$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa File: feb1d56a-e512-3d2d-add6-ec252e4f36af.roa (raw, json) Hash identifier: ma2rCdvQicJvzTmYl9mf+0O+LucXN29xvDXrXEqW1hQ= Subject key identifier: AA:E4:83:EF:BF:4E:4C:33:E6:C3:CF:C5:4B:45:50:B7:7F:CF:23:DF Certificate issuer: /CN=2aa438c9-0cbb-4364-946d-9714249a8222 Certificate serial: 010D0C9F4328584551CD6E8EB030A7FEF6CFEF80 Authority key identifier: 05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa Signing time: Mon 25 Mar 2024 01:00:25 +0000 ROA not before: Mon 25 Mar 2024 01:00:25 +0000 ROA not after: Sun 23 Jun 2024 01:00:25 +0000 asID: 32934 IP address blocks: 129.134.31.0/24 maxlen: 24 129.134.30.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:51:cd:6e:8e:b0:30:a7:fe:f6:cf:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2aa438c9-0cbb-4364-946d-9714249a8222 Validity Not Before: Mar 25 01:00:25 2024 GMT Not After : Jun 23 01:00:25 2024 GMT Subject: CN=71848cdd-fa32-485b-b8fa-d3a9ed5270dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f2:45:48:66:0e:1b:f6:a7:3f:c2:4d:d7:1e: ad:31:eb:6c:de:c8:57:c5:4a:50:5b:49:0c:ba:f2: 23:b0:2e:91:6c:86:fa:1e:ee:ae:6f:5f:7b:b5:9d: ae:f6:f6:8c:ca:9b:cd:0c:2c:74:32:d0:af:d0:fa: cc:3b:fa:d3:25:d9:7a:f6:a3:60:3d:db:2d:21:13: 54:81:67:77:2c:62:0f:83:63:cc:05:e4:f7:cf:27: e9:32:23:8b:72:b9:d6:96:06:a7:ee:fd:5e:0c:1c: 42:5b:9f:ab:2c:6b:59:7a:5a:24:21:52:ba:81:7a: c7:6e:9d:6f:0b:37:b9:5e:1f:76:34:ba:41:18:59: ef:23:10:d9:b8:15:5b:c6:cb:be:9a:04:3c:8b:b0: 89:c2:35:85:56:fd:b7:d3:55:34:88:42:63:f5:e5: 94:a9:b0:ba:a2:f1:f3:7c:09:8b:b3:82:ee:aa:84: 5a:59:8a:2e:2e:92:da:6b:82:92:9c:72:c3:4e:01: 15:db:c9:6e:82:84:7c:7e:35:1b:7b:1a:5b:84:b2: e0:91:d6:38:56:13:6a:c0:4b:78:80:65:fb:f0:74: f6:b5:cd:0a:c3:9a:fa:6f:bb:4f:95:d9:3f:7f:50: cc:75:ab:ab:2b:05:f3:b8:7a:2b:7f:50:47:c6:71: 55:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E4:83:EF:BF:4E:4C:33:E6:C3:CF:C5:4B:45:50:B7:7F:CF:23:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/feb1d56a-e512-3d2d-add6-ec252e4f36af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222/2aa438c9-0cbb-4364-946d-9714249a8222.crl X509v3 Authority Key Identifier: keyid:05:23:DF:93:1B:FF:39:42:9C:2A:FE:7B:FF:7A:4B:33:56:E8:5E:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2aa438c9-0cbb-4364-946d-9714249a8222.cer sbgp-ipAddrBlock: critical IPv4: 129.134.30.