$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa File: 265200e7-e1db-301c-a3c4-e682d6708109.roa (raw, json) Hash identifier: 88/k0nMawlN2SU2eCnmCOIhonlAGoqCAXaoZTzLcKOo= Subject key identifier: A3:91:E5:39:3D:38:C0:01:B4:D2:E8:95:D3:D2:1F:2A:73:7D:08:AD Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848388551D7E65E267BFD6C1800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:51:d7:e6:5e:26:7b:fd:6c:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=af3e3550-cf3d-44bc-bdd8-336cf6a70c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ce:19:c8:6a:99:57:fd:06:28:cd:70:1d:b2: b2:33:33:67:66:d3:70:42:fc:49:b1:ed:de:b7:55: a3:78:f0:8d:95:67:4d:5f:f1:ff:29:a3:ee:d9:81: ce:48:dd:14:fb:71:99:5c:17:7b:60:73:00:af:fa: 74:35:f4:53:24:45:cb:10:be:b2:cd:a9:0c:5f:1a: 96:2e:fe:91:31:43:c2:72:a7:a4:96:61:eb:87:fa: fa:d3:01:cc:c7:cc:07:5c:fd:e5:06:2a:ab:f0:12: c4:35:c1:b4:7d:29:57:c7:f4:96:16:92:59:0a:25: c0:c2:d3:fb:a9:ef:0d:79:a6:09:40:c9:98:8c:c4: 6f:c2:96:d4:92:cd:57:e2:84:fa:2c:e6:fe:78:f8: e6:c4:f7:11:e7:14:6e:fc:23:ef:e4:67:fb:05:9a: 2e:75:3c:68:e3:16:a9:d8:9e:df:12:24:34:9d:78: 0b:ea:b8:34:3a:74:0e:9e:b0:8e:f1:cb:29:f3:8f: 3e:42:5c:25:98:54:bb:36:68:3d:8a:c5:60:ff:68: 65:f2:8f:9a:1d:c1:87:59:62:ca:53:15:cc:09:88: 94:13:42:ad:48:61:59:9c:a1:c1:d3:88:dd:de:c5: 93:36:8f:ee:37:67:af:58:f0:61:ef:f0:e7:e3:19: 12:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:91:E5:39:3D:38:C0:01:B4:D2:E8:95:D3:D2:1F:2A:73:7D:08:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/265200e7-e1db-301c-a3c4-e682d6708109.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:12:a6:d7:b0:ee:61:e4:4d:65:e1:2c:58:2f:f6:9c:7d:3a: 74:b8:1f:b5:33:9b:f3:f3:74:d1:0e:e7:b8:13:a7:6a:fc:bb: 23:f0:6f:5c:e2:85:ee:76:93:06:d1:2f:e1:00:f7:73:69:94: 9f:3c:d2:aa:01:01:75:47:d0:86:85:1e:4b:91:67:b1:d9:81: 65:16:21:56:c9:b3:97:a1:1f:aa:49:7e:bb:fe:e5:dc:d5:1c: 3f:b3:e4:cb:11:17:8e:b7:c2:b1:8e:d0:24:7d:3d:0d:30:e3: 82:42:c3:7b:a3:30:ae:8d:52:25:df:0a:87:30:86:b5:e3:0f: 97:40:7d:d9:28:63:2a:db:71:a2:15:1f:eb:75:13:84:f6:92: ae:34:df:3e:68:d1:96:bb:b2:ae:a6:7e:5f:a5:6c:6b:85:a6: 0e:66:93:d2:21:4d:46:d1:9f:c2:36:df:90:c9:20:12:a8:77: d1:82:6a:45:d8:84:86:ee:8e:1c:fa:80:91:9e:b0:84:af:89: 77:cb:03:73:a3:ad:a1:2f:bd:1d:13:fd:99:4e:80:ac:43:11: 13:1c:53:56:f7:8f:03:5c:80:73:8f:08:87:d0:ac:a8:0c:23: e8:da:75:84:ae:dc:fe:92:7a:b9:f0:5e:a9:8b:2a:3d:9e:28: 9f:5e:86:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVHX5l4me/1sGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk YWYzZTM1NTAtY2YzZC00NGJjLWJkZDgtMzM2Y2Y2YTcwYzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoc4ZyGqZV/0GKM1wHbKyMzNnZtNwQvxJse3e t1WjePCNlWdNX/H/KaPu2YHOSN0U+3GZXBd7YHMAr/p0NfRTJEXLEL6yzakMXxqW Lv6RMUPCcqeklmHrh/r60wHMx8wHXP3lBiqr8BLENcG0fSlXx/SWFpJZCiXAwtP7 qe8NeaYJQMmYjMRvwpbUks1X4oT6LOb+ePjmxPcR5xRu/CPv5Gf7BZoudTxo4xap 2J7fEiQ0nXgL6rg0OnQOnrCO8csp848+QlwlmFS7Nmg9isVg/2hl8o+aHcGHWWLK UxXMCYiUE0KtSGFZnKHB04jd3sWTNo/uN2evWPBh7/Dn4xkSGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOR5Tk9OMABtNLoldPSHypzfQitMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjY1MjAwZTctZTFkYi0z MDFjLWEzYzQtZTY4MmQ2NzA4MTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoSptew7mHkTWXhLFgv9px9OnS4H7Uzm/PzdNEO57gTp2r8uyPwb1zi he52kwbRL+EA93NplJ880qoBAXVH0IaFHkuRZ7HZgWUWIVbJs5ehH6pJfrv+5dzV HD+z5MsRF463wrGO0CR9PQ0w44JCw3ujMK6NUiXfCocwhrXjD5dAfdkoYyrbcaIV H+t1E4T2kq403z5o0Za7sq6mfl+lbGuFpg5mk9IhTUbRn8I235DJIBKod9GCakXY hIbujhz6gJGesISviXfLA3OjraEvvR0T/ZlOgKxDERMcU1b3jwNcgHOPCIfQrKgM I+jadYSu3P6SernwXqmLKj2eKJ9ehnM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:35 2025 by rpki-client