$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa File: 4347f76d-c74a-3942-9dc0-3e3301512261.roa (raw, json) Hash identifier: VgczYBoxMww/6e5OsTzHVQ1q3HKvy5VtuSDrpVZbKg4= Subject key identifier: 45:60:4C:73:06:88:83:D2:2A:20:02:AB:64:9E:94:82:1B:B3:E3:C3 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D37567E70E96B3765D80 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:75:67:e7:0e:96:b3:76:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=850cd445-6654-437b-a86c-ea323ac119f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:30:be:97:ac:21:60:5f:32:9d:a7:9f:9f:65: c5:d6:47:18:16:99:5c:80:09:16:14:f7:f2:01:22: eb:af:51:73:3b:d3:38:2c:fd:2f:59:3b:3c:56:25: dd:73:09:d4:a1:3a:1d:67:20:59:07:34:be:3c:a4: b7:7c:81:6d:00:e0:60:d0:40:2d:4c:db:f8:24:dd: 0b:a0:0f:59:b8:24:d0:d2:4b:67:25:91:4a:ef:9a: f1:bc:61:7c:2c:89:a3:93:6c:e6:28:81:66:18:14: 67:65:72:60:a6:bd:83:0b:88:e7:7a:a7:7e:d4:d4: ec:ca:5f:4b:76:b4:73:29:41:c3:8e:25:ee:b5:08: 3d:55:77:ee:28:52:2c:f5:4e:00:25:2f:10:c8:83: 7a:8e:c9:8e:18:bd:ba:f7:ee:37:04:66:ab:4c:6e: b3:19:a2:8e:95:5c:04:9e:d5:b2:3a:5b:ec:f3:18: 8b:ed:4c:ae:90:ec:19:11:97:b8:11:58:07:d3:6d: 06:a7:b6:24:92:3c:a6:cb:ad:85:1e:01:b8:9e:3c: 8b:98:c3:81:04:95:d5:6a:d9:84:ff:27:6a:02:f4: 14:18:71:97:17:4d:d4:03:6a:6b:a3:54:65:e0:cb: 81:15:1d:36:ea:71:c3:e7:81:ab:e9:61:51:d7:5c: 3d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:60:4C:73:06:88:83:D2:2A:20:02:AB:64:9E:94:82:1B:B3:E3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/4347f76d-c74a-3942-9dc0-3e3301512261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:60:82:9a:51:de:4e:52:e5:86:a2:e5:0d:e3:95:bc:c0:be: bb:d1:0b:45:3e:3c:76:98:58:8c:cc:90:9d:4d:75:e0:70:f5: cc:7d:c4:0d:05:f8:b4:e5:82:46:2a:e9:7a:17:e4:a7:59:00: 75:4c:c9:95:b5:5b:bf:1c:6e:af:a7:5e:19:49:32:65:be:9d: ef:00:01:c3:0a:d8:6d:83:12:0a:13:a0:12:15:06:0c:77:9d: 28:92:ec:a3:be:cf:e0:ea:a4:e0:25:88:9d:bd:c3:6b:67:c3: 3a:10:4c:70:1d:04:1d:3e:9c:1f:2d:1d:16:3c:9c:25:73:0c: e5:fa:6e:8c:70:a4:56:d7:ec:71:5a:89:9f:5c:3b:3f:a0:b6: e2:70:05:f5:03:6c:b0:1b:e7:4b:a7:a8:f0:52:f3:f2:a9:fe: 3c:2b:22:a6:51:ab:fd:f3:7b:0b:02:98:6a:37:aa:dc:71:58: 77:17:7f:5d:55:f9:61:8b:69:4d:d9:a3:eb:37:2c:b2:58:b9: 13:85:7c:ab:02:c5:2d:d3:72:6f:24:a2:eb:b0:e3:5c:b0:1c: d0:3a:32:6a:87:e1:f0:6e:cd:4a:27:dd:78:3d:ba:73:b0:46: eb:fe:8d:2a:7a:21:28:bb:cb:25:85:85:84:b0:26:8c:ce:6c: a1:95:a1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdN1Z+cOlrN2XYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ODUwY2Q0NDUtNjY1NC00MzdiLWE4NmMtZWEzMjNhYzExOWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTC+l6whYF8ynaefn2XF1kcYFplcgAkWFPfy ASLrr1FzO9M4LP0vWTs8ViXdcwnUoTodZyBZBzS+PKS3fIFtAOBg0EAtTNv4JN0L oA9ZuCTQ0ktnJZFK75rxvGF8LImjk2zmKIFmGBRnZXJgpr2DC4jneqd+1NTsyl9L drRzKUHDjiXutQg9VXfuKFIs9U4AJS8QyIN6jsmOGL269+43BGarTG6zGaKOlVwE ntWyOlvs8xiL7UyukOwZEZe4EVgH020Gp7Ykkjymy62FHgG4njyLmMOBBJXVatmE /ydqAvQUGHGXF03UA2pro1Rl4MuBFR026nHD54Gr6WFR11w9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVgTHMGiIPSKiACq2SelIIbs+PDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvNDM0N2Y3NmQtYzc0YS0z OTQyLTlkYzAtM2UzMzAxNTEyMjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZggppR3k5S5Yai5Q3jlbzAvrvRC0U+PHaYWIzMkJ1NdeBw9cx9xA0F +LTlgkYq6XoX5KdZAHVMyZW1W78cbq+nXhlJMmW+ne8AAcMK2G2DEgoToBIVBgx3 nSiS7KO+z+DqpOAliJ29w2tnwzoQTHAdBB0+nB8tHRY8nCVzDOX6boxwpFbX7HFa iZ9cOz+gtuJwBfUDbLAb50unqPBS8/Kp/jwrIqZRq/3zewsCmGo3qtxxWHcXf11V +WGLaU3Zo+s3LLJYuROFfKsCxS3Tcm8kouuw41ywHNA6MmqH4fBuzUon3Xg9unOw Ruv+jSp6ISi7yyWFhYSwJozObKGVoYc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:03 2025 by rpki-client