$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa File: 1c6d454f-eff3-36c5-a242-1155de42889c.roa (raw, json) Hash identifier: pgG80nA+v9zHqZgPkpmQx2aAk9M2jXVi9YsLnYfYti4= Subject key identifier: A6:01:5E:89:A2:D8:7C:90:3C:42:BA:D0:50:9E:F6:0E:7E:42:6E:97 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC96982541030105D9562410 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 129.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:98:25:41:03:01:05:d9:56:24:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=c65eee78-dbe9-496d-b341-900f7536335f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:4f:82:46:cd:d3:f2:a7:9b:34:43:1d:57: 6c:06:98:a1:b3:1f:ee:23:f3:3d:d9:27:0a:77:d7: 39:34:e7:c9:fc:8e:6b:bd:30:b2:42:a8:c8:28:b1: 6d:43:f5:e9:47:62:15:c1:f3:42:d8:b0:98:06:27: 37:3e:f1:0f:a5:66:38:f7:49:81:1f:6e:cd:18:0f: 90:ed:98:38:5f:e1:55:e2:7a:5b:5f:f9:74:cc:e0: 53:2f:dc:d5:07:6d:69:56:a6:5a:3a:b2:0f:85:bd: 15:e2:79:9f:10:b3:37:b1:99:3d:0f:0c:69:fb:a1: 4f:28:97:64:6c:1d:31:f3:1e:6a:97:f6:d0:49:84: 6c:5d:32:59:70:b8:8f:ea:c6:83:c0:22:54:b6:95: 07:23:c6:ff:89:05:04:c6:14:e9:6f:12:fe:25:ea: 07:bf:af:21:05:0f:d6:ba:fc:d7:b2:5f:ba:41:44: f0:45:c4:9a:ab:ce:c5:06:ef:e8:f1:fa:a3:db:96: ad:64:8e:40:0b:5a:3c:0f:7e:11:ac:95:02:b3:00: 96:78:73:a4:66:9d:0f:0d:ae:c8:e0:ae:da:5d:33: 45:95:8d:73:90:81:66:af:67:2b:0e:84:59:64:60: 4c:25:89:d5:68:45:e4:26:b7:d2:a4:ab:bf:dd:61: fa:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:01:5E:89:A2:D8:7C:90:3C:42:BA:D0:50:9E:F6:0E:7E:42:6E:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/1c6d454f-eff3-36c5-a242-1155de42889c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:49:67:ca:68:52:c8:76:bf:01:ed:1a:33:61:c4:4d:83:6d: b8:51:96:49:fe:e7:54:37:c1:5a:ef:56:3b:7d:8f:ca:da:18: a0:40:3f:42:a1:50:9e:af:70:e7:4b:0e:a8:dc:5e:b0:74:22: 41:a1:f2:fd:93:88:be:38:e0:6f:d5:24:bd:12:bd:89:52:3f: 7b:ab:6e:81:ad:c6:b4:9a:27:64:4f:bd:4a:f7:e1:1b:89:da: e9:61:1a:ee:a1:68:f6:01:2b:5f:b8:a9:1b:49:27:49:b9:eb: 24:5c:b9:4b:0c:93:60:b4:83:02:f6:78:e4:66:ca:0f:81:73: a3:bb:f8:63:e0:3b:33:35:b9:61:72:11:94:32:04:39:5e:2b: 2e:4d:e3:5d:e0:4a:a6:eb:bf:f4:13:be:c8:1d:3d:56:8d:77: aa:8d:c8:58:52:9a:77:4c:fe:e0:48:50:60:97:1a:72:a7:ea: 5b:e7:a2:f6:83:d4:9f:b3:bb:df:d8:33:15:e6:62:5c:06:59: 86:31:de:78:0d:5c:ff:6a:15:80:05:4c:0e:68:93:4f:5d:72: 20:f9:e5:e3:61:40:ba:4b:39:66:15:6a:41:13:87:9d:d1:93: 7b:70:74:0a:3f:c4:4d:b9:68:12:d2:ab:df:96:3b:10:93:93: 7a:fe:19:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpglQQMBBdlWJBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk YzY1ZWVlNzgtZGJlOS00OTZkLWIzNDEtOTAwZjc1MzYzMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk55PgkbN0/KnmzRDHVdsBpihsx/uI/M92ScK d9c5NOfJ/I5rvTCyQqjIKLFtQ/XpR2IVwfNC2LCYBic3PvEPpWY490mBH27NGA+Q 7Zg4X+FV4npbX/l0zOBTL9zVB21pVqZaOrIPhb0V4nmfELM3sZk9Dwxp+6FPKJdk bB0x8x5ql/bQSYRsXTJZcLiP6saDwCJUtpUHI8b/iQUExhTpbxL+JeoHv68hBQ/W uvzXsl+6QUTwRcSaq87FBu/o8fqj25atZI5AC1o8D34RrJUCswCWeHOkZp0PDa7I 4K7aXTNFlY1zkIFmr2crDoRZZGBMJYnVaEXkJrfSpKu/3WH6vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYBXomi2HyQPEK60FCe9g5+Qm6XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMWM2ZDQ1NGYtZWZmMy0z NmM1LWEyNDItMTE1NWRlNDI4ODljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9JZ8poUsh2vwHtGjNhxE2DbbhRlkn+51Q3wVrvVjt9j8raGKBAP0Kh UJ6vcOdLDqjcXrB0IkGh8v2TiL444G/VJL0SvYlSP3urboGtxrSaJ2RPvUr34RuJ 2ulhGu6haPYBK1+4qRtJJ0m56yRcuUsMk2C0gwL2eORmyg+Bc6O7+GPgOzM1uWFy EZQyBDleKy5N413gSqbrv/QTvsgdPVaNd6qNyFhSmndM/uBIUGCXGnKn6lvnovaD 1J+zu9/YMxXmYlwGWYYx3ngNXP9qFYAFTA5ok09dciD55eNhQLpLOWYVakETh53R k3twdAo/xE25aBLSq9+WOxCTk3r+Gaw= -----END CERTIFICATE-----Generated at Mon May 5 09:19:00 2025 by rpki-client