$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa File: de7438ce-fca5-31f5-9f3b-71378f8444ba.roa (raw, json) Hash identifier: Jva10YunyX2QqQnjLFjea/qp2SCeqtnE7Jf+Ivk1P5U= Subject key identifier: 25:CD:FD:C1:6F:78:D2:9C:F6:18:96:F8:2C:14:5F:FA:EB:63:2F:79 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FA3776073405A6895FBC Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 19795 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:fa:37:76:07:34:05:a6:89:5f:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=223f5412-11db-46d8-9c4c-f8d0e644f10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:e4:38:57:a8:37:50:0d:24:bd:69:da:df: 61:01:c2:f7:40:ae:f3:b9:5f:dc:96:7f:f6:f9:9c: b2:a9:4d:89:1d:cb:39:80:8a:f7:27:7d:ba:5f:23: 4d:10:bd:ff:20:ef:20:df:8e:3b:47:d7:91:a4:97: 5b:24:b2:0b:d8:df:b4:cc:54:15:a4:60:cc:64:40: 06:71:32:f2:67:b3:d6:f4:6c:22:46:9a:fa:1e:36: 9b:74:28:51:04:97:d7:98:ff:00:b6:d0:c1:13:52: 4e:cf:61:e8:aa:61:ba:96:70:e1:cf:8a:61:d7:7a: 60:9a:34:b6:83:76:a1:ae:1c:c8:80:61:58:21:a5: 9d:55:c0:73:eb:96:a9:32:0c:12:5c:7e:f9:da:ca: c7:5d:f2:61:9b:ac:88:9c:2f:11:da:ef:84:73:a7: 14:06:06:58:9a:97:9b:ef:4e:97:4f:fe:c1:ec:52: 0d:a0:06:44:67:ff:f6:59:ab:ff:1a:3f:42:be:9a: 9e:38:22:95:5d:86:39:b8:87:2b:11:f5:ee:e3:31: 77:6c:95:de:77:12:a7:00:62:91:68:4f:b2:a5:92: 4a:b4:c5:36:6c:a3:70:bd:18:b8:44:16:c9:bc:bb: 28:d9:2b:01:ba:41:20:23:41:d7:9f:61:d7:81:50: 95:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CD:FD:C1:6F:78:D2:9C:F6:18:96:F8:2C:14:5F:FA:EB:63:2F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/de7438ce-fca5-31f5-9f3b-71378f8444ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:a6:dc:6d:4f:9f:49:a0:09:59:9f:9b:99:e0:6e:ad:62:c1: 73:c2:c0:79:f5:66:a5:ed:f2:c0:f2:6f:8d:9a:9e:8e:0f:74: c9:6e:9b:5b:32:9e:b7:91:b1:60:63:04:cc:6d:fe:b6:44:0e: 8f:22:e5:e3:51:ae:64:af:70:2e:fd:76:5a:35:17:0a:17:e2: d9:3f:3a:2c:6b:71:93:a2:bc:35:8c:4c:2c:10:0f:fd:74:c9: 9b:de:89:93:9f:95:3a:e5:ff:28:20:4a:2d:1a:f4:14:09:72: 9b:30:97:6f:7e:f5:fe:a1:dd:89:91:24:73:f2:52:27:d2:fe: 4f:50:7c:f1:4f:a4:37:c0:0c:c5:e8:b9:cf:10:06:ba:ba:ac: b9:0c:6b:54:6c:9b:b4:2a:e0:1e:89:f5:22:a1:c2:cf:bc:a6: fb:0b:e7:4f:c8:4c:86:c6:56:b6:6a:c3:1d:c3:d2:b8:58:95: b8:b0:c5:03:2c:51:5c:b8:85:d5:5c:0e:d1:ca:7a:da:b3:93: 22:d7:a9:8a:17:1c:84:bc:6d:bb:18:45:30:00:4f:8e:2b:1f: d4:3c:29:99:6b:5f:25:00:68:f2:c6:a1:d3:c4:89:3c:cc:13: 10:94:d6:ee:d0:40:41:8d:a9:a0:e8:a2:ad:35:2c:61:bc:6d: 07:d7:e3:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/o3dgc0BaaJX7wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MjIzZjU0MTItMTFkYi00NmQ4LTljNGMtZjhkMGU2NDRmMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6rkOFeoN1ANJL1p2t9hAcL3QK7zuV/cln/2 +ZyyqU2JHcs5gIr3J326XyNNEL3/IO8g3447R9eRpJdbJLIL2N+0zFQVpGDMZEAG cTLyZ7PW9GwiRpr6HjabdChRBJfXmP8AttDBE1JOz2HoqmG6lnDhz4ph13pgmjS2 g3ahrhzIgGFYIaWdVcBz65apMgwSXH752srHXfJhm6yInC8R2u+Ec6cUBgZYmpeb 706XT/7B7FINoAZEZ//2Wav/Gj9CvpqeOCKVXYY5uIcrEfXu4zF3bJXedxKnAGKR aE+ypZJKtMU2bKNwvRi4RBbJvLso2SsBukEgI0HXn2HXgVCVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCXN/cFveNKc9hiW+CwUX/rrYy95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZGU3NDM4Y2UtZmNhNS0z MWY1LTlmM2ItNzEzNzhmODQ0NGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEym3G1Pn0mgCVmfm5ngbq1iwXPCwHn1ZqXt8sDyb42ano4PdMlum1sy nreRsWBjBMxt/rZEDo8i5eNRrmSvcC79dlo1FwoX4tk/OixrcZOivDWMTCwQD/10 yZveiZOflTrl/yggSi0a9BQJcpswl29+9f6h3YmRJHPyUifS/k9QfPFPpDfADMXo uc8QBrq6rLkMa1Rsm7Qq4B6J9SKhws+8pvsL50/ITIbGVrZqwx3D0rhYlbiwxQMs UVy4hdVcDtHKetqzkyLXqYoXHIS8bbsYRTAAT44rH9Q8KZlrXyUAaPLGodPEiTzM ExCU1u7QQEGNqaDooq01LGG8bQfX400= -----END CERTIFICATE-----Generated at Sun Apr 13 03:00:20 2025 by rpki-client