$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa File: 0bc90d09-c374-3ab8-86c0-329828733487.roa (raw, json) Hash identifier: qhX/lOBwsXUor2Gp55aSMLunD6DEekvNgc6K34nm3eg= Subject key identifier: BF:C1:B0:31:F9:AA:CE:2A:0F:D5:5A:9A:27:62:24:5A:44:CA:55:24 Certificate issuer: /CN=0eb0be5e-7cff-4077-992b-f867365a59c5 Certificate serial: 010D0C9F432858498E3A0D057A2029E755B3CB80 Authority key identifier: 29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa Signing time: Thu 17 Apr 2025 11:35:35 +0000 ROA not before: Thu 17 Apr 2025 11:35:35 +0000 ROA not after: Wed 16 Jul 2025 11:35:35 +0000 asID: 2535 IP address blocks: 129.230.224.0/23 maxlen: 24 129.230.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:3a:0d:05:7a:20:29:e7:55:b3:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0eb0be5e-7cff-4077-992b-f867365a59c5 Validity Not Before: Apr 17 11:35:35 2025 GMT Not After : Jul 16 11:35:35 2025 GMT Subject: CN=7c1a5257-f162-4c3c-8a3a-140b9e952030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:88:ce:5e:8c:26:92:17:bc:05:3d:e8:51:17: a8:d6:e9:0c:60:13:3f:a5:51:57:e9:1f:53:30:51: ce:9f:72:4c:0f:1d:54:74:a4:1a:8b:60:62:21:e8: 0c:80:b9:a2:c7:a8:19:e6:f9:04:4f:41:1c:ce:9f: f8:d3:fe:7d:ec:44:4b:86:10:2b:90:b9:8d:d2:87: 40:f9:04:13:58:69:f7:ca:76:be:df:fe:97:9b:e1: e0:4b:d3:43:c3:41:12:04:56:3c:a6:5a:10:78:c7: 97:22:5f:5c:b5:94:f5:b2:32:64:80:a7:67:cc:9e: bd:0d:6f:5c:ac:af:5a:05:10:30:ea:98:b1:18:9b: 36:13:59:15:d5:92:50:aa:fb:74:5e:18:b2:a9:7a: 1d:02:da:bf:8b:bd:fd:64:a7:a0:af:13:9a:d8:38: 53:0e:4b:a1:80:59:1e:52:4a:00:8b:37:92:d0:c4: 23:71:06:f2:0a:04:94:24:64:3d:76:d2:33:24:f5: 94:78:ba:11:66:ad:7b:f0:c1:5f:74:d9:ca:8b:37: 8c:95:f5:2a:31:04:78:0f:0b:79:91:d1:b2:b2:2c: 14:cf:b4:ec:aa:da:21:2e:76:ae:48:8b:c7:b1:5a: 90:35:87:30:93:36:56:82:9f:bf:69:39:0b:1e:ad: 31:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:C1:B0:31:F9:AA:CE:2A:0F:D5:5A:9A:27:62:24:5A:44:CA:55:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0bc90d09-c374-3ab8-86c0-329828733487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5/0eb0be5e-7cff-4077-992b-f867365a59c5.crl X509v3 Authority Key Identifier: keyid:29:22:5A:D1:E9:EA:64:4E:31:84:59:5F:A4:A1:9F:38:B2:51:07:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/0eb0be5e-7cff-4077-992b-f867365a59c5.cer sbgp-ipAddrBlock: critical IPv4: 129.230.224.