$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa File: 1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json) Hash identifier: PLcyzcJbNosI3LUMijFS1qXEdtsstIjAsJQtM+PIQlY= Subject key identifier: 21:39:4D:1B:04:ED:BF:0F:05:09:A6:31:58:0B:0F:18:C5:BD:A2:C3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFA1502D8CB6D08149580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 8987 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fa:15:02:d8:cb:6d:08:14:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=11cd8b6e-3162-4338-8d74-8364eae5ebe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:f2:1f:d2:a9:04:2f:b0:63:da:c5:13:f1:01: 79:c5:6b:57:6e:97:a7:4f:71:f3:b7:d7:0d:46:40: 20:9b:ba:23:ff:42:61:3a:57:8f:15:bb:a3:5c:02: 23:7b:81:78:1c:dc:d8:fd:9a:0d:89:10:c4:9f:5b: c3:04:ee:f5:b4:94:da:4d:63:7e:d6:dc:c4:04:96: 38:4b:85:4f:ce:fe:93:42:ca:a6:2c:40:74:aa:7f: 40:f6:c1:0e:64:56:0a:3d:51:1b:ff:02:cb:f4:7e: c1:e9:b1:83:5e:74:37:f6:3a:c0:76:1d:35:ae:a3: ea:08:27:84:57:83:ef:df:4b:23:97:08:05:96:77: b8:87:38:9e:e9:02:8a:de:46:c9:99:d1:a1:eb:5f: 35:19:b6:5e:53:9b:8d:0c:f5:9a:04:29:ba:9a:0a: 2c:a9:65:4c:83:40:c9:67:a0:08:08:43:d6:f2:4c: 2f:49:92:f2:79:ae:37:84:8f:45:4d:7c:b3:cd:20: 19:48:27:d3:8d:78:01:59:25:51:03:1a:27:58:27: 9d:45:f3:f0:f8:b5:49:6f:c3:81:58:ad:12:55:80: 57:c9:68:75:c9:19:2c:a1:fc:fd:bd:0f:d7:1d:af: 95:54:5a:ee:2a:b5:96:f2:db:b2:5c:17:b6:04:59: 8c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:39:4D:1B:04:ED:BF:0F:05:09:A6:31:58:0B:0F:18:C5:BD:A2:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:19:4a:a3:71:95:6f:11:9c:3a:27:73:04:f3:51:a9:a5:0a: 52:65:ec:a9:5b:af:bb:b9:76:9d:67:ec:4e:b6:5a:83:76:57: d4:71:28:92:0b:6d:74:51:49:13:ac:68:9c:06:24:ed:2e:d7: a5:ee:95:71:45:55:2d:2b:7a:5a:0c:d2:1b:40:96:ce:17:c4: 0d:29:94:b6:d6:16:9b:b1:5b:55:2a:4c:9d:e6:4d:2c:48:18: 31:dd:8d:30:6a:5f:2f:46:f5:92:6c:70:ec:67:0e:ac:e3:5f: 5f:21:a7:76:a1:44:60:18:e1:83:30:c7:35:b3:eb:c3:2a:46: 12:bf:12:66:d8:2a:1a:61:63:aa:f5:56:d3:6b:b7:0b:8e:b5: 25:71:99:0e:0d:45:da:13:bd:f0:8a:86:95:37:29:3f:4a:f3: 5a:46:d8:1e:96:30:b4:8b:a8:cf:a5:f3:ef:e9:36:3f:4d:e2: ad:0c:b1:5a:82:7f:53:c0:ff:3a:09:b9:34:ce:d9:fe:2d:bd: 5d:24:f9:d7:fa:cb:14:a4:c4:9a:3c:ce:65:f5:9a:4e:e2:ac: 35:e0:85:26:9c:6b:39:22:c7:d9:97:fb:78:6f:71:56:3c:f7: 9c:b9:eb:85:17:ad:f9:62:2f:ce:3a:be:c6:6b:4d:35:30:d8: 7b:90:35:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/oVAtjLbQgUlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk MTFjZDhiNmUtMzE2Mi00MzM4LThkNzQtODM2NGVhZTVlYmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvIf0qkEL7Bj2sUT8QF5xWtXbpenT3Hzt9cN RkAgm7oj/0JhOlePFbujXAIje4F4HNzY/ZoNiRDEn1vDBO71tJTaTWN+1tzEBJY4 S4VPzv6TQsqmLEB0qn9A9sEOZFYKPVEb/wLL9H7B6bGDXnQ39jrAdh01rqPqCCeE V4Pv30sjlwgFlne4hzie6QKK3kbJmdGh6181GbZeU5uNDPWaBCm6mgosqWVMg0DJ Z6AICEPW8kwvSZLyea43hI9FTXyzzSAZSCfTjXgBWSVRAxonWCedRfPw+LVJb8OB WK0SVYBXyWh1yRksofz9vQ/XHa+VVFruKrWW8tuyXBe2BFmMyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE5TRsE7b8PBQmmMVgLDxjFvaLDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWIxZjQzMWEtY2MyZC0z NDc2LTkwMTAtYTAxY2YxOGUzMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMZSqNxlW8RnDoncwTzUamlClJl7Klbr7u5dp1n7E62WoN2V9RxKJIL bXRRSROsaJwGJO0u16XulXFFVS0reloM0htAls4XxA0plLbWFpuxW1UqTJ3mTSxI GDHdjTBqXy9G9ZJscOxnDqzjX18hp3ahRGAY4YMwxzWz68MqRhK/EmbYKhphY6r1 VtNrtwuOtSVxmQ4NRdoTvfCKhpU3KT9K81pG2B6WMLSLqM+l8+/pNj9N4q0MsVqC f1PA/zoJuTTO2f4tvV0k+df6yxSkxJo8zmX1mk7irDXghSacazkix9mX+3hvcVY8 95y564UXrfliL846vsZrTTUw2HuQNYs= -----END CERTIFICATE-----Generated at Sun Feb 16 06:16:31 2025 by rpki-client