$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa File: de7438ce-fca5-31f5-9f3b-71378f8444ba.roa (raw, json) Hash identifier: WlkhIttvr3S2wEBjfrEC0WXrDoMXIt6Aep6DJi21yAE= Subject key identifier: AB:C8:AE:D3:E8:2F:DC:2D:2D:95:FE:CC:EB:CC:FB:1C:6C:53:73:96 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F432858487755D361E2871948231FC600 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa Signing time: Tue 07 Jan 2025 14:00:53 +0000 ROA not before: Tue 07 Jan 2025 14:00:53 +0000 ROA not after: Mon 07 Apr 2025 13:00:53 +0000 asID: 19795 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:77:55:d3:61:e2:87:19:48:23:1f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Jan 7 14:00:53 2025 GMT Not After : Apr 7 13:00:53 2025 GMT Subject: CN=17fe2157-167f-491a-aa2c-ff15c8fc9dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:4a:6e:33:9a:2a:1f:bd:03:47:bd:6f:51: 61:4f:01:23:0c:d2:2e:d3:25:51:a9:af:18:e5:d3: 57:09:20:bf:c5:91:4a:6a:01:71:b6:08:12:dc:33: 06:fc:28:28:76:a0:9b:dc:22:85:c4:e8:e1:23:7a: 9d:5b:a0:ba:5f:c6:a2:05:bf:c1:6a:cb:87:49:01: 2d:9d:28:9b:45:7f:f6:ae:b0:1b:d6:ff:b5:00:41: 06:fd:de:07:be:9b:bf:0b:54:0a:43:33:2b:28:11: fa:51:f3:be:41:04:b7:f9:c8:46:26:d8:48:89:b9: bc:c5:ae:7c:aa:9c:c1:56:f7:a1:29:8b:4d:c3:82: 84:85:6c:93:94:bc:61:c1:f3:4c:22:eb:49:27:5d: 8f:da:da:d2:a0:a2:aa:4f:07:4e:98:d0:70:9d:a5: b3:e9:b1:ad:79:51:73:8d:88:17:1f:6e:1b:f2:96: 5c:bf:5c:0a:69:83:af:1a:1c:74:98:b2:ae:a5:39: 8a:49:51:00:04:ac:fc:8d:eb:74:12:6c:2b:07:d5: f1:6a:61:61:4c:a6:64:7c:f4:fc:21:32:44:64:86: 7c:e1:42:53:40:7a:2f:5d:00:d3:71:75:e3:b7:14: d2:24:34:33:a7:72:ff:7e:42:62:ff:65:bf:f5:d5: 97:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:C8:AE:D3:E8:2F:DC:2D:2D:95:FE:CC:EB:CC:FB:1C:6C:53:73:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:66:94:81:a0:9d:0c:42:66:3e:f1:46:9c:ea:2a:7a:d4:69: 67:db:aa:d7:9a:42:a4:6e:16:bf:a7:37:79:7e:db:d9:d0:8e: ab:1f:19:94:2a:f1:71:08:e9:b1:1e:ee:1d:d5:99:95:d7:9e: e2:5b:7b:39:ae:5f:5f:70:88:12:a3:2d:09:13:c8:1f:91:35: 73:11:ac:ba:35:77:30:82:0b:a1:49:66:2c:eb:eb:d1:bf:76: f6:9d:b7:1d:18:ef:dc:a6:5c:66:b3:91:47:6a:66:e3:92:2a: 96:e0:d5:d9:05:65:ff:3b:f7:49:86:d2:e8:50:d3:d3:7b:dc: ad:15:15:4e:5a:ba:ff:e8:92:42:59:ea:71:93:af:c4:f8:38: c9:3b:03:2b:6f:37:98:ba:6f:6e:6c:1c:e0:71:3f:0b:e4:94: 49:46:44:78:54:b0:25:c0:c3:21:e4:d3:ff:4d:fa:5c:a5:17: d0:07:83:6f:18:5c:db:9b:bb:02:ac:2a:bc:ec:c4:cb:8e:36: 1a:10:dc:3e:c8:e5:63:31:f2:8c:0f:13:13:d0:2f:51:90:86: 4d:91:0f:a2:a6:83:1f:ec:67:18:0a:8f:5c:7d:cd:4d:63:06: 7e:a2:d8:a4:38:c4:fa:9e:d2:0c:ad:49:d0:bd:4e:7a:8d:a2: 2d:d3:95:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh3VdNh4ocZSCMfxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDEwNzE0MDA1M1oXDTI1MDQwNzEzMDA1M1owLzEtMCsGA1UEAxMk MTdmZTIxNTctMTY3Zi00OTFhLWFhMmMtZmYxNWM4ZmM5ZGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynlKbjOaKh+9A0e9b1FhTwEjDNIu0yVRqa8Y 5dNXCSC/xZFKagFxtggS3DMG/CgodqCb3CKFxOjhI3qdW6C6X8aiBb/BasuHSQEt nSibRX/2rrAb1v+1AEEG/d4Hvpu/C1QKQzMrKBH6UfO+QQS3+chGJthIibm8xa58 qpzBVvehKYtNw4KEhWyTlLxhwfNMIutJJ12P2trSoKKqTwdOmNBwnaWz6bGteVFz jYgXH24b8pZcv1wKaYOvGhx0mLKupTmKSVEABKz8jet0EmwrB9XxamFhTKZkfPT8 ITJEZIZ84UJTQHovXQDTcXXjtxTSJDQzp3L/fkJi/2W/9dWXlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKvIrtPoL9wtLZX+zOvM+xxsU3OWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZGU3NDM4Y2UtZmNhNS0z MWY1LTlmM2ItNzEzNzhmODQ0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9mlIGgnQxCZj7xRpzqKnrUaWfbqteaQqRuFr+nN3l+29nQjqsfGZQq 8XEI6bEe7h3VmZXXnuJbezmuX19wiBKjLQkTyB+RNXMRrLo1dzCCC6FJZizr69G/ dvadtx0Y79ymXGazkUdqZuOSKpbg1dkFZf8790mG0uhQ09N73K0VFU5auv/okkJZ 6nGTr8T4OMk7AytvN5i6b25sHOBxPwvklElGRHhUsCXAwyHk0/9N+lylF9AHg28Y XNubuwKsKrzsxMuONhoQ3D7I5WMx8owPExPQL1GQhk2RD6Kmgx/sZxgKj1x9zU1j Bn6i2KQ4xPqe0gytSdC9TnqNoi3TldM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:10 2025 by rpki-client