$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa File: a9d63830-af6c-3450-85d9-b6a575a21f7e.roa (raw, json) Hash identifier: M5y6GBeiIRBE91WJ6dSjC5QKVDJ0kgWfmgEkmaNDMEc= Subject key identifier: 1F:CE:17:9E:B7:4F:C7:09:75:EB:DF:33:AC:B6:9F:8F:AF:4A:61:5B Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D343840FC5F00CD83900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 16509 IP address blocks: 129.33.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:43:84:0f:c5:f0:0c:d8:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=9d5a378e-ec09-4303-a9c9-4ab7edfe1254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:0a:ce:cd:5b:e9:96:19:40:94:f2:2b:c2: bc:23:61:18:2f:9a:f0:ad:64:d3:d5:a9:bb:31:cf: 2f:ad:c9:f8:f1:27:bf:2b:12:92:34:51:f8:fc:a2: d5:14:11:d7:bf:dc:bc:32:43:57:72:a3:13:64:d3: c8:82:a5:df:7e:a3:6f:20:bb:ee:c8:8f:75:63:13: 61:7d:0a:a1:ff:9a:88:51:21:7b:de:95:01:1c:8e: 26:13:b6:56:4b:19:c4:fd:be:08:62:11:c8:7c:c5: 22:a9:d7:fe:46:79:74:37:64:5c:2a:cc:78:3c:b2: 35:1f:a6:4b:e9:bb:b9:1e:7d:53:2c:28:fe:3c:59: db:d4:d8:f5:5e:da:0c:b9:f6:7b:40:b4:27:e0:0c: 17:e2:80:cf:00:14:06:2f:c7:d9:f5:d6:60:cd:8b: 2d:2a:b8:26:b4:8d:98:b6:aa:39:38:98:b0:a6:1a: e9:70:03:2f:dd:ad:9c:29:17:89:13:5e:1f:77:c4: b2:02:e8:77:58:c8:68:37:33:05:ae:88:99:10:0b: e4:a3:46:d0:0a:e2:76:fd:d5:0d:39:7e:f3:1a:0d: bd:5f:16:24:96:5c:33:39:bd:04:51:a9:78:b7:f4: c8:91:c5:ee:8f:a9:7c:bf:61:d1:4b:c7:a3:50:74: 89:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:CE:17:9E:B7:4F:C7:09:75:EB:DF:33:AC:B6:9F:8F:AF:4A:61:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/a9d63830-af6c-3450-85d9-b6a575a21f7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:86:af:43:4d:63:a2:c4:b6:42:c8:9b:93:34:f4:55:1d:06: 98:11:1d:8f:6e:12:ef:45:2b:7e:82:47:a2:90:4c:10:64:1a: cd:91:db:9c:cb:af:7a:f3:12:4c:5d:a1:a5:0a:f9:9b:9e:45: 47:43:39:ee:02:4d:4b:b5:f7:c8:ee:0c:d9:e3:27:cc:89:21: 40:ce:74:68:e3:34:c4:ff:61:a8:60:b7:55:05:77:84:1b:be: 79:4d:df:75:48:bc:bb:97:c8:50:da:68:bf:ea:43:c4:34:5d: 80:e6:cb:ac:d1:fb:c5:6c:ff:74:3d:ba:be:2f:8b:63:ca:54: d0:38:1a:80:e1:3c:b7:5c:8f:de:50:d3:d6:4a:cf:cc:63:24: 51:2a:23:1f:5a:ed:c0:fa:17:87:8d:a1:ad:29:b4:d7:1e:bd: 74:f9:fe:6a:b6:4f:31:76:ea:ff:92:b7:c9:02:50:77:35:d2: 47:97:c1:42:29:20:72:e5:af:67:00:25:ea:81:ba:ce:00:33: 03:14:d0:f3:0d:0a:60:4b:47:66:b3:b0:93:27:ad:76:25:58: c0:4f:c8:17:6e:0b:48:b1:ff:bc:da:52:11:95:4f:ee:d9:b1: 0e:b5:06:17:69:dc:8a:a8:3d:f2:7c:65:3a:70:65:c8:c8:2f: 21:8b:c3:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdNDhA/F8AzYOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk OWQ1YTM3OGUtZWMwOS00MzAzLWE5YzktNGFiN2VkZmUxMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWkKzs1b6ZYZQJTyK8K8I2EYL5rwrWTT1am7 Mc8vrcn48Se/KxKSNFH4/KLVFBHXv9y8MkNXcqMTZNPIgqXffqNvILvuyI91YxNh fQqh/5qIUSF73pUBHI4mE7ZWSxnE/b4IYhHIfMUiqdf+Rnl0N2RcKsx4PLI1H6ZL 6bu5Hn1TLCj+PFnb1Nj1XtoMufZ7QLQn4AwX4oDPABQGL8fZ9dZgzYstKrgmtI2Y tqo5OJiwphrpcAMv3a2cKReJE14fd8SyAuh3WMhoNzMFroiZEAvko0bQCuJ2/dUN OX7zGg29XxYkllwzOb0EUal4t/TIkcXuj6l8v2HRS8ejUHSJfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB/OF563T8cJdevfM6y2n4+vSmFbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYTlkNjM4MzAtYWY2Yy0z NDUwLTg1ZDktYjZhNTc1YTIxZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEiGr0NNY6LEtkLIm5M09FUdBpgRHY9uEu9FK36CR6KQTBBkGs2R25zL r3rzEkxdoaUK+ZueRUdDOe4CTUu198juDNnjJ8yJIUDOdGjjNMT/Yahgt1UFd4Qb vnlN33VIvLuXyFDaaL/qQ8Q0XYDmy6zR+8Vs/3Q9ur4vi2PKVNA4GoDhPLdcj95Q 09ZKz8xjJFEqIx9a7cD6F4eNoa0ptNcevXT5/mq2TzF26v+St8kCUHc10keXwUIp IHLlr2cAJeqBus4AMwMU0PMNCmBLR2azsJMnrXYlWMBPyBduC0ix/7zaUhGVT+7Z sQ61Bhdp3IqoPfJ8ZTpwZcjILyGLwx0= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:13 2025 by rpki-client