$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/24dddd84-af8a-3e39-95ff-f6f105d22ef3.roa File: 24dddd84-af8a-3e39-95ff-f6f105d22ef3.roa (raw, json) Hash identifier: IE+yPBnYhO+wGf3qpTrQbjEUujBg55R3+cw0tOA8dMg= Subject key identifier: 3C:21:CB:46:BD:5E:2F:53:A4:BE:23:C5:F3:A3:94:19:DE:95:A1:78 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848090FB3D60DD84961A7ACFAC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/24dddd84-af8a-3e39-95ff-f6f105d22ef3.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 16509 IP address blocks: 130.137.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:b3:d6:0d:d8:49:61:a7:ac:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=185efae8-efc2-4957-998b-d888cd5cb0f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:e2:c5:bf:51:5a:5c:99:87:dc:fc:e7:fb: 7a:26:90:8c:25:41:54:c1:32:8d:08:88:f5:8d:8e: 4a:13:98:62:db:da:9e:44:2b:49:10:14:f1:74:99: ee:6e:cc:09:62:ef:68:bc:99:aa:49:c1:e8:9e:f3: 8a:e1:11:b9:99:38:52:dd:17:22:9a:9b:d6:5b:87: 40:3c:f6:f0:86:3c:10:7a:60:d5:3a:cc:40:54:7d: 2e:c0:80:7b:93:f5:cd:b3:9b:e9:df:14:36:49:36: 00:a9:56:da:22:25:fd:ab:cf:5b:98:41:eb:fa:30: fa:ed:85:f1:3e:25:1f:7e:87:fe:54:9c:65:f1:78: aa:4d:57:1d:6d:23:41:db:bd:2f:11:bb:74:b5:f7: 90:3b:76:35:80:23:a8:3d:bb:9a:b4:eb:86:6f:13: e9:1d:0f:eb:b2:36:59:1e:f5:2b:6a:7f:96:e7:24: c0:4c:9a:25:78:66:9f:da:a6:d4:db:d7:3c:0a:f6: bd:31:41:45:de:d8:95:97:35:09:4d:da:98:ee:26: 5a:ab:59:9b:20:3b:08:bc:42:7c:8d:46:94:37:3d: 94:71:7d:16:25:eb:33:0f:b6:04:cd:9d:79:88:ee: ce:69:2f:23:65:c4:f6:19:19:13:8a:f1:e5:06:bf: c9:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:21:CB:46:BD:5E:2F:53:A4:BE:23:C5:F3:A3:94:19:DE:95:A1:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/24dddd84-af8a-3e39-95ff-f6f105d22ef3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:1d:5f:0f:52:4d:1a:03:f0:89:d9:37:96:20:1e:65:9a:21: 9c:ca:e1:8a:86:ec:87:53:6b:2e:00:8e:e3:4b:5c:e9:44:17: e8:40:6d:a7:8f:b5:75:dc:4c:da:fe:52:1d:56:03:b4:21:16: 6c:4e:b5:d7:03:48:f9:13:30:7c:0e:0e:04:6c:a0:d5:46:ca: 2f:f4:14:20:f6:aa:0d:27:6f:60:41:81:86:45:82:d2:c8:32: 97:89:a7:23:8a:e3:91:82:01:60:e5:10:bc:e7:2b:a2:77:33: fb:8d:df:e1:5c:39:f1:73:6e:7f:26:10:1e:ec:f0:da:36:e7: 61:f9:7a:9a:99:47:ad:97:0f:26:09:0e:a6:28:6d:0f:f7:bb: 48:74:e2:4a:06:49:03:00:cf:5e:6a:1d:65:1c:ab:2c:fe:0e: aa:42:be:a4:e5:0a:68:68:e2:79:23:dc:97:4d:71:05:47:19: 89:04:01:86:b4:50:75:98:9b:4c:c0:e8:f3:54:c2:96:86:64: 97:77:12:d9:10:07:79:5f:09:c7:05:61:42:17:ce:53:71:85: 10:6d:ad:fb:61:50:7d:41:43:83:36:10:a7:8d:a4:95:c9:62: 90:02:43:4e:70:ac:00:95:4b:d5:c4:11:1c:07:b0:3c:8f:e9: 39:8e:6f:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7PWDdhJYaes+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk MTg1ZWZhZTgtZWZjMi00OTU3LTk5OGItZDg4OGNkNWNiMGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAveDixb9RWlyZh9z85/t6JpCMJUFUwTKNCIj1 jY5KE5hi29qeRCtJEBTxdJnubswJYu9ovJmqScHonvOK4RG5mThS3RcimpvWW4dA PPbwhjwQemDVOsxAVH0uwIB7k/XNs5vp3xQ2STYAqVbaIiX9q89bmEHr+jD67YXx PiUffof+VJxl8XiqTVcdbSNB270vEbt0tfeQO3Y1gCOoPbuatOuGbxPpHQ/rsjZZ HvUran+W5yTATJoleGaf2qbU29c8Cva9MUFF3tiVlzUJTdqY7iZaq1mbIDsIvEJ8 jUaUNz2UcX0WJeszD7YEzZ15iO7OaS8jZcT2GRkTivHlBr/J4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwhy0a9Xi9TpL4jxfOjlBnelaF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjRkZGRkODQtYWY4YS0z ZTM5LTk1ZmYtZjZmMTA1ZDIyZWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABQdXw9STRoD8InZN5YgHmWaIZzK4YqG7IdTay4AjuNLXOlEF+hAbaeP tXXcTNr+Uh1WA7QhFmxOtdcDSPkTMHwODgRsoNVGyi/0FCD2qg0nb2BBgYZFgtLI MpeJpyOK45GCAWDlELznK6J3M/uN3+FcOfFzbn8mEB7s8No252H5epqZR62XDyYJ DqYobQ/3u0h04koGSQMAz15qHWUcqyz+DqpCvqTlCmho4nkj3JdNcQVHGYkEAYa0 UHWYm0zA6PNUwpaGZJd3EtkQB3lfCccFYUIXzlNxhRBtrfthUH1BQ4M2EKeNpJXJ YpACQ05wrACVS9XEERwHsDyP6TmOb9k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:25 2025 by rpki-client