$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa File: 9a04c360-2582-30c3-8634-70c1a0fd710d.roa (raw, json) Hash identifier: vyoY8kPj6Y2QPficcC10eHkpVwlUDPHdXqgze4v50Uo= Subject key identifier: 09:0A:89:35:2F:FF:B4:D5:07:93:00:CB:50:73:1F:D9:FA:F4:60:C6 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC968D7B3CC714F7673974A0 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 129.41.88.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:8d:7b:3c:c7:14:f7:67:39:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=1710eff3-94ac-4e31-a2e0-ca07ac491d3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:80:1c:5a:e9:e3:e2:8d:d6:91:10:dd:38: b5:47:99:3c:35:95:f7:c7:59:60:04:b9:fb:bf:6b: 62:15:c0:3d:bb:74:4d:c7:85:74:b2:1b:3d:26:3c: 33:8e:36:09:68:24:c2:b4:d0:15:de:fb:93:d0:14: 4e:a8:e8:d7:b2:b4:d4:d9:27:eb:ed:a5:c1:8a:a6: 00:0b:12:47:17:c1:9c:b6:6b:49:f2:9c:8f:72:bf: a2:8d:56:6d:46:c4:92:34:84:4b:6e:13:c4:9c:c3: e7:89:cc:d9:65:5f:91:10:04:da:27:5d:40:c0:f2: 9e:d0:70:24:c8:77:58:7d:99:80:28:be:87:6c:ea: 35:43:35:55:0f:df:b1:34:1e:1e:25:ad:53:fb:07: fb:57:22:51:55:1f:ae:4f:31:07:21:e1:72:0a:a0: 50:e9:d3:0c:fe:f2:d0:93:8f:09:0f:24:0d:88:fc: 03:4b:d7:c7:8a:27:ee:4a:b2:18:d2:12:fe:56:59: 0a:ee:00:b7:5b:56:a9:18:d3:76:6b:a2:2b:82:51: 4d:a2:c4:5f:82:47:c1:e2:80:44:5f:74:e4:81:5f: be:ca:ad:0b:a3:5b:b8:d4:68:38:70:a5:5f:6a:c8: bf:b5:ee:50:a3:89:63:f6:12:56:fb:d4:89:4f:76: 8b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:0A:89:35:2F:FF:B4:D5:07:93:00:CB:50:73:1F:D9:FA:F4:60:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/9a04c360-2582-30c3-8634-70c1a0fd710d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.88.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:09:1b:b6:67:8e:85:a6:65:d6:17:38:aa:82:c3:69:ab:e8: 4c:ba:1f:99:8a:e2:92:b3:10:df:2d:34:a7:ec:ca:e0:48:20: 6d:d7:28:65:3b:00:f3:7d:e5:d9:49:26:67:88:f8:a7:27:a4: da:97:19:09:2f:c3:43:cf:86:49:c1:7b:1a:75:8c:b4:90:f8: 0a:7f:01:11:fe:0c:23:a9:29:2e:2a:05:ef:bf:54:2f:0d:4a: f9:b4:7e:ad:c8:af:13:09:34:2f:9e:5c:59:af:e8:ce:2e:7e: 81:1b:09:fb:14:7e:ba:3b:6c:cf:90:61:ac:6b:0e:b7:4e:5f: d9:35:fe:14:61:8b:20:1b:76:5b:23:63:4e:02:ac:b6:2e:24: da:23:cc:0c:fd:d6:ee:9a:a2:3d:60:06:3d:97:76:07:50:5b: be:64:df:ce:6f:83:45:68:78:0c:95:3d:1c:2c:3d:a8:d5:b3: 7e:57:67:4b:ff:d2:80:ac:67:8f:cb:4e:cb:1e:33:1d:3d:e8: 33:06:a2:d1:0d:fd:33:06:d7:24:d9:07:72:7d:fa:ef:90:db: 48:82:da:c1:44:1f:19:c9:08:c6:da:f3:6c:a7:1b:b8:b1:13: f4:86:52:2c:53:9e:cd:04:0b:3f:52:86:e0:d3:87:c1:83:c6: 00:13:2e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslo17PMcU92c5dKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk MTcxMGVmZjMtOTRhYy00ZTMxLWEyZTAtY2EwN2FjNDkxZDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXqAHFrp4+KN1pEQ3Ti1R5k8NZX3x1lgBLn7 v2tiFcA9u3RNx4V0shs9JjwzjjYJaCTCtNAV3vuT0BROqOjXsrTU2Sfr7aXBiqYA CxJHF8GctmtJ8pyPcr+ijVZtRsSSNIRLbhPEnMPniczZZV+REATaJ11AwPKe0HAk yHdYfZmAKL6HbOo1QzVVD9+xNB4eJa1T+wf7VyJRVR+uTzEHIeFyCqBQ6dMM/vLQ k48JDyQNiPwDS9fHiifuSrIY0hL+VlkK7gC3W1apGNN2a6IrglFNosRfgkfB4oBE X3TkgV++yq0Lo1u41Gg4cKVfasi/te5Qo4lj9hJW+9SJT3aLbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAkKiTUv/7TVB5MAy1BzH9n69GDGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvOWEwNGMzNjAtMjU4Mi0z MGMzLTg2MzQtNzBjMWEwZmQ3MTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgSlYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUJG7ZnjoWmZdYXOKqCw2mr6Ey6H5mK4pKzEN8tNKfsyuBIIG3XKGU7 APN95dlJJmeI+KcnpNqXGQkvw0PPhknBexp1jLSQ+Ap/ARH+DCOpKS4qBe+/VC8N Svm0fq3IrxMJNC+eXFmv6M4ufoEbCfsUfro7bM+QYaxrDrdOX9k1/hRhiyAbdlsj Y04CrLYuJNojzAz91u6aoj1gBj2XdgdQW75k385vg0VoeAyVPRwsPajVs35XZ0v/ 0oCsZ4/LTsseMx096DMGotEN/TMG1yTZB3J9+u+Q20iC2sFEHxnJCMba82ynG7ix E/SGUixTns0ECz9ShuDTh8GDxgATLjg= -----END CERTIFICATE-----Generated at Mon May 5 18:14:04 2025 by rpki-client