$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa File: c653b90b-349b-3969-a8b1-e7d98267d38b.roa (raw, json) Hash identifier: KcJfML+MS2rsKkoTuIhUi6vLj1GY/L+xFxk3nBKRt5Q= Subject key identifier: CD:6E:EF:B5:CD:C5:58:13:62:AC:83:30:D9:01:BB:41:8F:F9:19:53 Certificate issuer: /CN=e98db606-926a-43a7-aa62-47481a8d81d0 Certificate serial: 010D0C9F4328584957F3FF78F74E3CF322D75440 Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa Signing time: Sat 29 Mar 2025 01:00:39 +0000 ROA not before: Sat 29 Mar 2025 01:00:39 +0000 ROA not after: Fri 27 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 129.33.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:57:f3:ff:78:f7:4e:3c:f3:22:d7:54:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0 Validity Not Before: Mar 29 01:00:39 2025 GMT Not After : Jun 27 01:00:39 2025 GMT Subject: CN=1aa1b794-3bf8-4269-8124-d0d90fd65a5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6d:9f:78:d4:35:53:fa:b1:71:a2:1b:5a:ae: d0:2c:15:56:e6:f9:15:6a:69:fb:01:51:2a:26:ec: c0:57:88:80:fb:b9:22:81:80:1c:20:7b:28:e9:b5: 50:cc:6c:46:11:f6:b5:4b:ae:22:e7:1f:ff:3f:fe: 9f:95:c5:c3:4b:e4:b9:1d:36:1c:bc:20:5e:56:59: 04:a6:ba:3a:e9:a0:9d:6a:73:4f:ad:4f:c2:68:cf: 26:9e:5d:ec:47:55:20:dd:2e:8f:b2:20:86:32:50: b9:54:5f:bd:36:10:16:d6:63:8b:96:49:fb:98:27: 68:65:b2:35:54:65:a9:17:d2:fe:da:58:72:c2:69: f1:df:60:4a:1c:23:19:8b:91:9d:4b:53:95:ef:ba: a0:93:2c:de:ee:3b:68:2f:b7:d5:29:37:89:01:88: a2:d0:d9:94:d8:61:7d:73:53:88:0a:81:9d:48:54: 34:ce:5b:70:e0:24:6c:04:71:0c:f1:14:05:e9:d2: 61:50:43:d2:54:97:94:96:0f:ab:2b:34:47:13:0b: 05:3d:dc:cd:ac:61:cd:64:a5:5f:08:24:49:0c:f8: 89:18:80:8b:c1:9d:a4:73:b1:58:52:44:4f:c9:3d: ab:18:30:4b:03:e8:84:66:dd:ff:09:29:a1:6f:47: 57:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:6E:EF:B5:CD:C5:58:13:62:AC:83:30:D9:01:BB:41:8F:F9:19:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/c653b90b-349b-3969-a8b1-e7d98267d38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl X509v3 Authority Key Identifier: keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer sbgp-ipAddrBlock: critical IPv4: 129.33.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:83:9f:77:0c:41:a6:4c:46:eb:1a:91:40:50:51:4e:c4:35: c6:10:4c:60:70:0c:d5:9c:29:ce:03:cf:b6:79:97:e3:cd:d4: 69:7b:01:d8:78:cb:49:2f:7c:fe:36:af:82:bb:69:50:af:62: d7:e6:5a:b3:2d:a6:6e:90:13:75:09:1d:fe:3c:cc:ef:25:61: fc:0e:52:7c:2e:47:0b:52:0e:21:0d:3b:0f:aa:3d:ce:c6:f3: 13:46:1e:64:af:40:8e:63:84:c9:79:21:76:b3:3a:7a:42:1b: 1f:41:c0:cf:f3:28:43:81:a7:a3:39:0e:27:3d:e2:05:03:b2: 45:d2:c4:18:92:a5:d6:4a:26:b4:98:9c:a5:2d:35:29:c6:d5: e1:db:72:2c:c5:65:2e:e1:e9:5e:42:9c:45:b6:93:37:ba:09: f7:1a:4d:e2:86:2d:10:0d:0a:60:1b:ad:82:1e:f0:3f:ab:30: ea:05:6c:bf:76:96:75:66:83:35:71:46:57:11:5f:f9:3c:23: a9:84:9b:55:ef:a6:0c:56:33:a0:d4:4e:63:9c:04:d9:fa:0f: 98:6b:85:b4:b8:49:fa:e8:99:e9:35:8a:8e:bb:5a:13:b6:4c: c7:35:88:c7:6d:e2:63:ff:38:d6:8e:84:e7:77:49:f9:67:c5: cc:cc:9d:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElX8/9490488yLXVEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4 MWQwMB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk MWFhMWI3OTQtM2JmOC00MjY5LTgxMjQtZDBkOTBmZDY1YTViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW2feNQ1U/qxcaIbWq7QLBVW5vkVamn7AVEq JuzAV4iA+7kigYAcIHso6bVQzGxGEfa1S64i5x//P/6flcXDS+S5HTYcvCBeVlkE pro66aCdanNPrU/CaM8mnl3sR1Ug3S6PsiCGMlC5VF+9NhAW1mOLlkn7mCdoZbI1 VGWpF9L+2lhywmnx32BKHCMZi5GdS1OV77qgkyze7jtoL7fVKTeJAYii0NmU2GF9 c1OICoGdSFQ0zltw4CRsBHEM8RQF6dJhUEPSVJeUlg+rKzRHEwsFPdzNrGHNZKVf CCRJDPiJGICLwZ2kc7FYUkRPyT2rGDBLA+iEZt3/CSmhb0dXmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM1u77XNxVgTYqyDMNkBu0GP+RlTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvYzY1M2I5MGItMzQ5Yi0z OTY5LWE4YjEtZTdkOTgyNjdkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4 MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgSHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEGDn3cMQaZMRusakUBQUU7ENcYQTGBwDNWcKc4Dz7Z5l+PN1Gl7Adh4 y0kvfP42r4K7aVCvYtfmWrMtpm6QE3UJHf48zO8lYfwOUnwuRwtSDiENOw+qPc7G 8xNGHmSvQI5jhMl5IXazOnpCGx9BwM/zKEOBp6M5Dic94gUDskXSxBiSpdZKJrSY nKUtNSnG1eHbcizFZS7h6V5CnEW2kze6CfcaTeKGLRANCmAbrYIe8D+rMOoFbL92 lnVmgzVxRlcRX/k8I6mEm1XvpgxWM6DUTmOcBNn6D5hrhbS4Sfromek1io67WhO2 TMc1iMdt4mP/ONaOhOd3SflnxczMnaw= -----END CERTIFICATE-----Generated at Sat Apr 26 13:15:48 2025 by rpki-client