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8f:2d:7b:33:96:4e:80:c9:07:5a:9f:25:f8:22:2a:69:55: 47:e0:1d:bb:7a:bf:6e:f1:03:e9:32:3c:b0:83:b9:a6:a0:60: db:bd:df:12:c3:73:1e:e2:6c:20:b4:30:2f:8b:d1:f6:22:e2: c3:80:0d:64:b2:59:93:ae:c2:56:71:61:9b:2e:2f:4a:2a:59: f1:1b:3e:cc:7f:9f:45:7e:77:b1:68:69:f9:00:e9:b2:6f:09: 43:11:72:c1:89:60:ba:64:8c:98:b1:78:0a:bf:fc:38:fc:1e: 8d:55:ea:9c:90:18:34:d4:ff:0a:dd:af:8d:60:12:44:0a:35: 1a:a6:f1:38:60:43:d6:c3:de:a7:84:3b:9c:7b:71:6e:ac:38: 2f:02:9e:df:7a:e0:25:47:f7:bb:93:23:9d:8a:19:c2:c3:ef: f8:e7:e9:1d:f3:1d:a0:92:63:7c:9f:42:80:6a:87:05:11:5b: 36:a0:9a:27:20:37:f0:8f:7e:ce:4c:bc:32:15:e8:ff:33:f4: eb:dc:2a:31:9f:53:53:82:76:68:89:1a:21:07:68:9c:85:be: bd:d1:9f:57:83:49:72:b2:d8:07:09:20:02:66:1b:c5:21:29: c2:b9:21:71:21:44:1c:cf:e9:47:d4:ca:cb:d6:e0:5e:e8:7c: bb:ee:7f:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVRzW6OsDCn/vbP74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmFhNDM4YzktMGNiYi00MzY0LTk0NmQtOTcxNDI0OWE4 MjIyMB4XDTI0MDMyNTAxMDAyNVoXDTI0MDYyMzAxMDAyNVowLzEtMCsGA1UEAxMk NzE4NDhjZGQtZmEzMi00ODViLWI4ZmEtZDNhOWVkNTI3MGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvJFSGYOG/anP8JN1x6tMets3shXxUpQW0kM uvIjsC6RbIb6Hu6ub197tZ2u9vaMypvNDCx0MtCv0PrMO/rTJdl69qNgPdstIRNU gWd3LGIPg2PMBeT3zyfpMiOLcrnWlgan7v1eDBxCW5+rLGtZelokIVK6gXrHbp1v Cze5Xh92NLpBGFnvIxDZuBVbxsu+mgQ8i7CJwjWFVv2301U0iEJj9eWUqbC6ovHz fAmLs4LuqoRaWYouLpLaa4KSnHLDTgEV28lugoR8fjUbexpbhLLgkdY4VhNqwEt4 gGX78HT2tc0Kw5r6b7tPldk/f1DMdaurKwXzuHorf1BHxnFVNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrkg++/Tkwz5sPPxUtFULd/zyPfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0 MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0MjQ5YTgyMjIvZmViMWQ1NmEtZTUxMi0z ZDJkLWFkZDYtZWMyNTJlNGYzNmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMmFhNDM4YzktMGNiYi00MzY0LTk0 NmQtOTcxNDI0OWE4MjIyLzJhYTQzOGM5LTBjYmItNDM2NC05NDZkLTk3MTQyNDlh ODIyMi5jcmwwHwYDVR0jBBgwFoAUBSPfkxv/OUKcKv57/3pLM1boXrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yYWE0MzhjOS0wY2JiLTQzNjQtOTQ2ZC05NzE0 MjQ5YTgyMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgYYeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmPLXszlk6AyQdanyX4IippVUfgHbt6v27xA+kyPLCDuaagYNu93xLD cx7ibCC0MC+L0fYi4sOADWSyWZOuwlZxYZsuL0oqWfEbPsx/n0V+d7FoafkA6bJv CUMRcsGJYLpkjJixeAq//Dj8Ho1V6pyQGDTU/wrdr41gEkQKNRqm8ThgQ9bD3qeE O5x7cW6sOC8Cnt964CVH97uTI52KGcLD7/jn6R3zHaCSY3yfQoBqhwURWzagmicg N/CPfs5MvDIV6P8z9OvcKjGfU1OCdmiJGiEHaJyFvr3Rn1eDSXKy2AcJIAJmG8Uh KcK5IXEhRBzP6UfUysvW4F7ofLvuf9E= -----END CERTIFICATE-----Generated at Thu May 9 07:46:35 2024 by rpki-client on console-fra.rpki-client.org