$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0598a655-ee28-3801-b8f5-b772d0dae333.roa File: 0598a655-ee28-3801-b8f5-b772d0dae333.roa (raw, json) Hash identifier: Cdn1CoVjN+OVL33EsOXKHfxTmcwJl2D1wDaC8YKXFyY= Subject key identifier: DF:F0:85:0D:71:49:5B:65:90:3A:04:BC:5B:68:23:4F:87:40:DB:0A Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE22C7664C617B794B700 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0598a655-ee28-3801-b8f5-b772d0dae333.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e2:2c:76:64:c6:17:b7:94:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=06eb7ba5-4ec4-4093-a12d-9f1315fc747e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:10:a8:ac:16:41:f7:01:85:40:e7:6e:4c:f0: 01:78:b7:53:40:1c:a5:6c:cc:43:be:6e:f0:ff:cc: f4:51:0d:22:fb:c7:61:cd:9e:39:a1:1d:51:d3:ad: 85:81:ae:10:a8:e3:b7:d8:d0:4f:ab:ea:21:62:f3: 9d:01:52:6f:2f:1a:6b:53:11:43:47:5a:e3:fa:7d: c3:3f:c4:bb:80:f7:78:e2:7b:2a:7d:c0:cd:f4:4f: b9:af:55:e3:ec:7d:24:c8:c1:42:41:ad:90:32:b2: 96:e5:38:ae:fb:07:8d:14:fb:14:5b:2a:a9:84:7a: e8:3b:c5:d6:d3:4e:c0:b8:43:59:1c:7a:f3:17:3f: 5e:09:db:26:28:32:88:de:e1:2a:3f:10:26:e7:e6: aa:20:9b:3e:7d:d0:e5:65:8d:d3:3a:50:74:9d:b4: 3c:6f:59:d9:a4:b1:39:60:56:ba:c4:a0:cb:03:d9: 87:cd:1c:6e:8a:ea:0f:88:3f:85:95:f5:05:3c:fb: 63:ae:01:23:c5:6a:f1:9c:15:03:b3:23:54:a1:f4: c5:74:a0:67:6f:9c:ff:e0:03:83:56:8a:4a:44:d0: ad:a6:63:d3:eb:fa:6a:f7:3b:01:2e:cc:ec:42:04: e0:f1:af:a5:d3:a3:22:2e:da:4f:53:2b:6d:79:03: 98:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F0:85:0D:71:49:5B:65:90:3A:04:BC:5B:68:23:4F:87:40:DB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0598a655-ee28-3801-b8f5-b772d0dae333.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:39:e4:2d:7f:b1:8e:8b:88:ee:57:c4:b1:c3:88:60:31:25: 87:4f:a5:a9:dc:51:f9:a0:10:dc:bf:1f:6d:23:23:a2:a4:ed: 5e:a1:d7:24:a9:a3:e1:f8:a8:47:b4:63:42:2c:96:33:74:b5: 0b:03:b8:81:51:59:87:16:cd:99:a7:f0:af:00:13:db:91:ea: a6:1d:8b:74:dd:b0:8d:47:11:a0:f8:2d:fb:6a:9a:c4:68:52: ae:74:52:e7:5a:dd:cc:14:b6:b4:fe:cb:98:37:cf:3b:19:ef: c6:dc:fd:50:9e:cc:de:63:3c:98:b9:c7:d5:8e:a4:ba:98:8b: f4:ee:a3:2b:b9:a7:21:cc:f5:63:21:f8:8c:c6:20:13:42:17: d6:cf:70:55:28:c5:cd:71:9b:d1:2a:d4:cf:c2:ca:aa:f6:fc: 79:97:f0:cd:e3:89:d6:46:c1:aa:02:f8:b5:95:c1:d1:b7:b9: 9c:f3:6a:63:a2:b6:cd:4d:59:89:3b:b3:4c:84:8d:26:80:74: 48:38:23:14:b8:c0:d4:f4:74:de:0f:c8:18:40:12:c0:02:44: b2:e7:fe:03:16:f4:92:64:25:cb:e4:90:ee:00:d8:40:6a:a1: ac:0e:0e:35:cd:a2:6c:2f:e7:39:f1:19:53:78:b6:5a:d7:51: 1e:77:3c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuIsdmTGF7eUtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk MDZlYjdiYTUtNGVjNC00MDkzLWExMmQtOWYxMzE1ZmM3NDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBCorBZB9wGFQOduTPABeLdTQBylbMxDvm7w /8z0UQ0i+8dhzZ45oR1R062Fga4QqOO32NBPq+ohYvOdAVJvLxprUxFDR1rj+n3D P8S7gPd44nsqfcDN9E+5r1Xj7H0kyMFCQa2QMrKW5Tiu+weNFPsUWyqphHroO8XW 007AuENZHHrzFz9eCdsmKDKI3uEqPxAm5+aqIJs+fdDlZY3TOlB0nbQ8b1nZpLE5 YFa6xKDLA9mHzRxuiuoPiD+FlfUFPPtjrgEjxWrxnBUDsyNUofTFdKBnb5z/4AOD VopKRNCtpmPT6/pq9zsBLszsQgTg8a+l06MiLtpPUytteQOY2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/whQ1xSVtlkDoEvFtoI0+HQNsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMDU5OGE2NTUtZWUyOC0z ODAxLWI4ZjUtYjc3MmQwZGFlMzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc55C1/sY6LiO5XxLHDiGAxJYdPpancUfmgENy/H20jI6Kk7V6h1ySp o+H4qEe0Y0IsljN0tQsDuIFRWYcWzZmn8K8AE9uR6qYdi3TdsI1HEaD4LftqmsRo Uq50Uuda3cwUtrT+y5g3zzsZ78bc/VCezN5jPJi5x9WOpLqYi/Tuoyu5pyHM9WMh +IzGIBNCF9bPcFUoxc1xm9Eq1M/Cyqr2/HmX8M3jidZGwaoC+LWVwdG3uZzzamOi ts1NWYk7s0yEjSaAdEg4IxS4wNT0dN4PyBhAEsACRLLn/gMW9JJkJcvkkO4A2EBq oawODjXNomwv5znxGVN4tlrXUR53PMM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:52:44 2025 by rpki-client