$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/271f9d0f-2ab0-3f1e-b402-8b750374017e.roa File: 271f9d0f-2ab0-3f1e-b402-8b750374017e.roa (raw, json) Hash identifier: D7NfU3NDh8sSPBbHnclALQaj3uUAR8I3uyFiwclQAd4= Subject key identifier: 98:C9:66:0D:88:D4:57:0A:4F:96:F9:4D:BC:A9:B8:1C:71:73:48:31 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584838854C16775234CF15D76600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/271f9d0f-2ab0-3f1e-b402-8b750374017e.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:4c:16:77:52:34:cf:15:d7:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=c85aaf8d-df24-4aa9-8cb7-302ffe84a076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:e2:e8:e5:2d:a7:34:c4:09:e2:1f:d7:bc:4b: 23:1b:60:cd:d2:33:b3:f4:2c:05:a1:47:9e:08:d3: ae:02:38:6b:c1:3e:0a:78:c5:90:78:ca:63:f7:a2: 25:de:1d:46:55:84:e1:24:00:1e:f6:34:1f:d3:38: be:d1:1b:4b:c3:24:6e:e5:9c:06:8c:64:86:46:ed: 12:0d:2e:9e:82:4e:66:56:c8:a3:52:53:69:88:8e: 7d:90:84:fa:fa:8a:d8:5b:02:04:45:0e:65:2d:e8: 43:1e:cd:c2:9a:54:e2:3f:8b:ae:8a:95:29:3d:e3: 83:f4:00:a9:55:f0:0b:7a:4a:2e:4b:07:45:db:84: e6:d1:6b:cf:55:63:a3:15:0e:5a:1c:b8:56:d3:11: 03:ff:6b:75:3f:e4:46:b2:57:ce:de:40:7d:03:97: aa:64:c0:b5:13:c6:87:b9:30:9c:60:04:5f:ed:cc: 8d:52:4a:96:35:78:82:0e:a0:15:a5:6f:a0:ff:ca: 79:a5:03:72:d2:19:30:50:fb:27:c7:11:2c:dc:99: 87:ce:cc:99:34:e0:67:84:e9:75:53:c4:95:bb:65: 5a:fe:c4:cd:19:f0:73:bf:a6:40:33:4f:7d:2b:59: ca:64:99:d1:5e:81:6c:cc:28:e3:28:ef:5f:b1:d2: b3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C9:66:0D:88:D4:57:0A:4F:96:F9:4D:BC:A9:B8:1C:71:73:48:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/271f9d0f-2ab0-3f1e-b402-8b750374017e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1f:e1:74:7f:07:43:a6:52:70:dc:85:bb:5d:10:95:4e:ea: 1c:8d:d6:cd:98:57:67:68:29:12:08:40:5d:9d:95:b6:da:0d: 69:d3:4e:91:54:af:82:18:00:b6:3e:e2:c0:33:7f:97:8c:7b: 25:69:bf:77:92:fc:ae:3d:0b:5e:68:97:f1:ce:1f:e6:e7:cd: 0b:b6:17:45:59:59:04:ed:26:70:d3:d0:01:20:ab:ac:69:65: f9:06:ad:37:c3:58:05:b4:06:7b:15:69:e0:f6:2f:6c:6a:4d: d3:52:8c:f0:54:b6:f4:5b:a7:04:36:6b:78:36:dc:3b:57:e5: e7:0c:04:30:81:99:f4:af:35:d4:46:1c:32:8f:6f:8a:07:4e: ac:54:37:e2:ec:65:51:51:bf:72:f9:10:59:13:66:b6:5f:56: 62:ae:ec:c7:a5:53:5e:6b:f9:b4:1c:39:16:50:8d:93:7b:aa: 0d:33:80:89:ad:99:af:68:eb:70:55:fc:e5:07:32:18:c5:50: 73:24:33:d0:b5:84:af:62:3a:0f:8c:39:2d:90:f2:73:3f:21: 72:bf:a8:bf:ea:0f:65:5d:e3:8b:d3:a1:14:d2:3a:cb:b0:bf: 0c:13:0b:95:6d:a1:de:32:8e:66:af:58:19:92:11:d9:a4:e6: d3:bf:b0:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hUwWd1I0zxXXZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk Yzg1YWFmOGQtZGYyNC00YWE5LThjYjctMzAyZmZlODRhMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOLo5S2nNMQJ4h/XvEsjG2DN0jOz9CwFoUee CNOuAjhrwT4KeMWQeMpj96Il3h1GVYThJAAe9jQf0zi+0RtLwyRu5ZwGjGSGRu0S DS6egk5mVsijUlNpiI59kIT6+orYWwIERQ5lLehDHs3CmlTiP4uuipUpPeOD9ACp VfALekouSwdF24Tm0WvPVWOjFQ5aHLhW0xED/2t1P+RGslfO3kB9A5eqZMC1E8aH uTCcYARf7cyNUkqWNXiCDqAVpW+g/8p5pQNy0hkwUPsnxxEs3JmHzsyZNOBnhOl1 U8SVu2Va/sTNGfBzv6ZAM099K1nKZJnRXoFszCjjKO9fsdKzNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjJZg2I1FcKT5b5TbypuBxxc0gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjcxZjlkMGYtMmFiMC0z ZjFlLWI0MDItOGI3NTAzNzQwMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcf4XR/B0OmUnDchbtdEJVO6hyN1s2YV2doKRIIQF2dlbbaDWnTTpFU r4IYALY+4sAzf5eMeyVpv3eS/K49C15ol/HOH+bnzQu2F0VZWQTtJnDT0AEgq6xp ZfkGrTfDWAW0BnsVaeD2L2xqTdNSjPBUtvRbpwQ2a3g23DtX5ecMBDCBmfSvNdRG HDKPb4oHTqxUN+LsZVFRv3L5EFkTZrZfVmKu7MelU15r+bQcORZQjZN7qg0zgImt ma9o63BV/OUHMhjFUHMkM9C1hK9iOg+MOS2Q8nM/IXK/qL/qD2Vd44vToRTSOsuw vwwTC5Vtod4yjmavWBmSEdmk5tO/sEY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:57 2025 by rpki-client