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:b9:bf:4e:17:25:19:e1:72:0a:fd:43:83:69:cd:56:12:8d: 97:44:64:65:4c:20:a0:22:e2:19:1f:6e:8b:a0:cd:9e:d5:39: 69:16:4f:07:d3:51:73:f7:81:1d:2c:31:b1:e7:63:88:ae:3c: 69:93:7a:c7:8a:c5:8a:c5:f1:b9:57:42:d9:82:09:a0:07:5d: d8:c7:b9:37:c3:e3:4f:a6:88:b2:8a:85:45:40:d9:32:d9:a0: 7c:90:61:eb:0a:c5:a4:24:e7:bf:ec:7e:bb:7c:10:32:cd:84: 34:4c:bc:be:52:39:e3:1a:ac:65:54:59:dc:4c:49:a1:22:cc: 9d:06:b2:b9:39:d1:5b:e9:27:85:23:06:b5:bd:39:96:6f:ee: 43:c7:b3:6d:e3:51:29:fc:4c:7a:3a:8f:13:06:45:b3:99:9a: 8a:97:8c:83:ac:c1:43:04:9d:0e:56:ba:4d:56:1f:07:37:48: 55:de:77:39:13:7e:ce:ca:58:67:c8:0d:65:9a:c5:8a:52:12: f5:43:d7:95:fe:1f:7a:3f:df:38:28:92:4d:66:26:43:d0:81: 56:b7:5b:ef:dc:36:2f:a0:a2:9b:77:da:95:ab:21:39:3f:9f: 6a:d4:42:a9:1a:54:09:c6:f3:dd:f2:c2:af:b0:f4:e3:42:2e: bf:2b:19:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOOg0FeiAp51Wzy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGViMGJlNWUtN2NmZi00MDc3LTk5MmItZjg2NzM2NWE1 OWM1MB4XDTI1MDQxNzExMzUzNVoXDTI1MDcxNjExMzUzNVowLzEtMCsGA1UEAxMk N2MxYTUyNTctZjE2Mi00YzNjLThhM2EtMTQwYjllOTUyMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIjOXowmkhe8BT3oUReo1ukMYBM/pVFX6R9T MFHOn3JMDx1UdKQai2BiIegMgLmix6gZ5vkET0Eczp/40/597ERLhhArkLmN0odA +QQTWGn3yna+3/6Xm+HgS9NDw0ESBFY8ploQeMeXIl9ctZT1sjJkgKdnzJ69DW9c rK9aBRAw6pixGJs2E1kV1ZJQqvt0XhiyqXodAtq/i739ZKegrxOa2DhTDkuhgFke UkoAizeS0MQjcQbyCgSUJGQ9dtIzJPWUeLoRZq178MFfdNnKizeMlfUqMQR4Dwt5 kdGysiwUz7TsqtohLnauSIvHsVqQNYcwkzZWgp+/aTkLHq0xMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/BsDH5qs4qD9VamidiJFpEylUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8wZWIw YmU1ZS03Y2ZmLTQwNzctOTkyYi1mODY3MzY1YTU5YzUvMGJjOTBkMDktYzM3NC0z YWI4LTg2YzAtMzI5ODI4NzMzNDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMGViMGJlNWUtN2NmZi00MDc3LTk5 MmItZjg2NzM2NWE1OWM1LzBlYjBiZTVlLTdjZmYtNDA3Ny05OTJiLWY4NjczNjVh NTljNS5jcmwwHwYDVR0jBBgwFoAUKSJa0enqZE4xhFlfpKGfOLJRBzowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8wZWIwYmU1ZS03Y2ZmLTQwNzctOTkyYi1mODY3 MzY1YTU5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgebgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJm5v04XJRnhcgr9Q4NpzVYSjZdEZGVMIKAi4hkfbougzZ7VOWkWTwfT UXP3gR0sMbHnY4iuPGmTeseKxYrF8blXQtmCCaAHXdjHuTfD40+miLKKhUVA2TLZ oHyQYesKxaQk57/sfrt8EDLNhDRMvL5SOeMarGVUWdxMSaEizJ0Gsrk50VvpJ4Uj BrW9OZZv7kPHs23jUSn8THo6jxMGRbOZmoqXjIOswUMEnQ5Wuk1WHwc3SFXedzkT fs7KWGfIDWWaxYpSEvVD15X+H3o/3zgokk1mJkPQgVa3W+/cNi+gopt32pWrITk/ n2rUQqkaVAnG893ywq+w9ONCLr8rGUE= -----END CERTIFICATE-----Generated at Mon Apr 21 05:33:42 2025 by rpki-client