$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa File: 6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa (raw, json) Hash identifier: hVETK+R8T1/tIkcJflvKnCMyR+PoKSaDOh6lv4YAz8c= Subject key identifier: 82:A1:94:46:11:D5:84:CF:5B:57:A3:50:98:20:1F:1C:45:29:51:4A Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F43285848116FFAA728A70316CA5E0900 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa Signing time: Mon 02 Dec 2024 02:00:40 +0000 ROA not before: Mon 02 Dec 2024 02:00:40 +0000 ROA not after: Sun 02 Mar 2025 02:00:40 +0000 asID: 63293 IP address blocks: 129.134.162.0/24 maxlen: 24 157.240.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:11:6f:fa:a7:28:a7:03:16:ca:5e:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Dec 2 02:00:40 2024 GMT Not After : Mar 2 02:00:40 2025 GMT Subject: CN=a0c61e17-5c67-4ed0-922f-b1090b8f1240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:dd:fc:14:c5:8e:85:10:e4:56:61:19:26: 41:b9:6c:5d:c5:4f:fb:4a:89:a0:00:da:79:b1:dd: 75:7a:e5:79:44:3c:f6:d2:48:5e:e6:e0:5c:f2:3c: 0a:c0:2d:e9:41:c3:09:c4:81:2e:d7:09:4a:09:d7: 7a:12:fe:8b:76:41:e3:6d:1a:c5:33:fc:38:ef:b2: 71:96:22:41:09:c4:65:d4:aa:e5:31:bf:61:26:4d: 07:ad:1b:22:92:2b:63:73:89:c4:98:10:53:8b:4a: 58:b6:94:c8:9b:47:05:ab:1a:37:30:42:6b:30:d9: 0f:ad:fc:57:8c:7b:77:3c:bc:f8:11:53:da:3d:1c: 9b:78:7c:72:c2:64:9d:5e:7a:11:72:73:2c:a6:18: df:8f:a2:fd:0f:f3:98:c6:d8:3a:74:5e:7c:92:b3: 79:a5:4b:36:45:f0:e9:dd:5a:06:31:72:cc:01:da: 8b:02:ca:ed:bd:91:5e:76:28:ff:f1:5f:98:ad:89: 3f:44:3d:8b:c4:58:46:08:b8:92:ce:2b:3e:ef:07: c0:eb:4c:4b:b2:68:40:5d:00:c3:be:e4:4b:11:de: a7:07:3b:58:69:41:da:6e:67:70:1a:44:0b:6e:37: ad:aa:1e:ae:cb:dd:9a:0c:85:09:ab:62:38:23:8d: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:A1:94:46:11:D5:84:CF:5B:57:A3:50:98:20:1F:1C:45:29:51:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/6eb4c70f-dec1-3bbc-b3c5-e32d822b2a12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.162.0/24 157.240.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:41:77:0f:07:5e:12:99:8f:e4:d4:65:da:86:76:b5:5b:ae: 6c:64:61:80:b8:01:be:df:ab:39:81:b5:3a:27:49:ed:b8:e0: 09:1e:d1:10:5f:c0:63:85:af:88:a2:e3:ce:4c:40:97:fa:de: 3d:7a:ed:86:95:8f:61:71:1d:ac:86:7a:0a:ec:40:71:f1:ab: 50:38:13:c3:39:f4:40:a3:ec:2e:00:28:5b:ae:d9:80:b5:77: 1d:84:ac:12:58:ad:82:32:d9:60:8d:59:2e:67:94:3f:39:0e: de:ac:04:56:8f:42:cb:be:be:a6:9d:70:c3:dd:64:09:27:fc: e9:37:39:34:17:92:a6:58:c1:fe:7d:c2:55:45:ad:a2:b7:de: 24:20:c2:99:e5:13:da:11:6a:95:8e:ed:e5:c3:06:ae:2c:43: 8d:0b:1e:29:0b:93:72:4a:a9:09:a6:d9:a4:50:44:40:b8:51: 77:d7:08:ae:7a:59:f9:82:5e:b0:c4:31:3d:e3:fe:c8:56:91: 1b:2d:5d:af:7e:76:c1:92:a7:00:d0:2b:2b:0a:69:37:94:55: 18:60:88:a6:8e:ef:3d:0f:79:d3:e4:52:92:f0:6d:f9:ee:fc: df:f7:1f:6f:18:54:b7:0a:ef:ea:89:19:b3:d8:fa:05:80:96: de:08:28:90 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEgRb/qnKKcDFspeCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI0MTIwMjAyMDA0MFoXDTI1MDMwMjAyMDA0MFowLzEtMCsGA1UEAxMk YTBjNjFlMTctNWM2Ny00ZWQwLTkyMmYtYjEwOTBiOGYxMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT7d/BTFjoUQ5FZhGSZBuWxdxU/7SomgANp5 sd11euV5RDz20khe5uBc8jwKwC3pQcMJxIEu1wlKCdd6Ev6LdkHjbRrFM/w477Jx liJBCcRl1KrlMb9hJk0HrRsikitjc4nEmBBTi0pYtpTIm0cFqxo3MEJrMNkPrfxX jHt3PLz4EVPaPRybeHxywmSdXnoRcnMsphjfj6L9D/OYxtg6dF58krN5pUs2RfDp 3VoGMXLMAdqLAsrtvZFedij/8V+YrYk/RD2LxFhGCLiSzis+7wfA60xLsmhAXQDD vuRLEd6nBztYaUHabmdwGkQLbjetqh6uy92aDIUJq2I4I40hswIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFIKhlEYR1YTPW1ejUJggHxxFKVFKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNmViNGM3MGYtZGVjMS0z YmJjLWIzYzUtZTMyZDgyMmIyYTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAgYaiAwQA nfCBMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAGxBdw8HXhKZj+TUZdqGdrVbrmxkYYC4Ab7fqzmBtTonSe24 4Ake0RBfwGOFr4ii485MQJf63j167YaVj2FxHayGegrsQHHxq1A4E8M59ECj7C4A KFuu2YC1dx2ErBJYrYIy2WCNWS5nlD85Dt6sBFaPQsu+vqadcMPdZAkn/Ok3OTQX kqZYwf59wlVFraK33iQgwpnlE9oRapWO7eXDBq4sQ40LHikLk3JKqQmm2aRQREC4 UXfXCK56WfmCXrDEMT3j/shWkRstXa9+dsGSpwDQKysKaTeUVRhgiKaO7z0PedPk UpLwbfnu/N/3H28YVLcK7+qJGbPY+gWAlt4IKJA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:30 2025 by rpki-client