$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f483269-85d4-36e3-be07-b933a8eaae9b.roa File: 0f483269-85d4-36e3-be07-b933a8eaae9b.roa (raw, json) Hash identifier: GPg0sbyo0oecr4YLl980Wpj+R+6GuKq9KAEezCGq/nU= Subject key identifier: DD:CE:CE:DF:8D:F9:CE:6B:A9:AF:5D:35:A1:11:8E:B4:3F:1F:95:9C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFE14807F5AC0C18C8800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f483269-85d4-36e3-be07-b933a8eaae9b.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 130.137.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fe:14:80:7f:5a:c0:c1:8c:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=55fedca2-1d34-488e-8be5-b6a1e0044e64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:07:95:4a:b8:d1:da:98:d0:dc:03:3a:7e:8a: f8:51:1c:f6:af:ba:4f:4f:71:e7:e5:d9:18:a5:bf: c4:d0:27:70:84:11:8a:43:12:3a:73:6c:65:52:70: c4:63:38:56:dc:e3:80:fb:96:84:ed:c5:92:ca:8b: 70:58:46:c2:18:b4:30:7b:f5:1e:bb:9a:53:aa:21: a6:3f:b5:a2:a4:5f:7f:38:dc:25:53:30:5b:19:0a: 6b:46:ba:b9:3b:21:c4:6b:e6:ad:16:4b:a2:df:1c: b3:a5:f5:00:42:b5:5b:d1:eb:d8:c3:76:38:81:ef: 9f:89:fa:81:dc:23:a6:bc:35:1a:f2:70:45:50:da: 3c:bf:db:66:bf:fb:d2:10:d8:b6:88:43:4b:07:4e: 7b:bb:f4:20:1a:80:a7:1f:15:20:2b:8d:d4:10:83: 2a:3f:18:0d:79:be:a7:88:52:b5:71:c0:e2:6d:e3: 76:10:17:77:44:22:71:08:b1:92:42:28:68:78:9f: 22:23:2c:d6:6d:ae:0f:0e:d8:97:8b:5c:f7:2e:8c: 94:bc:81:35:dc:2b:a7:17:71:b1:eb:e8:9e:fe:77: 4b:86:3c:63:f4:2c:c7:ab:da:e0:11:8e:d0:5b:bd: 11:fe:56:b0:d6:4d:ab:05:01:6d:48:6a:c1:03:80: 57:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:CE:CE:DF:8D:F9:CE:6B:A9:AF:5D:35:A1:11:8E:B4:3F:1F:95:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f483269-85d4-36e3-be07-b933a8eaae9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:c7:8c:12:90:af:e5:0d:81:4c:bd:bd:6d:a2:cd:08:f7:50: 3f:8c:cf:77:e3:14:48:bf:f5:bb:cb:97:69:1c:5c:bc:2d:6f: 9b:75:cc:af:6a:66:fd:45:6f:aa:83:5e:c4:ae:9e:c1:84:e6: b6:17:45:5f:0b:18:40:d3:73:0e:d6:e1:71:7f:d7:89:69:f4: de:b8:72:e3:45:27:2e:53:c3:40:55:67:fa:09:1d:30:f6:b6: 1e:5d:d9:29:6c:a4:c8:85:6f:37:5c:d3:54:8b:ce:30:0f:3c: af:3a:56:40:8d:26:de:30:3f:c2:b5:11:58:42:3d:79:67:b3: 22:49:52:23:dc:60:8d:d9:5c:62:c9:ea:5f:9b:8b:24:a6:e0: 98:a1:39:4a:64:79:54:13:8c:7d:f0:79:fc:cf:36:c0:59:67: b2:7a:40:1f:96:4f:ed:c4:ba:a5:ff:eb:9f:b5:57:bf:c4:26: 6f:a6:df:c8:4e:23:3a:a8:33:b2:95:a8:3b:14:b4:7b:a9:80: b1:fb:86:2f:89:4f:99:a0:31:c3:3a:73:76:6e:f4:28:5e:f8: ce:bf:e1:7a:ef:94:42:88:65:56:6f:9e:6c:1f:cb:cf:66:1b: 8c:0f:55:40:f1:d4:c1:67:6c:88:c4:4b:b0:b1:d3:37:2a:0e: 40:c9:7a:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/4UgH9awMGMiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk NTVmZWRjYTItMWQzNC00ODhlLThiZTUtYjZhMWUwMDQ0ZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0geVSrjR2pjQ3AM6for4URz2r7pPT3Hn5dkY pb/E0CdwhBGKQxI6c2xlUnDEYzhW3OOA+5aE7cWSyotwWEbCGLQwe/Ueu5pTqiGm P7WipF9/ONwlUzBbGQprRrq5OyHEa+atFkui3xyzpfUAQrVb0evYw3Y4ge+fifqB 3COmvDUa8nBFUNo8v9tmv/vSENi2iENLB057u/QgGoCnHxUgK43UEIMqPxgNeb6n iFK1ccDibeN2EBd3RCJxCLGSQihoeJ8iIyzWba4PDtiXi1z3LoyUvIE13CunF3Gx 6+ie/ndLhjxj9CzHq9rgEY7QW70R/law1k2rBQFtSGrBA4BXMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3Ozt+N+c5rqa9dNaERjrQ/H5WcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGY0ODMyNjktODVkNC0z NmUzLWJlMDctYjkzM2E4ZWFhZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTHjBKQr+UNgUy9vW2izQj3UD+Mz3fjFEi/9bvLl2kcXLwtb5t1zK9q Zv1Fb6qDXsSunsGE5rYXRV8LGEDTcw7W4XF/14lp9N64cuNFJy5Tw0BVZ/oJHTD2 th5d2SlspMiFbzdc01SLzjAPPK86VkCNJt4wP8K1EVhCPXlnsyJJUiPcYI3ZXGLJ 6l+biySm4JihOUpkeVQTjH3wefzPNsBZZ7J6QB+WT+3EuqX/65+1V7/EJm+m38hO IzqoM7KVqDsUtHupgLH7hi+JT5mgMcM6c3Zu9Che+M6/4XrvlEKIZVZvnmwfy89m G4wPVUDx1MFnbIjES7Cx0zcqDkDJeqM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:53 2025 by rpki-client