$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa File: efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa (raw, json) Hash identifier: tZ/zqCj61h1CKNpElE+82Q0NcjAQDKSVe6vOEL0Wpco= Subject key identifier: 25:1F:0E:B0:24:E3:1A:6C:A7:C0:46:B5:68:F9:12:D8:39:3A:AA:9C Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968DB88123FD5AD1B7FBC0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 129.41.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8d:b8:81:23:fd:5a:d1:b7:fb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=0bf4a32d-b322-44a5-8e78-9c3820551eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:da:f2:4c:e2:b4:c7:9e:6f:44:bc:a1:7d:d3: 58:89:e4:5a:20:fc:e4:19:73:e0:36:2e:fb:fd:c6: 5b:ed:28:53:4b:23:32:7a:5e:77:3f:a0:51:43:78: 39:31:a2:29:08:fb:5e:c4:4e:24:89:f8:cd:96:ef: 06:4d:e9:90:1c:07:48:79:84:17:d9:6b:1b:dd:61: 56:1b:a9:b5:86:20:ef:6b:89:51:5d:f1:ee:61:48: e5:ba:35:c8:a5:df:4f:b2:cc:67:ff:42:ef:8e:fd: d3:bd:5b:2f:47:0e:e0:10:25:0b:86:6c:58:93:a9: 88:24:8a:e2:72:4e:42:21:85:ec:71:eb:8b:22:a2: 19:cf:50:12:53:a5:bf:9f:41:50:55:f1:df:fd:91: 67:08:c2:40:3e:d0:e0:b4:74:c5:2b:05:1b:00:43: d4:58:2f:cc:da:00:f8:c6:30:42:d7:a6:5f:1b:5e: 39:93:cf:24:73:52:94:e1:a9:25:bb:fd:e1:f3:9a: 8c:7e:7d:c4:4b:de:0f:45:de:29:a8:80:c6:1c:24: c0:19:c4:f5:1b:3c:21:42:fb:68:a0:54:d8:5b:45: 65:a6:6c:68:90:ad:01:21:3b:05:e9:4b:0b:f9:f9: 21:6e:aa:86:27:8b:46:5f:08:77:ae:e4:9c:bf:0c: bc:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:1F:0E:B0:24:E3:1A:6C:A7:C0:46:B5:68:F9:12:D8:39:3A:AA:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/efdaf484-41c7-3d50-b9ff-645dd7ba3c00.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:62:94:d4:5e:20:98:e9:ee:bf:7b:29:f8:50:b6:f3:6b:52: 98:63:21:65:c3:d8:e3:8e:a6:cd:76:75:75:99:c5:e0:d0:df: 7c:25:21:f4:33:37:1a:31:04:2a:04:71:dc:26:c5:9a:f2:25: 34:73:d3:a0:5f:22:3d:da:4f:09:23:4b:3d:85:0b:b2:dd:6c: 07:ed:46:8d:a1:8e:5e:57:74:2f:4e:a8:42:e9:13:36:3a:16: b4:2d:59:27:bb:24:2f:ac:ab:f5:2a:70:39:bf:db:5c:a0:35: 9d:ad:4c:4a:4b:e3:04:29:2a:3a:0e:86:4a:08:cd:94:93:01: 01:98:1f:6b:20:d0:23:b0:ce:75:b3:4a:20:88:69:44:d0:34: 4b:71:12:e1:21:1c:a2:83:c7:80:8a:21:a0:d8:57:1e:10:f9: 50:6a:87:17:90:73:32:59:78:e1:f0:2c:bd:89:c7:4f:5f:9a: 69:bc:08:20:2c:a4:1d:da:71:c6:2d:11:fc:a8:3b:24:eb:4b: ca:ac:b6:a9:ff:09:17:63:73:16:64:4a:ec:40:0d:42:03:60: 3d:87:fb:4e:f1:e2:c1:43:e5:ef:e6:e6:40:96:f1:fa:70:2d: 37:86:a2:9b:63:33:a9:14:24:41:b2:8f:9e:c0:02:ae:de:28: e7:06:5f:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo24gSP9WtG3+8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MGJmNGEzMmQtYjMyMi00NGE1LThlNzgtOWMzODIwNTUxZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudryTOK0x55vRLyhfdNYieRaIPzkGXPgNi77 /cZb7ShTSyMyel53P6BRQ3g5MaIpCPtexE4kifjNlu8GTemQHAdIeYQX2Wsb3WFW G6m1hiDva4lRXfHuYUjlujXIpd9Pssxn/0Lvjv3TvVsvRw7gECULhmxYk6mIJIri ck5CIYXsceuLIqIZz1ASU6W/n0FQVfHf/ZFnCMJAPtDgtHTFKwUbAEPUWC/M2gD4 xjBC16ZfG145k88kc1KU4aklu/3h85qMfn3ES94PRd4pqIDGHCTAGcT1GzwhQvto oFTYW0VlpmxokK0BITsF6UsL+fkhbqqGJ4tGXwh3ruScvwy8KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUfDrAk4xpsp8BGtWj5Etg5OqqcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvZWZkYWY0ODQtNDFjNy0z ZDUwLWI5ZmYtNjQ1ZGQ3YmEzYzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSneMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9ilNReIJjp7r97KfhQtvNrUphjIWXD2OOOps12dXWZxeDQ33wlIfQz NxoxBCoEcdwmxZryJTRz06BfIj3aTwkjSz2FC7LdbAftRo2hjl5XdC9OqELpEzY6 FrQtWSe7JC+sq/UqcDm/21ygNZ2tTEpL4wQpKjoOhkoIzZSTAQGYH2sg0COwznWz SiCIaUTQNEtxEuEhHKKDx4CKIaDYVx4Q+VBqhxeQczJZeOHwLL2Jx09fmmm8CCAs pB3accYtEfyoOyTrS8qstqn/CRdjcxZkSuxADUIDYD2H+07x4sFD5e/m5kCW8fpw LTeGoptjM6kUJEGyj57AAq7eKOcGX2c= -----END CERTIFICATE-----Generated at Fri Mar 14 10:32:01 2025 by rpki-client