$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa File: 0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa (raw, json) Hash identifier: tQO9wZP2HnbN5wFFbf/Wa+7ZPwEcmcGNvpa7ew+7ucE= Subject key identifier: 8A:44:B8:B3:33:A6:16:96:EB:48:21:C8:08:02:FE:95:41:B6:2A:B3 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F43285848EC969832D0F2AE0770C32B00 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 129.41.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:98:32:d0:f2:ae:07:70:c3:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=ce217549-8683-4b06-8f92-18dd00f3bbf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:f5:15:11:f7:f9:ce:3e:62:c7:0d:22:4e:eb: 65:c7:3c:a2:c9:93:c9:a2:8b:11:65:37:fe:e3:d3: 22:17:cc:6d:77:1b:7d:34:95:7c:3d:eb:cc:50:f7: 54:d8:e2:70:c1:9f:17:5e:d6:20:62:71:a0:ee:3e: 83:30:3a:4f:2e:f9:17:fd:6b:32:8a:84:87:b0:a8: 5d:32:1c:12:6e:8c:52:68:b5:dc:1b:32:87:a8:b2: aa:d9:b7:dd:80:de:8f:2c:6b:5a:ad:48:1e:c3:bb: 5c:91:0e:7f:52:3b:8a:ab:18:0a:c0:ee:fc:b2:14: c0:be:a1:40:cd:b8:89:52:8b:d0:86:93:6f:b0:a3: 07:54:66:1d:18:e6:78:12:25:dc:f8:9b:7d:d3:ef: 1f:27:89:53:38:50:74:06:27:b8:d0:2d:67:26:45: 4b:78:06:30:ea:82:bd:3d:f1:1b:08:b0:5b:e5:2c: d3:c1:98:7f:6c:b7:bc:ea:e8:d6:f4:8d:f4:6b:89: 7b:0a:c3:49:ed:0a:02:9e:6e:c2:22:1a:89:5e:64: 1e:3f:7f:d8:6d:ba:c9:4e:10:e5:a0:ea:b7:d1:d4: 4d:be:e7:26:12:20:15:fb:d1:aa:f8:4f:9c:ad:93: 8d:a0:9f:0d:2e:f6:6f:3c:07:8f:eb:91:eb:bf:1e: ce:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:44:B8:B3:33:A6:16:96:EB:48:21:C8:08:02:FE:95:41:B6:2A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/0578337a-fdcb-36c1-b6a6-64d7a5c2a944.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.41.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:6d:34:b6:66:51:69:ac:d2:51:fa:06:c7:30:55:c7:26:3a: 1e:e4:68:1e:0b:e0:38:e1:c4:30:68:a5:a3:2d:60:fa:48:00: b9:86:12:10:00:55:f0:59:d3:68:0c:6d:49:c2:ca:b4:7a:0a: 03:bd:b9:a8:30:32:b4:33:07:45:61:f8:b6:c0:e5:db:38:3e: cb:d0:be:88:fa:4a:e9:20:00:35:aa:54:95:3e:ad:d0:74:de: 8b:5d:c7:c4:0e:0d:cc:72:13:2c:53:3a:82:f5:6e:d9:48:d4: 4f:93:0a:08:a8:81:0f:53:cd:53:c1:96:a8:55:e3:40:80:c1: 8b:7c:2a:5b:bb:3b:a4:3c:58:fc:53:a6:93:e8:e6:64:ec:41: f8:95:2f:38:07:67:a3:25:00:25:51:bb:5e:9f:55:40:66:b3: 8c:fb:ac:83:38:dc:dc:02:18:39:e2:50:33:3a:0b:9f:cf:6e: 6f:59:fb:12:31:29:2d:a1:28:f7:f1:a7:13:a4:1c:a0:83:41: 6c:3d:6c:b4:75:99:f8:10:10:c7:3c:74:9b:ba:45:33:b9:9a: 6f:5a:e6:45:1c:73:45:e4:00:67:7a:aa:96:37:f2:aa:c4:17: f7:d7:7e:42:ec:77:80:92:d5:cd:1a:3b:be:3a:5f:90:e7:26: 1c:1f:0d:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpgy0PKuB3DDKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk Y2UyMTc1NDktODY4My00YjA2LThmOTItMThkZDAwZjNiYmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PUVEff5zj5ixw0iTutlxzyiyZPJoosRZTf+ 49MiF8xtdxt9NJV8PevMUPdU2OJwwZ8XXtYgYnGg7j6DMDpPLvkX/WsyioSHsKhd MhwSboxSaLXcGzKHqLKq2bfdgN6PLGtarUgew7tckQ5/UjuKqxgKwO78shTAvqFA zbiJUovQhpNvsKMHVGYdGOZ4EiXc+Jt90+8fJ4lTOFB0Bie40C1nJkVLeAYw6oK9 PfEbCLBb5SzTwZh/bLe86ujW9I30a4l7CsNJ7QoCnm7CIhqJXmQeP3/YbbrJThDl oOq30dRNvucmEiAV+9Gq+E+crZONoJ8NLvZvPAeP65Hrvx7OAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpEuLMzphaW60ghyAgC/pVBtiqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvMDU3ODMzN2EtZmRjYi0z NmMxLWI2YTYtNjRkN2E1YzJhOTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSmnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADltNLZmUWms0lH6BscwVccmOh7kaB4L4DjhxDBopaMtYPpIALmGEhAA VfBZ02gMbUnCyrR6CgO9uagwMrQzB0Vh+LbA5ds4PsvQvoj6SukgADWqVJU+rdB0 3otdx8QODcxyEyxTOoL1btlI1E+TCgiogQ9TzVPBlqhV40CAwYt8Klu7O6Q8WPxT ppPo5mTsQfiVLzgHZ6MlACVRu16fVUBms4z7rIM43NwCGDniUDM6C5/Pbm9Z+xIx KS2hKPfxpxOkHKCDQWw9bLR1mfgQEMc8dJu6RTO5mm9a5kUcc0XkAGd6qpY38qrE F/fXfkLsd4CS1c0aO746X5DnJhwfDQ8= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:43 2025 by rpki-client