$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa File: 7da0bbf2-854f-312a-a5ff-6ab760be9635.roa (raw, json) Hash identifier: tDMhafkTEkPbbExwqZKQkDBN1a7PCIPOhdE6JUCVFHg= Subject key identifier: 9B:61:17:6D:DD:95:34:70:03:A1:54:A4:12:4D:62:4B:0D:D0:D5:1F Certificate issuer: /CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Certificate serial: 010D0C9F43285848A29B4ACF98AAAB4A65190E10 Authority key identifier: FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa Signing time: Thu 23 Jan 2025 02:00:40 +0000 ROA not before: Thu 23 Jan 2025 02:00:40 +0000 ROA not after: Wed 23 Apr 2025 01:00:40 +0000 asID: 25649 IP address blocks: 129.220.224.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a2:9b:4a:cf:98:aa:ab:4a:65:19:0e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df0cf6ff-6f69-41b4-aa67-26d0aba02e8e Validity Not Before: Jan 23 02:00:40 2025 GMT Not After : Apr 23 01:00:40 2025 GMT Subject: CN=b58de827-3968-4881-8c20-2f31867210ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:06:30:6e:21:08:ed:54:15:f3:13:39:36:2f: 54:81:5f:05:6f:20:70:9d:f2:f0:7f:5d:33:ac:5e: d1:62:7c:a0:61:9e:9b:78:f0:95:3b:40:88:1a:aa: c9:41:79:e5:84:7c:64:a9:c7:12:91:6d:bc:cc:c7: b8:e9:1b:5a:a0:56:fd:f8:7a:c6:e9:d6:5a:c5:78: 1b:1b:25:8f:13:29:da:26:ee:e1:54:00:19:aa:91: 87:37:47:91:7f:b4:5f:71:4d:a9:6f:1b:7f:c7:90: 80:cd:ee:e7:b8:5b:c9:61:85:f2:b7:4c:b9:00:25: 28:5d:e2:8c:06:27:92:30:78:03:7f:22:2e:65:48: de:08:86:6a:64:66:49:57:d9:54:35:a4:c6:ce:1e: e7:4a:b1:3b:75:80:4e:33:1d:23:d5:8b:cd:b9:5e: 3c:08:11:73:dc:e3:40:02:57:cb:9b:6d:98:e2:44: 7e:bb:24:ca:51:03:79:3d:37:1e:85:6f:07:29:90: 50:06:f0:4e:a3:81:e9:77:3b:2f:d9:17:27:7c:b9: dc:ad:6b:8f:85:16:e8:33:f5:96:17:50:91:07:70: 09:78:ce:70:35:6a:ba:d4:80:37:5a:84:00:67:c3: 46:5e:b3:2b:d2:2a:3a:37:4d:50:76:cb:54:06:17: 6b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:17:6D:DD:95:34:70:03:A1:54:A4:12:4D:62:4B:0D:D0:D5:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/7da0bbf2-854f-312a-a5ff-6ab760be9635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.crl X509v3 Authority Key Identifier: keyid:FC:60:1F:7D:27:2D:3E:DE:7B:49:46:62:B2:02:07:2C:67:03:A2:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df0cf6ff-6f69-41b4-aa67-26d0aba02e8e.cer sbgp-ipAddrBlock: critical IPv4: 129.220.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:da:ad:78:bd:28:4b:c6:dc:48:9c:d2:03:5e:61:7b:ab:e4: e8:e7:6a:02:0c:b8:9f:38:3c:d8:9d:e4:9b:10:b7:c5:1d:e9: 10:cb:c3:48:e4:53:28:83:fa:b7:f8:04:5c:2c:f1:fd:d0:16: ad:05:0e:29:23:24:2a:e4:b9:35:6c:ef:ed:09:21:15:97:10: fe:37:15:a5:83:55:a1:0f:34:96:4f:6b:8a:e2:01:74:80:22: 11:12:1a:2a:13:6e:7e:27:c2:d8:4b:83:76:8e:28:42:67:b4: 83:5d:64:62:bc:ce:c8:f6:60:f7:b1:cb:05:f5:8c:2e:5d:eb: 22:01:75:54:96:9b:06:ef:36:b7:4c:b5:91:9f:88:c5:45:c5: b6:09:eb:9b:38:dd:34:05:d2:82:a3:d0:38:bf:4f:c4:2f:b4: 1a:3c:c9:a5:9b:c3:22:b8:f2:14:cf:9b:95:83:79:89:a6:82: 2f:e0:f8:f5:6c:23:16:11:e2:6e:1f:d0:82:d7:c6:00:b9:39: b2:ab:24:8c:cf:db:02:a0:11:d9:c4:c8:4b:88:93:d0:60:30: 5c:b0:79:48:3c:60:d8:a3:b5:c2:8a:ee:70:02:f6:68:37:b7: aa:de:45:0c:66:46:e7:84:40:fa:bc:ea:b7:c1:02:60:c2:bd: 05:1b:72:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim0rPmKqrSmUZDhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGYwY2Y2ZmYtNmY2OS00MWI0LWFhNjctMjZkMGFiYTAy ZThlMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk YjU4ZGU4MjctMzk2OC00ODgxLThjMjAtMmYzMTg2NzIxMGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQYwbiEI7VQV8xM5Ni9UgV8FbyBwnfLwf10z rF7RYnygYZ6bePCVO0CIGqrJQXnlhHxkqccSkW28zMe46RtaoFb9+HrG6dZaxXgb GyWPEynaJu7hVAAZqpGHN0eRf7RfcU2pbxt/x5CAze7nuFvJYYXyt0y5ACUoXeKM BieSMHgDfyIuZUjeCIZqZGZJV9lUNaTGzh7nSrE7dYBOMx0j1YvNuV48CBFz3ONA AlfLm22Y4kR+uyTKUQN5PTcehW8HKZBQBvBOo4Hpdzsv2RcnfLncrWuPhRboM/WW F1CRB3AJeM5wNWq61IA3WoQAZ8NGXrMr0io6N01QdstUBhdr/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJthF23dlTRwA6FUpBJNYksN0NUfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBj ZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQwYWJhMDJlOGUvN2RhMGJiZjItODU0Zi0z MTJhLWE1ZmYtNmFiNzYwYmU5NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYwY2Y2ZmYtNmY2OS00MWI0LWFh NjctMjZkMGFiYTAyZThlL2RmMGNmNmZmLTZmNjktNDFiNC1hYTY3LTI2ZDBhYmEw MmU4ZS5jcmwwHwYDVR0jBBgwFoAU/GAffSctPt57SUZisgIHLGcDogIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjBjZjZmZi02ZjY5LTQxYjQtYWE2Ny0yNmQw YWJhMDJlOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFgdzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrarXi9KEvG3Eic0gNeYXur5OjnagIMuJ84PNid5JsQt8Ud6RDLw0jk UyiD+rf4BFws8f3QFq0FDikjJCrkuTVs7+0JIRWXEP43FaWDVaEPNJZPa4riAXSA IhESGioTbn4nwthLg3aOKEJntINdZGK8zsj2YPexywX1jC5d6yIBdVSWmwbvNrdM tZGfiMVFxbYJ65s43TQF0oKj0Di/T8QvtBo8yaWbwyK48hTPm5WDeYmmgi/g+PVs IxYR4m4f0ILXxgC5ObKrJIzP2wKgEdnEyEuIk9BgMFyweUg8YNijtcKK7nAC9mg3 t6reRQxmRueEQPq86rfBAmDCvQUbci4= -----END CERTIFICATE-----Generated at Fri Mar 14 13:22:41 2025 by rpki-client