$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90e7a3-d83d-3c2a-9ec5-c5ba904ffc7f.roa File: 9d90e7a3-d83d-3c2a-9ec5-c5ba904ffc7f.roa (raw, json) Hash identifier: N6iH4xsRze1J4T5mEoTzaV+H5HpGXgv/0oZCVzW3Cls= Subject key identifier: 3F:E3:54:CF:13:40:45:77:16:A5:B3:7E:5E:10:A1:AE:9F:0A:E5:63 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968D8DA8FC3BBDB0D072F0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90e7a3-d83d-3c2a-9ec5-c5ba904ffc7f.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 129.41.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8d:8d:a8:fc:3b:bd:b0:d0:72:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=e466117e-d41f-4004-bfa5-f69698816c8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1e:47:48:a6:ab:a5:42:bc:b7:25:90:a3:a7: e5:9a:83:22:5a:4a:4a:15:23:c7:78:3f:98:c0:41: 6c:57:a7:4b:6f:4e:26:ed:4e:e3:59:d0:87:51:f5: 7a:51:96:34:78:34:56:2d:74:e0:b2:96:e0:0d:46: da:2a:2d:8d:90:47:ce:dd:67:37:8c:6c:87:fa:6e: 7a:aa:e2:b5:f9:04:72:4c:09:64:fe:82:a5:92:52: b9:0f:6f:c3:d5:37:15:03:5b:cb:ca:2d:86:f3:61: 01:87:cb:c4:01:03:68:ca:5c:8a:99:bf:9c:ac:8b: 97:c5:52:21:a0:8a:5e:09:03:9c:c8:dd:79:70:5a: 98:34:b2:3b:3d:fe:39:11:8b:d5:e7:8f:a1:ca:1f: e0:b4:59:75:6e:38:9d:61:4a:10:a9:5d:a8:54:d9: df:23:a0:cc:f4:8e:b7:74:45:57:a4:28:a8:10:04: bc:50:61:ed:f6:72:ad:0c:95:8d:bc:86:17:f3:87: 81:2c:ee:51:66:b0:32:f4:d2:b3:f1:c4:8e:b2:43: bd:65:a1:f8:fa:64:89:61:54:eb:b8:33:1e:6f:06: f0:3c:ac:7b:30:62:c0:4f:17:54:8f:7f:1a:80:64: d6:d1:38:40:a4:6f:61:0a:9e:1e:04:e4:ca:53:71: 34:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E3:54:CF:13:40:45:77:16:A5:B3:7E:5E:10:A1:AE:9F:0A:E5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9d90e7a3-d83d-3c2a-9ec5-c5ba904ffc7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:d4:95:5f:45:44:02:60:69:dd:9e:a5:03:70:e6:6e:b6:23: 5b:0a:e4:fd:a8:74:e0:64:98:a8:99:b3:92:e8:91:0e:e4:22: 45:c9:8f:d3:c1:09:af:19:76:db:b5:be:35:4f:0a:ba:c4:5b: a5:3c:fa:47:a4:56:a9:47:22:2a:e4:f1:e0:71:84:f7:40:5c: 75:5e:90:b9:3c:40:30:46:a7:b1:75:43:2c:7d:95:41:7b:78: 63:aa:b4:38:27:8e:05:34:ae:2f:74:1c:9f:44:28:31:83:f1: 83:3a:19:5a:1d:f0:58:84:2c:38:8e:4a:36:18:c6:00:92:61: 58:db:64:7e:8e:d5:07:68:8a:79:94:61:48:4c:1b:c2:e8:be: 61:6a:89:be:e6:dd:b2:39:e9:6a:5e:62:9d:cd:fa:00:77:8b: 83:4a:0d:02:d8:a8:c3:15:2f:bb:ca:a0:60:cf:b9:70:a9:a6: 57:2c:9b:8c:9e:2b:a9:6d:50:29:82:c2:f1:92:5a:c3:e9:da: 58:13:31:d3:df:b5:49:25:52:a1:48:ef:d9:be:70:1b:3d:8e: 30:ef:1c:90:b6:54:79:34:6c:fe:c3:97:50:09:e1:07:43:e5: b6:ef:51:65:9d:47:39:8a:33:83:58:8c:75:71:a5:cf:dc:9d: 23:28:4f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo2NqPw7vbDQcvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZTQ2NjExN2UtZDQxZi00MDA0LWJmYTUtZjY5Njk4ODE2YzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxB5HSKarpUK8tyWQo6flmoMiWkpKFSPHeD+Y wEFsV6dLb04m7U7jWdCHUfV6UZY0eDRWLXTgspbgDUbaKi2NkEfO3Wc3jGyH+m56 quK1+QRyTAlk/oKlklK5D2/D1TcVA1vLyi2G82EBh8vEAQNoylyKmb+crIuXxVIh oIpeCQOcyN15cFqYNLI7Pf45EYvV54+hyh/gtFl1bjidYUoQqV2oVNnfI6DM9I63 dEVXpCioEAS8UGHt9nKtDJWNvIYX84eBLO5RZrAy9NKz8cSOskO9ZaH4+mSJYVTr uDMebwbwPKx7MGLATxdUj38agGTW0ThApG9hCp4eBOTKU3E0vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/jVM8TQEV3FqWzfl4Qoa6fCuVjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWQ5MGU3YTMtZDgzZC0z YzJhLTllYzUtYzViYTkwNGZmYzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHUlV9FRAJgad2epQNw5m62I1sK5P2odOBkmKiZs5LokQ7kIkXJj9PB Ca8Zdtu1vjVPCrrEW6U8+kekVqlHIirk8eBxhPdAXHVekLk8QDBGp7F1Qyx9lUF7 eGOqtDgnjgU0ri90HJ9EKDGD8YM6GVod8FiELDiOSjYYxgCSYVjbZH6O1QdoinmU YUhMG8LovmFqib7m3bI56WpeYp3N+gB3i4NKDQLYqMMVL7vKoGDPuXCpplcsm4ye K6ltUCmCwvGSWsPp2lgTMdPftUklUqFI79m+cBs9jjDvHJC2VHk0bP7Dl1AJ4QdD 5bbvUWWdRzmKM4NYjHVxpc/cnSMoT20= -----END CERTIFICATE-----Generated at Fri Apr 4 23:30:09 2025 by rpki-client