$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa File: c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa (raw, json) Hash identifier: 85OudwCx7gzMBg/MYs10CTMZnC9BfK/WtgdhOBUI4Zs= Subject key identifier: 97:36:17:D2:D6:BD:67:3D:5C:7D:9D:D5:15:B0:B6:D0:04:95:B4:A8 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487A2077DA8EBA4B95D23A5480 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa Signing time: Wed 08 Jan 2025 14:00:51 +0000 ROA not before: Wed 08 Jan 2025 14:00:51 +0000 ROA not after: Tue 08 Apr 2025 13:00:51 +0000 asID: 14618 IP address blocks: 129.41.172.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:7a:20:77:da:8e:ba:4b:95:d2:3a:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 8 14:00:51 2025 GMT Not After : Apr 8 13:00:51 2025 GMT Subject: CN=3d306eb2-0e27-4283-aba0-fdfdfbeb62ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e6:b3:c8:ce:56:b3:3a:ed:f4:8c:ba:9a:6f: c1:ce:09:5e:22:f9:3f:d5:65:be:2e:89:4d:2a:c5: f7:c4:a7:cb:a0:12:be:15:90:a4:cd:a3:79:b4:e3: 74:18:05:83:1a:c7:65:52:c6:1d:1c:7d:34:45:6c: c8:43:14:1b:7a:63:2b:e8:48:60:b6:0b:f2:ff:8e: 36:27:7b:df:70:e8:d8:33:8b:9a:c0:de:b1:c7:34: 08:5f:65:30:92:31:10:a4:7a:13:81:0a:34:19:d2: 4c:b3:bb:60:02:90:b3:3c:55:5d:4b:c9:4d:80:1b: 7d:ea:2e:a5:98:c0:44:a8:c6:01:9c:16:a8:4d:c3: 77:8a:c7:b4:ef:87:07:fa:93:13:0f:88:bb:87:e6: 57:c6:6f:a3:52:05:3f:5d:d5:f2:b1:4c:ad:db:b8: 91:07:dd:47:27:35:b2:62:3f:35:30:ba:ba:aa:f7: 7c:a1:f2:36:ea:9e:12:bf:a7:b2:b8:07:b2:8e:a6: 7e:b7:52:c8:72:43:a6:3b:51:d0:5e:7a:55:49:c0: b8:10:96:0f:97:f5:15:21:46:21:44:f8:42:04:18: f1:68:10:ff:25:ca:98:6b:7f:63:52:18:f4:49:ba: 00:31:8b:d5:2c:92:94:0e:d4:0e:79:9c:dd:06:42: b2:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:36:17:D2:D6:BD:67:3D:5C:7D:9D:D5:15:B0:B6:D0:04:95:B4:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c4cf7853-e016-3444-9ee5-2ddbb6b2d080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.172.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:ff:4f:29:4a:42:f9:f3:27:bb:90:21:20:12:c6:93:a0:61: 73:a2:3d:75:ca:a1:ca:ca:d6:5b:af:03:42:f6:29:80:02:ed: 87:5e:c4:fe:b7:db:06:a5:d9:79:5e:32:33:5c:fa:07:51:70: fa:28:ce:3f:d5:25:ee:02:70:c1:53:34:42:5c:dc:a0:2f:3d: f7:0e:f6:bb:06:22:86:f6:11:17:52:ba:48:5d:36:f5:67:2a: 98:16:2b:de:4d:cd:4f:d2:f8:f9:48:2b:6c:b5:87:bf:90:00: d6:bf:90:ef:8a:3f:02:2f:0f:4d:e5:97:cc:fb:14:98:e6:3d: 78:10:50:58:cb:27:16:05:81:63:47:4f:cb:92:cb:16:26:e6: f5:7d:44:b4:0b:fe:4b:77:c2:74:50:3a:b6:a1:e2:6b:ef:6b: 60:ac:b3:4d:2e:97:c0:cb:a5:0d:7f:98:af:09:9a:e7:19:9d: 18:00:14:fd:d7:b9:d6:3d:88:6a:98:0b:3d:18:80:0a:17:69: 37:ee:f9:af:0f:4e:10:a2:c2:33:9e:fc:a7:14:02:c2:1a:c4: 8b:af:58:0f:c3:0b:70:4d:70:64:1e:12:f3:5c:b9:ba:92:3d: c1:a9:37:72:e7:d3:28:0b:f8:91:f2:8f:ad:ec:7d:15:d3:bf: 3e:2c:91:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh6IHfajrpLldI6VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwODE0MDA1MVoXDTI1MDQwODEzMDA1MVowLzEtMCsGA1UEAxMk M2QzMDZlYjItMGUyNy00MjgzLWFiYTAtZmRmZGZiZWI2MmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOazyM5Wszrt9Iy6mm/BzgleIvk/1WW+LolN KsX3xKfLoBK+FZCkzaN5tON0GAWDGsdlUsYdHH00RWzIQxQbemMr6Ehgtgvy/442 J3vfcOjYM4uawN6xxzQIX2UwkjEQpHoTgQo0GdJMs7tgApCzPFVdS8lNgBt96i6l mMBEqMYBnBaoTcN3ise074cH+pMTD4i7h+ZXxm+jUgU/XdXysUyt27iRB91HJzWy Yj81MLq6qvd8ofI26p4Sv6eyuAeyjqZ+t1LIckOmO1HQXnpVScC4EJYPl/UVIUYh RPhCBBjxaBD/JcqYa39jUhj0SboAMYvVLJKUDtQOeZzdBkKyiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJc2F9LWvWc9XH2d1RWwttAElbSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzRjZjc4NTMtZTAxNi0z NDQ0LTllZTUtMmRkYmI2YjJkMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSmsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH/TylKQvnzJ7uQISASxpOgYXOiPXXKocrK1luvA0L2KYAC7YdexP63 2wal2XleMjNc+gdRcPoozj/VJe4CcMFTNEJc3KAvPfcO9rsGIob2ERdSukhdNvVn KpgWK95NzU/S+PlIK2y1h7+QANa/kO+KPwIvD03ll8z7FJjmPXgQUFjLJxYFgWNH T8uSyxYm5vV9RLQL/kt3wnRQOrah4mvva2Css00ul8DLpQ1/mK8JmucZnRgAFP3X udY9iGqYCz0YgAoXaTfu+a8PThCiwjOe/KcUAsIaxIuvWA/DC3BNcGQeEvNcubqS PcGpN3Ln0ygL+JHyj63sfRXTvz4skes= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:44 2025 by rpki-client