$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa File: a708dc8a-229d-3054-8be8-f07bbc2a3158.roa (raw, json) Hash identifier: zt/ShrZSzF2JuvsB2cvUgXgFTBPjOGGFGGMSaOdZ1Ec= Subject key identifier: B9:0C:A8:0F:5F:60:62:69:B3:E4:83:C4:7E:A2:AC:17:59:B3:56:C2 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858480BDA6AC6F896EED055E4C240 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 129.41.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6a:c6:f8:96:ee:d0:55:e4:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=1bbebbdd-f7d4-46b9-8d6d-8b5027e37a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:38:48:0d:62:6a:7a:e6:dd:9d:9e:89:84:06: e3:72:89:97:04:6a:90:7b:4f:b5:12:97:cc:39:f6: ce:c1:c8:d4:3c:6b:fc:29:cc:76:9d:09:af:36:81: 8f:42:3f:f6:7b:a7:54:62:00:b3:ac:27:6a:66:b8: fc:87:03:c8:ca:0b:a5:b5:16:3e:fc:26:c8:2d:af: 68:83:5b:c3:0f:2d:6e:d4:97:08:2c:a2:93:52:f0: 7e:fe:42:2d:80:68:2a:d9:1c:af:5c:ad:06:de:4a: 70:91:61:a4:43:26:8a:e0:bd:11:af:68:be:5b:5d: 3a:a3:46:c9:bd:ef:2e:2c:10:56:e2:68:b2:5e:63: 12:60:db:89:3d:d4:10:90:73:e6:63:a7:01:0e:bb: e3:4d:5d:ac:6a:29:6c:0e:16:53:d2:00:10:01:77: ae:98:9a:ed:ee:28:78:2f:e9:18:ae:fb:68:72:94: 52:ae:98:41:2c:d1:a4:78:f1:aa:f7:5f:43:f1:2c: b6:64:90:b0:fa:8f:45:73:0d:2a:bd:97:78:62:ed: 30:04:18:41:f7:35:2f:de:84:5c:16:93:7b:01:93: 21:07:4a:c3:c8:dd:e6:b1:9a:90:b1:e8:df:98:19: 94:d5:84:e9:4f:b3:dc:2e:4a:0e:28:47:07:1f:d8: f7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0C:A8:0F:5F:60:62:69:B3:E4:83:C4:7E:A2:AC:17:59:B3:56:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a708dc8a-229d-3054-8be8-f07bbc2a3158.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:74:b8:4e:51:9d:72:2d:39:68:92:2f:70:c6:89:3a:b8:e0: c2:15:8f:a8:03:97:f0:9c:0f:85:8e:61:aa:c7:c8:00:63:89: 86:1f:88:ec:cf:2b:f6:a5:0c:91:b5:19:2d:7f:ea:7a:39:79: c3:15:63:e5:73:43:31:b1:6d:4e:82:a1:75:dc:10:a4:d3:4d: a8:24:f6:e1:98:13:19:9e:e2:ae:d4:04:77:65:77:03:48:58: 53:44:a2:5f:da:ca:9b:0c:25:9e:39:c7:5a:e0:1b:02:e0:2b: 7f:6f:4c:1a:48:a1:a1:b6:d8:c9:74:fa:af:a6:1d:e2:9a:d9: 18:ef:f0:d9:90:9f:3e:23:f7:a7:94:ac:51:a2:fb:e5:4e:9d: 92:12:0a:82:d6:10:49:33:eb:14:a2:8a:69:7f:64:ec:76:a1: 7d:c7:1f:63:97:c4:5b:f6:9b:55:54:1f:ed:ec:49:12:16:88: 07:ff:47:55:d5:7d:c9:29:d1:66:e1:87:27:db:46:85:e2:6b: 57:ba:10:8e:39:be:7b:1f:56:26:a7:8c:9c:9c:fe:2d:28:d4: eb:bb:a6:8f:2c:a5:96:31:3c:13:b2:cd:45:4c:ec:0e:26:9b: ea:6b:36:a4:eb:23:f4:5a:77:f4:e1:33:40:b8:12:76:1a:ff: 94:3f:c5:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mrG+Jbu0FXkwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MWJiZWJiZGQtZjdkNC00NmI5LThkNmQtOGI1MDI3ZTM3YTFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDhIDWJqeubdnZ6JhAbjcomXBGqQe0+1EpfM OfbOwcjUPGv8Kcx2nQmvNoGPQj/2e6dUYgCzrCdqZrj8hwPIygultRY+/CbILa9o g1vDDy1u1JcILKKTUvB+/kItgGgq2RyvXK0G3kpwkWGkQyaK4L0Rr2i+W106o0bJ ve8uLBBW4miyXmMSYNuJPdQQkHPmY6cBDrvjTV2sailsDhZT0gAQAXeumJrt7ih4 L+kYrvtocpRSrphBLNGkePGq919D8Sy2ZJCw+o9Fcw0qvZd4Yu0wBBhB9zUv3oRc FpN7AZMhB0rDyN3msZqQsejfmBmU1YTpT7PcLkoOKEcHH9j3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkMqA9fYGJps+SDxH6irBdZs1bCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTcwOGRjOGEtMjI5ZC0z MDU0LThiZTgtZjA3YmJjMmEzMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACF0uE5RnXItOWiSL3DGiTq44MIVj6gDl/CcD4WOYarHyABjiYYfiOzP K/alDJG1GS1/6no5ecMVY+VzQzGxbU6CoXXcEKTTTagk9uGYExme4q7UBHdldwNI WFNEol/aypsMJZ45x1rgGwLgK39vTBpIoaG22Ml0+q+mHeKa2Rjv8NmQnz4j96eU rFGi++VOnZISCoLWEEkz6xSiiml/ZOx2oX3HH2OXxFv2m1VUH+3sSRIWiAf/R1XV fckp0WbhhyfbRoXia1e6EI45vnsfVianjJyc/i0o1Ou7po8spZYxPBOyzUVM7A4m m+prNqTrI/Rad/ThM0C4EnYa/5Q/xaY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:54 2025 by rpki-client