$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa File: c9dd7a45-36e9-37a5-9068-6420d65d9719.roa (raw, json) Hash identifier: SIoAgoetYfdB5rZLAvkRbfK2Jwc4mZwHaQcPdMpTvuw= Subject key identifier: 22:4B:2B:2C:0F:B0:FE:79:52:11:88:F7:D7:56:C4:09:30:FC:68:57 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858480BDA6AF8DBAC81D78498CB00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa Signing time: Sat 30 Nov 2024 02:00:39 +0000 ROA not before: Sat 30 Nov 2024 02:00:39 +0000 ROA not after: Fri 28 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 129.33.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:0b:da:6a:f8:db:ac:81:d7:84:98:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Nov 30 02:00:39 2024 GMT Not After : Feb 28 02:00:39 2025 GMT Subject: CN=06afa1fc-0a2e-4e9d-ae0d-11daabc26807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:07:f1:98:f8:68:68:0f:b8:6a:10:15:9a:f8: 4d:03:c9:04:f4:f9:6c:13:7a:b0:7e:74:95:04:cd: 94:97:78:8d:eb:0f:71:63:43:8d:96:57:5f:01:a0: fe:11:11:d8:c5:7f:63:39:df:b8:e9:4c:db:33:c5: 2c:74:8a:df:9c:f0:25:70:6e:29:45:a0:5e:98:a7: c9:6e:75:76:6a:00:21:d6:e9:81:11:97:26:c5:3c: d4:c4:a9:9f:3f:db:88:12:0f:57:0a:ea:14:c2:93: d9:45:ea:98:ac:dc:95:d5:eb:a2:ca:12:be:d3:84: f8:f5:4a:18:fc:2b:73:8e:1e:2c:f9:e6:94:2e:6a: d3:a1:96:5c:02:79:c1:6f:b9:bd:f0:25:43:a4:f6: 05:86:43:85:a4:92:a3:4c:12:49:fa:6e:2c:18:1d: 28:34:20:d5:eb:99:a5:7b:f3:bd:81:10:b6:a8:f8: 32:ce:bc:61:d9:a8:4a:a9:33:37:f7:07:46:15:61: f1:13:4e:eb:65:44:ae:78:27:e6:83:6a:18:f9:c2: 87:1f:d2:b9:34:f9:db:a6:59:36:60:47:ee:7d:46: 61:91:8a:f2:5c:4c:e0:2c:6e:bd:f0:64:4c:d8:50: 56:c1:3e:c9:80:6a:4d:a8:db:dd:2c:b0:c5:66:1e: 1f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4B:2B:2C:0F:B0:FE:79:52:11:88:F7:D7:56:C4:09:30:FC:68:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c9dd7a45-36e9-37a5-9068-6420d65d9719.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:67:6f:51:43:f7:5c:5a:6e:23:5b:1f:6c:5f:a4:0f:5f:29: 1e:f4:cc:ae:a3:eb:e2:c5:34:94:2b:ab:06:8a:3b:00:a1:d3: a4:96:e6:ee:5c:51:45:b8:43:e4:8c:c2:99:b0:f7:6e:83:41: 91:7e:e3:01:6b:53:5e:95:eb:6b:8d:e9:d8:cd:e9:69:b4:bf: fa:2c:7c:ee:b5:7b:6d:0d:2b:b7:79:8a:c9:06:d3:09:5d:05: 58:f6:68:c2:ea:5c:84:4f:6c:c0:de:e4:17:d2:ef:c9:d8:58: 03:f7:b4:7e:51:01:be:58:0f:42:7d:96:4a:c5:4a:75:2f:a4: fb:87:de:29:c3:04:50:6c:eb:0a:1e:1f:88:6f:70:1c:37:bc: ec:ad:47:52:c3:81:7f:82:7e:64:4c:cb:a4:3b:86:e5:41:bf: 46:96:2a:3f:1c:11:3b:50:96:ae:c4:49:8d:23:2a:9a:42:d7: c1:6f:4c:f0:93:e6:ff:43:ee:b3:e3:6c:91:db:22:52:56:cd: 7b:ed:1a:a3:ff:0f:31:97:9d:52:24:6c:3f:6f:dc:f3:6a:87: d7:96:46:06:ca:9e:8b:14:16:7f:9a:47:18:b9:83:9a:c4:b2: 41:ec:1f:78:33:8f:4f:e8:5a:1b:29:ab:ee:6a:fe:4b:cd:c8: 41:37:75:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgL2mr426yB14SYywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI0MTEzMDAyMDAzOVoXDTI1MDIyODAyMDAzOVowLzEtMCsGA1UEAxMk MDZhZmExZmMtMGEyZS00ZTlkLWFlMGQtMTFkYWFiYzI2ODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngfxmPhoaA+4ahAVmvhNA8kE9PlsE3qwfnSV BM2Ul3iN6w9xY0ONlldfAaD+ERHYxX9jOd+46UzbM8UsdIrfnPAlcG4pRaBemKfJ bnV2agAh1umBEZcmxTzUxKmfP9uIEg9XCuoUwpPZReqYrNyV1euiyhK+04T49UoY /Ctzjh4s+eaULmrToZZcAnnBb7m98CVDpPYFhkOFpJKjTBJJ+m4sGB0oNCDV65ml e/O9gRC2qPgyzrxh2ahKqTM39wdGFWHxE07rZUSueCfmg2oY+cKHH9K5NPnbplk2 YEfufUZhkYryXEzgLG698GRM2FBWwT7JgGpNqNvdLLDFZh4fxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJLKywPsP55UhGI99dWxAkw/GhXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzlkZDdhNDUtMzZlOS0z N2E1LTkwNjgtNjQyMGQ2NWQ5NzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtnb1FD91xabiNbH2xfpA9fKR70zK6j6+LFNJQrqwaKOwCh06SW5u5c UUW4Q+SMwpmw926DQZF+4wFrU16V62uN6djN6Wm0v/osfO61e20NK7d5iskG0wld BVj2aMLqXIRPbMDe5BfS78nYWAP3tH5RAb5YD0J9lkrFSnUvpPuH3inDBFBs6woe H4hvcBw3vOytR1LDgX+CfmRMy6Q7huVBv0aWKj8cETtQlq7ESY0jKppC18FvTPCT 5v9D7rPjbJHbIlJWzXvtGqP/DzGXnVIkbD9v3PNqh9eWRgbKnosUFn+aRxi5g5rE skHsH3gzj0/oWhspq+5q/kvNyEE3dQo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:00 2025 by rpki-client