$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa File: 2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa (raw, json) Hash identifier: q2pJ3TaX5itfLjH3VcTMcZ/x3qpqEqJLUZzsYcRWqHk= Subject key identifier: 9C:C9:5D:2B:82:82:38:D3:65:6B:44:45:37:36:31:0A:3D:B7:3C:53 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285847A5D6B14A214F8519F6843F80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa Signing time: Thu 24 Oct 2024 13:00:42 +0000 ROA not before: Thu 24 Oct 2024 13:00:42 +0000 ROA not after: Wed 22 Jan 2025 14:00:42 +0000 asID: 14618 IP address blocks: 130.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:a5:d6:b1:4a:21:4f:85:19:f6:84:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Oct 24 13:00:42 2024 GMT Not After : Jan 22 14:00:42 2025 GMT Subject: CN=9c3aff91-50fd-48e3-aa7d-84cfb04b9c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:fb:d0:7a:fd:7b:d1:a4:29:fc:c5:69:8a:f1: 68:1e:95:36:de:70:79:fd:71:6e:93:06:e9:1f:73: 8f:aa:7c:ed:bc:01:f6:c8:e5:d1:ad:1a:cc:4c:92: fa:93:f3:f5:01:d1:91:f5:c9:2e:6b:9c:10:2e:5d: 3d:6e:69:c9:84:cf:e9:47:3c:df:a2:5f:72:f2:82: 2b:ad:65:56:17:ea:fe:38:d2:34:ce:f1:f5:a2:e0: ec:63:ca:4b:54:c2:5f:6e:25:13:9b:38:42:e6:5f: 53:0c:70:42:55:4b:6d:94:d7:5e:ae:b5:6f:bb:7d: 31:41:c8:69:15:2a:5a:b8:ee:4e:b8:b9:da:1b:e9: a4:09:20:e4:2a:b5:f1:f4:67:9f:68:74:78:f0:74: bd:00:ed:8d:ae:03:47:d4:eb:f5:f4:34:25:a1:98: eb:c2:46:a3:8d:63:14:b1:7e:70:12:56:85:c6:e6: c9:f2:28:30:c8:d5:70:9b:3d:32:81:8d:41:93:d5: e4:bd:4c:bd:21:27:44:67:d7:4e:1a:f3:55:3b:51: 26:b1:b7:8f:b6:6b:ef:01:ae:67:e2:5f:f5:82:dd: ed:57:81:01:2f:a2:86:f9:d5:4b:5f:b5:7b:26:80: 2e:22:39:4e:c0:5f:a2:e7:54:e6:39:22:2e:05:d0: f0:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:5D:2B:82:82:38:D3:65:6B:44:45:37:36:31:0A:3D:B7:3C:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:91:3f:69:0b:9e:d8:d6:c1:26:fa:2a:96:cf:a9:24:bd:0f: 9f:1d:99:09:99:08:da:7e:6e:c4:3c:f9:1e:13:2a:a2:3e:d9: 5e:d7:6a:ed:f7:f8:e2:a9:d9:88:27:d0:d3:2f:9c:92:aa:8d: a0:90:3f:d8:8b:fe:fe:3d:5f:95:fd:3e:a1:6b:80:ef:aa:2a: 76:80:3c:ed:41:58:f1:18:a5:2f:18:f3:5c:8e:e8:dd:47:29: 28:e3:fe:3f:b0:86:63:6d:d9:e8:15:df:77:bf:45:fe:83:af: 7a:54:a6:12:8a:3a:20:f5:d8:35:28:0f:00:89:87:cf:b8:4e: 23:11:de:cf:da:e0:76:aa:cf:3e:99:e4:ae:8d:dd:0c:ec:24: 4d:12:60:37:ea:ee:70:5e:23:0b:11:f2:f8:97:95:aa:53:fe: 2a:a6:36:98:06:79:bd:f3:7d:79:77:4f:68:00:f6:e7:79:0c: ab:91:66:ca:ca:71:41:8f:fa:79:d0:c8:6d:5f:70:2d:cb:f9: 84:2a:fa:25:6d:ef:7b:56:97:e3:0b:49:05:e7:d1:62:1f:95: 92:de:81:19:82:29:1f:fa:05:d5:98:3e:62:b8:c1:19:b2:b0: d0:64:b9:e7:b1:c0:25:64:e6:16:a0:f9:19:a9:42:0f:36:cb: 5f:ef:cb:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEel1rFKIU+FGfaEP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTAyNDEzMDA0MloXDTI1MDEyMjE0MDA0MlowLzEtMCsGA1UEAxMk OWMzYWZmOTEtNTBmZC00OGUzLWFhN2QtODRjZmIwNGI5Yzk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvvQev170aQp/MVpivFoHpU23nB5/XFukwbp H3OPqnztvAH2yOXRrRrMTJL6k/P1AdGR9ckua5wQLl09bmnJhM/pRzzfol9y8oIr rWVWF+r+ONI0zvH1ouDsY8pLVMJfbiUTmzhC5l9TDHBCVUttlNderrVvu30xQchp FSpauO5OuLnaG+mkCSDkKrXx9GefaHR48HS9AO2NrgNH1Ov19DQloZjrwkajjWMU sX5wElaFxubJ8igwyNVwmz0ygY1Bk9XkvUy9ISdEZ9dOGvNVO1EmsbePtmvvAa5n 4l/1gt3tV4EBL6KG+dVLX7V7JoAuIjlOwF+i51TmOSIuBdDwZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzJXSuCgjjTZWtERTc2MQo9tzxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmFhZTQzMDUtM2MyNS0z MzdiLWExYzItOGVkYmRmNmZjOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6RP2kLntjWwSb6KpbPqSS9D58dmQmZCNp+bsQ8+R4TKqI+2V7Xau33 +OKp2Ygn0NMvnJKqjaCQP9iL/v49X5X9PqFrgO+qKnaAPO1BWPEYpS8Y81yO6N1H KSjj/j+whmNt2egV33e/Rf6Dr3pUphKKOiD12DUoDwCJh8+4TiMR3s/a4Haqzz6Z 5K6N3QzsJE0SYDfq7nBeIwsR8viXlapT/iqmNpgGeb3zfXl3T2gA9ud5DKuRZsrK cUGP+nnQyG1fcC3L+YQq+iVt73tWl+MLSQXn0WIflZLegRmCKR/6BdWYPmK4wRmy sNBkueexwCVk5hag+RmpQg82y1/vy30= -----END CERTIFICATE-----Generated at Sun Nov 24 22:16:22 2024 by rpki-client on console-fra.rpki-client.org