$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa File: c653b90b-349b-3969-a8b1-e7d98267d38b.roa (raw, json) Hash identifier: pcKdF9+tLkafrzNu1YDPlm7V5OokknyOet3hL088GP4= Subject key identifier: F2:0B:BE:2F:D1:1A:7D:F5:E7:33:11:D8:6F:43:D3:24:3E:4D:1B:80 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D8EEBDBD15ED6EEBE680 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 14618 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d8:ee:bd:bd:15:ed:6e:eb:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=81ea2405-949b-4854-ac2b-843c3b2d99cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:8a:17:62:e9:6a:60:b7:f1:e5:55:2b:92:6f: 05:f3:61:e2:3c:eb:74:de:25:2f:bb:40:de:d6:a1: 9e:91:90:50:e0:c4:9b:50:b2:3d:90:a6:3c:c4:1c: 1e:0e:a2:ff:01:a8:67:56:b1:8b:bb:c0:89:d6:4a: 21:0e:b8:cf:85:d2:49:59:b9:75:aa:69:35:c3:70: 11:12:51:7b:2a:77:60:35:6f:73:dc:eb:27:6d:b1: 06:68:1d:b9:ec:aa:15:9a:16:94:47:54:fb:61:f6: 51:7f:6d:5c:b8:d1:28:87:c0:aa:7a:8a:4c:23:a5: 54:ad:a1:3c:1f:eb:91:a5:50:94:94:b6:5b:0d:9c: a8:bc:87:68:bb:38:99:41:fc:23:76:0f:c0:f9:5d: f7:a2:18:68:e3:d4:b3:d1:31:21:a1:2f:62:c7:f7: 48:da:c3:44:01:7c:9b:c3:fa:dd:b7:60:55:ff:80: da:89:b8:b6:f3:38:42:b9:60:20:9b:50:8b:d2:84: 1f:43:30:41:8e:56:a2:39:cc:06:3a:6f:59:6a:2c: 55:08:90:13:bf:87:76:4e:8d:8b:4b:c7:d8:fc:7b: 19:d3:b1:a8:c9:28:b9:96:2b:15:5d:28:bc:90:b3: 98:24:50:e1:94:9a:83:8d:0a:d5:41:11:62:84:5c: d1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:0B:BE:2F:D1:1A:7D:F5:E7:33:11:D8:6F:43:D3:24:3E:4D:1B:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:17:0c:95:df:c1:e0:12:22:7c:25:26:ab:6d:fe:17:96:f0: e2:21:1b:ba:d6:b1:9d:2e:d9:c5:3a:42:47:30:51:12:b9:96: d4:84:b0:b7:f2:5e:f0:64:1d:92:80:18:f1:dc:9f:c5:3a:d4: 48:4a:fb:4a:66:d9:7e:bc:b9:2a:86:06:b4:bb:08:0a:e4:6c: d3:49:9b:cd:6e:81:92:c1:18:0b:c4:d4:06:15:89:a5:40:6b: 9a:71:d2:98:7f:a6:00:48:b7:30:61:a0:ac:fb:b9:1c:42:ea: 66:05:48:f8:b5:2e:0b:18:8c:4c:47:b3:8c:76:13:19:6d:6c: d1:a9:84:53:13:a5:39:4c:35:8a:f6:fe:da:25:62:c3:71:11: 1f:ad:1a:a5:d1:01:8c:5a:e1:87:fc:85:03:10:99:e3:cc:03: ba:9b:91:be:53:e7:54:cf:14:6b:71:f6:6c:09:5b:95:84:8a: ec:5a:75:5b:4d:21:c2:04:df:77:60:bd:2a:85:80:3e:d2:1e: a7:cd:84:f1:61:32:2e:be:f4:0f:53:68:78:d9:db:a7:a2:d6: bd:43:80:3a:cd:29:12:3a:13:cb:bb:35:76:04:5b:db:89:69: 04:03:9a:69:9c:bb:ad:3c:8c:4f:38:47:c2:b3:6e:4f:04:78: 07:f1:0e:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3Vdjuvb0V7W7r5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk ODFlYTI0MDUtOTQ5Yi00ODU0LWFjMmItODQzYzNiMmQ5OWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2IoXYulqYLfx5VUrkm8F82HiPOt03iUvu0De 1qGekZBQ4MSbULI9kKY8xBweDqL/AahnVrGLu8CJ1kohDrjPhdJJWbl1qmk1w3AR ElF7KndgNW9z3OsnbbEGaB257KoVmhaUR1T7YfZRf21cuNEoh8CqeopMI6VUraE8 H+uRpVCUlLZbDZyovIdouziZQfwjdg/A+V33ohho49Sz0TEhoS9ix/dI2sNEAXyb w/rdt2BV/4Daibi28zhCuWAgm1CL0oQfQzBBjlaiOcwGOm9ZaixVCJATv4d2To2L S8fY/HsZ07GoySi5lisVXSi8kLOYJFDhlJqDjQrVQRFihFzRcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPILvi/RGn315zMR2G9D0yQ+TRuAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzY1M2I5MGItMzQ5Yi0z OTY5LWE4YjEtZTdkOTgyNjdkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8XDJXfweASInwlJqtt/heW8OIhG7rWsZ0u2cU6QkcwURK5ltSEsLfy XvBkHZKAGPHcn8U61EhK+0pm2X68uSqGBrS7CArkbNNJm81ugZLBGAvE1AYViaVA a5px0ph/pgBItzBhoKz7uRxC6mYFSPi1LgsYjExHs4x2ExltbNGphFMTpTlMNYr2 /tolYsNxER+tGqXRAYxa4Yf8hQMQmePMA7qbkb5T51TPFGtx9mwJW5WEiuxadVtN IcIE33dgvSqFgD7SHqfNhPFhMi6+9A9TaHjZ26ei1r1DgDrNKRI6E8u7NXYEW9uJ aQQDmmmcu608jE84R8Kzbk8EeAfxDvo= -----END CERTIFICATE-----Generated at Fri Mar 14 08:44:43 2025 by rpki-client