$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa File: aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa (raw, json) Hash identifier: cSBgE62UF3/dxYRBu6Aq4P0An6gD5DourO6j+qKMun8= Subject key identifier: 48:58:DF:41:11:23:EA:07:D5:D3:C5:2C:8C:5E:3C:5B:23:76:EE:EF Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858472C65D13C0FB6E3F7C0160900 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa Signing time: Wed 11 Sep 2024 01:00:31 +0000 ROA not before: Wed 11 Sep 2024 01:00:31 +0000 ROA not after: Tue 10 Dec 2024 02:00:31 +0000 asID: 16509 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:2c:65:d1:3c:0f:b6:e3:f7:c0:16:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Sep 11 01:00:31 2024 GMT Not After : Dec 10 02:00:31 2024 GMT Subject: CN=12db40ed-b065-4978-9573-2a23a3552faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7a:2a:13:11:83:8d:49:a2:3e:c1:77:f4:42: 8e:be:19:84:6a:a9:2f:ad:a9:59:22:f2:c5:a4:9e: 72:77:1d:01:bd:1e:03:42:bb:b2:fa:c4:1f:88:60: a3:f2:4a:a8:fc:67:ad:e9:db:5e:28:f7:e9:ac:9d: 53:9a:fa:f2:9b:93:25:d3:6a:cb:50:36:26:27:0d: a7:d7:9e:4e:94:27:a8:cc:f7:cf:dc:2e:98:c1:33: 52:42:03:d6:09:fe:dd:95:83:5d:3b:d0:d2:cf:48: 26:37:8d:27:a2:07:88:08:80:66:23:9f:65:c8:14: ff:c4:f4:e8:35:61:68:fb:e8:0a:68:3c:4a:a9:13: f8:a4:8a:69:59:af:52:15:68:26:1d:05:e3:d7:98: ea:db:71:77:95:70:b1:57:7e:06:1e:85:54:69:7e: 37:2a:37:7f:6c:bd:dc:86:2a:05:09:ca:f5:8f:4f: aa:a2:bc:0f:40:e2:38:61:a3:fd:7d:47:4d:a8:0c: 96:11:24:9c:23:35:63:75:7e:d1:53:18:47:41:c4: 6c:7e:d8:cb:ad:1e:37:97:5b:2f:53:a0:9d:f0:a9: d8:2c:c8:36:dd:6d:34:3b:d8:28:4c:87:c0:b4:64: ac:34:4a:9c:8a:8f:fd:6d:e0:92:48:81:2e:a9:1d: 2d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:58:DF:41:11:23:EA:07:D5:D3:C5:2C:8C:5E:3C:5B:23:76:EE:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/aeb3990b-5d49-3965-91da-9bcc8e5f7fda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a4:02:3d:3d:f2:77:2e:e7:0e:e1:33:9e:36:4b:69:f8:98: bd:e6:8c:0d:32:13:19:ec:72:f9:6b:50:3f:ce:61:98:1e:78: c0:85:f5:6a:fb:4f:66:12:5e:e5:29:0a:78:b5:9a:1e:25:34: cc:31:42:04:ab:59:0b:4e:60:89:4c:3c:fd:3b:8e:f6:d6:c6: a8:a8:3a:ae:de:bc:71:a5:59:6b:08:73:74:8e:36:04:8b:49: a9:3e:bd:61:b6:cc:15:6d:32:95:52:f2:fb:d4:cd:d0:cf:25: 80:f9:dc:a8:e1:d3:41:b4:68:d8:d4:92:86:73:47:5b:05:f1: ae:dd:dc:49:c4:83:42:8d:77:14:fb:c3:96:6b:72:b8:7c:b6: 7a:a2:a9:64:a9:b0:88:a7:ae:c9:1b:9b:0e:c9:c2:6f:56:88: 0c:fe:16:d1:a7:1f:6d:60:da:1a:ac:06:df:32:b9:5a:81:62: fb:ce:f1:5a:84:dd:d0:ec:a0:62:9a:3c:31:77:28:16:1d:de: 8e:02:cf:99:87:2e:0a:d0:49:cf:d1:e1:a2:22:dc:5b:bc:da: 8d:8d:70:26:d8:0e:25:71:16:6a:6c:0c:59:1e:27:9a:99:a2: c6:e9:8b:49:78:d2:35:29:45:15:f6:d4:39:08:c4:b8:d9:38: f0:8a:eb:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEcsZdE8D7bj98AWCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MDkxMTAxMDAzMVoXDTI0MTIxMDAyMDAzMVowLzEtMCsGA1UEAxMk MTJkYjQwZWQtYjA2NS00OTc4LTk1NzMtMmEyM2EzNTUyZmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnoqExGDjUmiPsF39EKOvhmEaqkvralZIvLF pJ5ydx0BvR4DQruy+sQfiGCj8kqo/Get6dteKPfprJ1Tmvrym5Ml02rLUDYmJw2n 155OlCeozPfP3C6YwTNSQgPWCf7dlYNdO9DSz0gmN40nogeICIBmI59lyBT/xPTo NWFo++gKaDxKqRP4pIppWa9SFWgmHQXj15jq23F3lXCxV34GHoVUaX43Kjd/bL3c hioFCcr1j0+qorwPQOI4YaP9fUdNqAyWESScIzVjdX7RUxhHQcRsftjLrR43l1sv U6Cd8KnYLMg23W00O9goTIfAtGSsNEqcio/9beCSSIEuqR0toQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhY30ERI+oH1dPFLIxePFsjdu7vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYWViMzk5MGItNWQ0OS0z OTY1LTkxZGEtOWJjYzhlNWY3ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFekAj098ncu5w7hM542S2n4mL3mjA0yExnscvlrUD/OYZgeeMCF9Wr7 T2YSXuUpCni1mh4lNMwxQgSrWQtOYIlMPP07jvbWxqioOq7evHGlWWsIc3SONgSL Sak+vWG2zBVtMpVS8vvUzdDPJYD53Kjh00G0aNjUkoZzR1sF8a7d3EnEg0KNdxT7 w5Zrcrh8tnqiqWSpsIinrskbmw7Jwm9WiAz+FtGnH21g2hqsBt8yuVqBYvvO8VqE 3dDsoGKaPDF3KBYd3o4Cz5mHLgrQSc/R4aIi3Fu82o2NcCbYDiVxFmpsDFkeJ5qZ osbpi0l40jUpRRX21DkIxLjZOPCK6/0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:27 2024 by rpki-client on console-ams.rpki-client.org