$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa File: 1838e719-a60f-32cf-9525-6410b4891dd5.roa (raw, json) Hash identifier: mM1J0HhMEeD99ztmxE3wVExx/FrI9HwXS0sgQwxGyCQ= Subject key identifier: 3C:9E:FC:7E:2D:81:B1:7A:29:DD:A4:02:95:21:ED:9E:0C:86:5A:C3 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285844F9FAB57F2DC7483756B38AA0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa Signing time: Thu 22 Feb 2024 14:00:30 +0000 ROA not before: Thu 22 Feb 2024 14:00:30 +0000 ROA not after: Wed 22 May 2024 13:00:30 +0000 asID: 14618 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:44:f9:fa:b5:7f:2d:c7:48:37:56:b3:8a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 22 14:00:30 2024 GMT Not After : May 22 13:00:30 2024 GMT Subject: CN=4cf59a47-e6a4-4a3e-9eff-e00e24f6b85f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:62:d8:67:53:d0:d3:e1:d0:46:d9:de:07: 2e:11:42:20:3d:2b:05:36:90:38:55:9f:17:a3:8d: d1:b8:fd:88:8b:04:ee:0b:ee:fe:8d:ee:d4:de:51: 8c:f8:87:7b:82:08:e9:17:48:15:cc:ae:b9:2b:09: cd:99:48:8b:c3:b5:b0:c8:fa:5c:da:a7:d0:1c:30: 4d:d6:c8:46:03:d8:e3:e7:c8:aa:0c:41:5d:b8:66: 9a:6c:8e:28:26:47:74:09:f9:22:c3:9a:bc:7e:e5: 20:2a:8f:02:ba:9b:5b:01:19:c3:6f:21:e7:50:e9: c0:e2:66:34:4e:c6:3a:48:22:55:a7:d5:3d:be:c1: f7:48:a0:82:6a:c0:f1:5d:5c:c0:cc:4d:10:ed:66: 1f:2d:44:b9:7a:2f:3e:2d:8b:43:0d:c7:1c:1d:c9: 82:36:d6:b7:69:c6:0e:84:67:f3:22:33:3b:b6:9c: a2:97:4b:e4:6c:69:63:b6:6b:fb:e4:7e:c3:b2:28: 32:b8:dd:c0:59:79:55:50:ad:44:b0:54:11:eb:1d: d1:49:1e:d8:84:b1:30:82:5e:f1:1b:f3:fc:9e:7a: ae:52:94:ff:77:31:92:95:b4:b4:70:d4:bc:3a:52: c0:f1:54:1e:20:93:2d:80:53:54:2c:8e:7f:ec:83: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:9E:FC:7E:2D:81:B1:7A:29:DD:A4:02:95:21:ED:9E:0C:86:5A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1838e719-a60f-32cf-9525-6410b4891dd5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:23:7a:21:06:8e:0a:f2:f3:9d:b6:3c:1d:9b:1f:75:68:7a: 75:6d:d8:f8:2a:14:81:41:ba:e8:33:4d:a6:c8:4b:a9:d4:01: e4:5d:4c:f0:a9:5f:69:12:9d:39:54:84:71:96:b4:3f:9b:d4: 95:67:5e:9d:a5:ed:af:a4:84:0e:d2:07:0b:ee:24:71:86:8e: 2c:d1:21:f3:81:37:7e:e9:b0:eb:9a:30:24:21:f6:3a:67:54: 89:88:63:0a:c1:cd:a0:2d:4f:b2:26:a9:20:49:02:84:4a:1c: 6d:cc:37:05:75:55:b7:22:10:1f:6e:82:b1:bc:6b:9b:0a:2b: d5:8d:92:7f:d8:75:22:01:14:bc:d9:83:f1:18:49:95:d9:2c: 3f:e2:ee:ac:04:70:9a:93:71:59:11:e6:ba:85:29:ab:0c:78: 89:4e:bd:e0:f7:a2:60:7a:6c:9c:c5:2b:5a:eb:2b:5e:79:d7: d4:dd:91:4e:7d:ad:0d:5a:ed:9e:a5:54:89:ae:1c:c2:bd:b0: f3:0f:e9:5e:1b:d7:1f:55:cf:7c:a7:32:62:16:2e:d5:4d:21: 0c:0d:f0:01:28:e3:00:df:43:c0:94:d6:ed:8e:89:b5:68:a7: fe:54:f2:b1:9b:1b:70:b5:54:d3:de:a8:cc:d6:59:d3:7e:fe: 24:57:32:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWET5+rV/LcdIN1aziqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDIyMjE0MDAzMFoXDTI0MDUyMjEzMDAzMFowLzEtMCsGA1UEAxMk NGNmNTlhNDctZTZhNC00YTNlLTllZmYtZTAwZTI0ZjZiODVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuxi2GdT0NPh0EbZ3gcuEUIgPSsFNpA4VZ8X o43RuP2IiwTuC+7+je7U3lGM+Id7ggjpF0gVzK65KwnNmUiLw7WwyPpc2qfQHDBN 1shGA9jj58iqDEFduGaabI4oJkd0Cfkiw5q8fuUgKo8CuptbARnDbyHnUOnA4mY0 TsY6SCJVp9U9vsH3SKCCasDxXVzAzE0Q7WYfLUS5ei8+LYtDDcccHcmCNta3acYO hGfzIjM7tpyil0vkbGljtmv75H7DsigyuN3AWXlVUK1EsFQR6x3RSR7YhLEwgl7x G/P8nnquUpT/dzGSlbS0cNS8OlLA8VQeIJMtgFNULI5/7IN0zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDye/H4tgbF6Kd2kApUh7Z4MhlrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMTgzOGU3MTktYTYwZi0z MmNmLTk1MjUtNjQxMGI0ODkxZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAjeiEGjgry8522PB2bH3VoenVt2PgqFIFBuugzTabIS6nUAeRdTPCp X2kSnTlUhHGWtD+b1JVnXp2l7a+khA7SBwvuJHGGjizRIfOBN37psOuaMCQh9jpn VImIYwrBzaAtT7ImqSBJAoRKHG3MNwV1VbciEB9ugrG8a5sKK9WNkn/YdSIBFLzZ g/EYSZXZLD/i7qwEcJqTcVkR5rqFKasMeIlOveD3omB6bJzFK1rrK15519TdkU59 rQ1a7Z6lVImuHMK9sPMP6V4b1x9Vz3ynMmIWLtVNIQwN8AEo4wDfQ8CU1u2OibVo p/5U8rGbG3C1VNPeqMzWWdN+/iRXMsg= -----END CERTIFICATE-----Generated at Wed May 1 23:06:03 2024 by rpki-client on console-ams.rpki-client.org