$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa File: 1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa (raw, json) Hash identifier: keiMKL7M0wl+bdlvPtqkPqcHL2PWtTUZJoZN9X0KSUM= Subject key identifier: 16:66:22:5F:4E:08:FA:EE:82:82:15:D3:23:68:9B:65:7E:8F:06:CC Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858495ABEBDD93762EAA8D7DCAC00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa Signing time: Sun 30 Mar 2025 01:00:47 +0000 ROA not before: Sun 30 Mar 2025 01:00:47 +0000 ROA not after: Sat 28 Jun 2025 01:00:47 +0000 asID: 19795 IP address blocks: 129.41.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:5a:be:bd:d9:37:62:ea:a8:d7:dc:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 30 01:00:47 2025 GMT Not After : Jun 28 01:00:47 2025 GMT Subject: CN=0e03593b-c0b7-4394-9796-823451229fea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:3b:44:07:51:25:33:54:4d:5b:76:b7:3c:ea: d9:e9:c2:8e:bc:68:74:24:79:62:f9:57:9f:3c:71: 72:9f:a1:eb:61:d9:74:86:e6:ae:ff:7f:76:41:8b: a0:30:69:06:f9:a4:60:d5:94:e0:b0:14:2f:3a:2b: 78:4e:9a:72:90:36:32:61:d1:fc:6c:69:2e:8e:b8: b5:88:3d:40:51:36:96:be:ef:13:39:64:75:95:93: ab:9a:5e:d6:39:41:8d:3f:c7:24:b9:8c:eb:6e:43: 02:ba:46:81:e6:22:66:c9:37:ed:87:a4:4a:f8:f2: df:7f:0d:70:07:38:71:b2:f5:a1:db:90:77:9e:b3: 5e:5c:45:9b:b9:f8:55:e9:63:da:ee:4b:f6:4a:ab: 1a:91:b2:fe:3b:bb:fc:cc:90:23:f4:e8:50:aa:a8: 44:d8:51:02:3f:15:44:af:b5:be:1f:93:48:bb:b6: 2b:bc:02:ca:52:76:4b:85:5c:38:43:85:71:f1:8c: 79:b2:b8:d9:40:3d:95:da:ac:6c:65:64:9e:d0:27: 36:21:a8:dd:d7:4b:8b:b4:ad:fc:54:63:a0:5b:75: b5:da:40:26:a7:35:90:08:83:b6:41:7b:a4:4d:97: 63:76:d9:d6:35:3a:8f:c8:62:f6:56:11:7a:97:3f: 54:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:66:22:5F:4E:08:FA:EE:82:82:15:D3:23:68:9B:65:7E:8F:06:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1d8a4a16-99fc-3e6c-baa3-235457a94ebf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:45:48:34:f8:35:c2:0d:55:7c:c3:35:c6:7f:b3:81:41:2c: 55:88:cb:52:62:25:2c:b1:53:26:05:1f:12:9b:7c:c6:ee:cf: 29:4e:70:76:93:48:b0:9d:a6:e2:46:91:2b:77:7f:be:9b:1f: 5e:04:dd:98:ae:72:27:7f:3c:8f:17:f9:39:b2:37:84:ef:06: 6d:b8:be:dc:30:32:9c:0c:35:d2:d6:3c:b6:ba:8c:7f:88:1d: 1e:fd:77:1c:35:e0:87:5f:d6:20:4e:de:40:f5:01:62:76:75: 45:82:9f:58:38:24:d9:63:6f:be:59:ad:ad:3a:4e:24:c0:b2: 19:db:6a:4c:64:7a:ae:38:60:85:1a:c4:af:a8:75:bb:ed:71: eb:a6:ae:4a:54:f4:ca:95:3c:22:14:a0:0a:d3:6b:0f:df:5d: 17:69:60:65:14:30:30:03:22:a9:78:cb:c4:b7:6a:7e:e6:88: ec:9b:57:13:75:6b:98:2c:5a:cb:1a:b7:df:b8:eb:31:9e:ee: fb:b5:07:8c:d7:da:ef:00:3b:b0:c6:03:41:a4:6a:08:6a:d9: d2:ab:d0:0a:c6:8f:99:05:2a:1e:46:76:4b:d9:9c:7c:34:ef: 11:b1:18:d8:82:a9:cc:84:08:b6:20:92:7e:57:ad:5d:b7:f7: 4c:f6:14:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavr3ZN2LqqNfcrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk MGUwMzU5M2ItYzBiNy00Mzk0LTk3OTYtODIzNDUxMjI5ZmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTtEB1ElM1RNW3a3POrZ6cKOvGh0JHli+Vef PHFyn6HrYdl0huau/392QYugMGkG+aRg1ZTgsBQvOit4TppykDYyYdH8bGkujri1 iD1AUTaWvu8TOWR1lZOrml7WOUGNP8ckuYzrbkMCukaB5iJmyTfth6RK+PLffw1w BzhxsvWh25B3nrNeXEWbufhV6WPa7kv2SqsakbL+O7v8zJAj9OhQqqhE2FECPxVE r7W+H5NIu7YrvALKUnZLhVw4Q4Vx8Yx5srjZQD2V2qxsZWSe0Cc2Iajd10uLtK38 VGOgW3W12kAmpzWQCIO2QXukTZdjdtnWNTqPyGL2VhF6lz9UfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZmIl9OCPrugoIV0yNom2V+jwbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWQ4YTRhMTYtOTlmYy0z ZTZjLWJhYTMtMjM1NDU3YTk0ZWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5FSDT4NcINVXzDNcZ/s4FBLFWIy1JiJSyxUyYFHxKbfMbuzylOcHaT SLCdpuJGkSt3f76bH14E3Ziucid/PI8X+TmyN4TvBm24vtwwMpwMNdLWPLa6jH+I HR79dxw14Idf1iBO3kD1AWJ2dUWCn1g4JNljb75Zra06TiTAshnbakxkeq44YIUa xK+odbvtceumrkpU9MqVPCIUoArTaw/fXRdpYGUUMDADIql4y8S3an7miOybVxN1 a5gsWssat9+46zGe7vu1B4zX2u8AO7DGA0Gkaghq2dKr0ArGj5kFKh5GdkvZnHw0 7xGxGNiCqcyECLYgkn5XrV2390z2FIw= -----END CERTIFICATE-----Generated at Mon Apr 21 15:01:51 2025 by rpki-client