$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b407bc98-281e-35bc-96c4-1b79a9cada82.roa File: b407bc98-281e-35bc-96c4-1b79a9cada82.roa (raw, json) Hash identifier: U2wXqg5R792aca0N4xtAyVjoQVoq9I9/8h91EApRFfA= Subject key identifier: 98:43:0C:B0:65:0F:08:6D:9D:2D:88:CB:2A:7E:9D:85:FA:1B:57:7F Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968E1D5A91AF2959D1C980 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b407bc98-281e-35bc-96c4-1b79a9cada82.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 129.41.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8e:1d:5a:91:af:29:59:d1:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=4a4c3dc6-bba5-4aec-8ae1-4a74e873ae37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8e:3a:d3:ea:8f:3e:2a:ba:8c:2c:e1:be:7e: 1b:53:b8:9f:58:37:57:d3:f0:30:a5:0a:6f:1c:12: 74:2a:fd:e5:6b:a6:23:98:e5:4a:a2:51:ef:ff:e0: 96:43:74:95:1f:b9:8a:09:07:26:50:ec:55:66:af: fd:d5:3d:70:69:c8:22:a3:98:4c:3d:74:b7:ba:de: c1:5c:52:d5:45:8e:f3:3c:f9:ce:8e:64:85:31:a7: 05:6d:99:c6:ed:96:7e:fd:fe:aa:1c:30:e1:88:21: a4:bb:bd:86:a6:53:d2:bb:89:06:e1:70:d4:68:30: fc:75:5a:54:5e:81:02:c0:a8:56:81:8b:21:4f:89: c8:f5:3c:b5:6d:c8:2d:10:1c:90:92:ca:e9:95:38: 58:0a:0c:4e:f8:09:8e:47:25:61:13:97:82:39:1c: 15:ee:33:3f:67:9d:1d:6b:6f:7b:99:7b:72:f7:8b: f7:0f:44:cc:75:ea:0c:92:a9:5f:f6:c5:db:70:bd: 54:bf:75:74:90:ae:6f:ae:56:d2:44:aa:2d:a0:9e: 05:92:53:15:cd:92:0d:94:29:1e:a1:cf:a6:44:ae: b1:0c:83:f6:74:a1:67:01:a7:a6:f9:d7:24:c8:46: f4:02:90:1b:21:be:41:9a:24:be:6c:41:c0:72:d6: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:43:0C:B0:65:0F:08:6D:9D:2D:88:CB:2A:7E:9D:85:FA:1B:57:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/b407bc98-281e-35bc-96c4-1b79a9cada82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:aa:9e:99:73:03:96:72:c0:43:53:78:b0:c1:33:73:e7:c7: 76:09:ad:01:83:d8:ac:d0:4b:8f:64:53:8c:25:dd:94:25:bd: e6:36:74:da:03:56:71:66:8f:4c:a4:51:66:6d:63:66:3b:4c: c8:de:1c:6b:45:c8:a6:e6:27:3e:e4:60:57:a4:cf:ae:b9:97: 92:b2:d7:74:15:45:f7:87:a4:ef:3e:67:23:4a:2c:a4:dc:cc: e1:e2:92:73:61:bb:13:4e:d9:a9:3e:1b:ec:cd:fd:6d:a9:14: 78:4c:c4:07:05:4c:09:0b:a7:70:9b:4c:15:95:49:50:3b:53: 20:ad:36:36:1c:08:54:a3:e6:2e:b7:44:b3:73:a4:21:84:0c: ed:2c:1a:f9:85:0a:1b:68:3e:bb:de:ba:5e:6b:68:a1:d6:9c: 8a:f0:63:21:cf:35:ad:a1:18:dc:9a:26:85:35:d7:5e:86:14: 82:89:d4:f2:17:f9:72:0b:77:70:02:eb:d2:3d:87:39:a0:39: 45:1c:a7:81:93:6d:a1:c8:09:03:4d:8c:00:eb:fd:2f:dc:26: c5:8f:d0:20:71:4b:df:e8:ad:32:be:95:de:0a:41:24:ab:dc: 07:d3:8b:1c:31:74:8d:2f:60:e9:c8:4f:23:3c:71:30:d4:4a: c5:35:67:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo4dWpGvKVnRyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk NGE0YzNkYzYtYmJhNS00YWVjLThhZTEtNGE3NGU4NzNhZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo460+qPPiq6jCzhvn4bU7ifWDdX0/AwpQpv HBJ0Kv3la6YjmOVKolHv/+CWQ3SVH7mKCQcmUOxVZq/91T1wacgio5hMPXS3ut7B XFLVRY7zPPnOjmSFMacFbZnG7ZZ+/f6qHDDhiCGku72GplPSu4kG4XDUaDD8dVpU XoECwKhWgYshT4nI9Ty1bcgtEByQksrplThYCgxO+AmORyVhE5eCORwV7jM/Z50d a297mXty94v3D0TMdeoMkqlf9sXbcL1Uv3V0kK5vrlbSRKotoJ4FklMVzZINlCke oc+mRK6xDIP2dKFnAaem+dckyEb0ApAbIb5BmiS+bEHActYkwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhDDLBlDwhtnS2Iyyp+nYX6G1d/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYjQwN2JjOTgtMjgxZS0z NWJjLTk2YzQtMWI3OWE5Y2FkYTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuqnplzA5ZywENTeLDBM3Pnx3YJrQGD2KzQS49kU4wl3ZQlveY2dNoD VnFmj0ykUWZtY2Y7TMjeHGtFyKbmJz7kYFekz665l5Ky13QVRfeHpO8+ZyNKLKTc zOHiknNhuxNO2ak+G+zN/W2pFHhMxAcFTAkLp3CbTBWVSVA7UyCtNjYcCFSj5i63 RLNzpCGEDO0sGvmFChtoPrveul5raKHWnIrwYyHPNa2hGNyaJoU1116GFIKJ1PIX +XILd3AC69I9hzmgOUUcp4GTbaHICQNNjADr/S/cJsWP0CBxS9/orTK+ld4KQSSr 3AfTixwxdI0vYOnITyM8cTDUSsU1Z6k= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:11 2025 by rpki-client