5b:36:77:a1:a4:e0:b9:56:49:2f:9d: e6:85:93:e7:7e:53:03:02:37:1c:5b:a2:9d:02:b6:90:2b:1e: 66:4f:b3:d0:ac:26:71:d2:b6:d7:c9:2f:62:32:97:57:ae:ed: d3:db:f0:30:a0:fb:e5:9c:46:3b:b7:e8:92:af:b0:5f:45:b0: 8b:1a:3b:fd:6a:6e:77:ee:0f:70:a1:21:0a:5c:52:85:d4:6f: 91:1f:12:a4:1b:43:e6:3e:3b:54:11:22:4d:89:f0:46:d6:ce: 41:9f:b1:ba:7c:09:d6:b7:11:77:56:19:14:42:2e:71:05:55: 4a:84:8f:d3:eb:f7:7f:7c:f8:e4:4e:35:b6:29:d1:8a:cf:65: 08:a9:14:1d:bd:a8:af:28:3f:61:cc:82:d7:04:fd:89:a1:eb: a9:4d:b9:13:3d:43:f2:21:f0:3b:99:7c:3d:f3:72:8f:a8:60: 4e:c1:db:1f:92:25:4f:52:bf:59:1b:2f:73:c4:ff:38:e7:29: b2:d2:83:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEheNbboUfl9sPAC5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTFkMmUzNDgtZmZhOC00NTU1LTk5ZjctMzUyNjgzNGUy ZmQ1MB4XDTI0MTIyOTE0MDA1M1oXDTI1MDMyOTEzMDA1M1owLzEtMCsGA1UEAxMk ZjMzNmE1MjEtZmNjZi00ODhiLTgwN2MtNWI4ZjllZDdjZjkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAierMmQLNHjFokjnv7zVetmLdMJ6kGsnu55JE RzcZjgF9PeGJanE94UdhC5RGdp2nHR4W+2EkEb75xADsv5UxcaKsJ+cNR0gjvpOg Xpapf12SzpCpVhsi0TJpJ9/7uADMHVUEtmRiGFIKNAywPvfNoxL4ovsmJ8GDxtat OFjCKjTsAdYzZJsnoaPjwZlNFUG677sNj3SbO8BBDPhiL6Q/RRkShTy79PiggFz+ 0ivWLn8MoEzLSUceYMwwe04Hq6/8H0eMy6oOZalcdJ8Eqt0Jp9lRO4SNXgsinhj7 eiiC7cNzBK5mfAItV5q/lsMwGIJ+9+1cm6eSmOPZh0ff1rOa6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFgTPi5Qg8kSBSJ9NOd45NrXyREMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQy ZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2ODM0ZTJmZDUvYTg0NzE0MTMtM2JkZS0z OGMxLThlZjUtM2NmNjljZDllYTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTFkMmUzNDgtZmZhOC00NTU1LTk5 ZjctMzUyNjgzNGUyZmQ1L2ExZDJlMzQ4LWZmYTgtNDU1NS05OWY3LTM1MjY4MzRl MmZkNS5jcmwwHwYDVR0jBBgwFoAUAxRiD+UNHG34eAbYdwwR3sALb9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMWQyZTM0OC1mZmE4LTQ1NTUtOTlmNy0zNTI2 ODM0ZTJmZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgROUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIEmdMtpSumXmP9+gKqZUNUYufDqctCDDeeacmRmSTKsE0ZO0pUjlEDt X4Cfi741RFKZa/OHJmzomcTaDJJbNnehpOC5VkkvneaFk+d+UwMCNxxbop0CtpAr HmZPs9CsJnHSttfJL2Iyl1eu7dPb8DCg++WcRju36JKvsF9FsIsaO/1qbnfuD3Ch IQpcUoXUb5EfEqQbQ+Y+O1QRIk2J8EbWzkGfsbp8Cda3EXdWGRRCLnEFVUqEj9Pr 9398+ORONbYp0YrPZQipFB29qK8oP2HMgtcE/Ymh66lNuRM9Q/Ih8DuZfD3zco+o YE7B2x+SJU9Sv1kbL3PE/zjnKbLSg3Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:11:36 2025 by rpki-client