$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa File: 74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa (raw, json) Hash identifier: UUYxpYofQ2aUp5+OZ15cIcFVa4+zbs2hUAfXrmniOEY= Subject key identifier: 79:42:B6:EC:9D:21:89:CC:13:8F:25:87:0E:D6:66:0A:09:63:11:3C Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584886B06F837B3020A14DB9AE80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 63293 IP address blocks: 129.134.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:6f:83:7b:30:20:a1:4d:b9:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=feb4a0e9-e0d2-4519-8ec8-a88c673a61e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:c0:43:c1:0f:75:88:ee:f3:fb:11:ba:1a: 80:c2:ff:0e:5d:57:9c:86:41:14:09:25:82:f5:b3: 2b:9f:92:61:8f:94:c8:bf:8a:43:b7:b7:11:aa:42: 31:4c:2c:b9:58:78:a1:a0:01:fb:5b:1f:dd:8b:85: 15:ca:af:f8:6c:31:aa:5d:b0:4a:16:d5:a3:f5:b1: 80:0c:3c:70:3a:83:d1:40:d8:d0:8c:01:81:56:02: b8:13:8d:9f:46:9f:30:c0:99:66:ef:c9:b4:6b:51: 58:39:a1:8d:7a:7d:33:e9:b7:64:c7:17:08:a3:8d: 0f:7a:22:49:d2:54:be:fd:39:a8:1b:8e:30:d1:54: bf:3f:a2:51:34:69:61:2b:60:4a:74:56:28:7b:ea: 81:e9:89:11:c6:70:d4:6c:86:ae:d6:c0:ab:19:c8: 7e:8f:7a:11:b2:f1:29:8e:65:cb:b9:ce:e2:75:b3: ce:2e:cf:c7:f8:52:a9:9c:ff:5d:69:81:67:79:42: 32:80:cd:5d:8c:87:b7:87:dc:8c:b5:89:e0:ec:e2: 63:92:21:be:50:01:64:71:5f:9e:ab:5e:9d:e5:67: e9:e3:ad:bd:07:53:f4:7a:07:51:57:98:3b:4e:81: 8d:51:bb:9a:ee:20:a1:b4:43:0a:f7:31:2d:9f:fe: 56:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:42:B6:EC:9D:21:89:CC:13:8F:25:87:0E:D6:66:0A:09:63:11:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/74ccb710-ae2e-3860-a67e-53e8e5b9a905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:69:dc:d0:16:e9:eb:28:22:41:3a:7a:81:b9:14:94:b8:7d: c9:a8:46:cd:88:58:68:3c:c5:c1:f2:61:4f:a8:f1:0e:02:ab: e2:1a:9d:46:da:9c:1c:28:17:0c:30:c2:71:57:fd:68:c0:7b: 1b:3f:9d:33:51:15:7c:45:ff:93:1d:75:59:ad:b0:ea:fe:60: ae:d3:64:cd:86:84:d0:de:b9:d2:bf:db:09:8b:20:7e:c9:2a: 7d:ea:c1:20:c1:fa:00:2f:be:68:7c:b4:ab:73:e0:8a:78:b6: ac:53:92:89:51:04:9e:64:17:b1:1b:1e:b9:3b:d7:d6:be:cd: 1a:65:f5:79:51:7d:20:79:f9:0a:1f:29:ba:16:23:0f:6c:60: f7:df:b7:a2:85:d2:84:2f:fd:30:cc:3a:b5:b1:c1:01:c9:f8: 85:27:b6:82:39:66:de:15:18:55:d2:b7:df:ca:ec:15:4d:57: 06:2f:fd:cc:95:d1:5f:29:55:27:cd:39:c0:9f:9a:f6:25:d9: 87:c8:7e:96:1d:76:15:cd:2b:34:dc:55:6e:f8:bc:9f:25:e3: 83:db:72:7d:2f:4e:83:c1:cd:0b:b3:22:a0:bc:86:4d:6f:a2: 17:78:d1:fb:c6:fb:f7:51:8c:6e:39:4d:b3:86:e6:53:ec:96: 44:99:f8:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsG+DezAgoU25roAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ZmViNGEwZTktZTBkMi00NTE5LThlYzgtYTg4YzY3M2E2MWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS/AQ8EPdYju8/sRuhqAwv8OXVechkEUCSWC 9bMrn5Jhj5TIv4pDt7cRqkIxTCy5WHihoAH7Wx/di4UVyq/4bDGqXbBKFtWj9bGA DDxwOoPRQNjQjAGBVgK4E42fRp8wwJlm78m0a1FYOaGNen0z6bdkxxcIo40PeiJJ 0lS+/TmoG44w0VS/P6JRNGlhK2BKdFYoe+qB6YkRxnDUbIau1sCrGch+j3oRsvEp jmXLuc7idbPOLs/H+FKpnP9daYFneUIygM1djIe3h9yMtYng7OJjkiG+UAFkcV+e q16d5Wfp4629B1P0egdRV5g7ToGNUbua7iChtEMK9zEtn/5WiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlCtuydIYnME48lhw7WZgoJYxE8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvNzRjY2I3MTAtYWUyZS0z ODYwLWE2N2UtNTNlOGU1YjlhOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgYa+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVp3NAW6esoIkE6eoG5FJS4fcmoRs2IWGg8xcHyYU+o8Q4Cq+IanUba nBwoFwwwwnFX/WjAexs/nTNRFXxF/5MddVmtsOr+YK7TZM2GhNDeudK/2wmLIH7J Kn3qwSDB+gAvvmh8tKtz4Ip4tqxTkolRBJ5kF7EbHrk719a+zRpl9XlRfSB5+Qof KboWIw9sYPfft6KF0oQv/TDMOrWxwQHJ+IUntoI5Zt4VGFXSt9/K7BVNVwYv/cyV 0V8pVSfNOcCfmvYl2YfIfpYddhXNKzTcVW74vJ8l44Pbcn0vToPBzQuzIqC8hk1v ohd40fvG+/dRjG45TbOG5lPslkSZ+F0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:01 2025 by rpki-client