$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/326f55e3-bd1e-377f-8bac-4572b25ecd9f.roa File: 326f55e3-bd1e-377f-8bac-4572b25ecd9f.roa (raw, json) Hash identifier: Sl8DXZ/l5IKbA/llTZFO3HoeGKdw9sxfRv3Z2AuQeSc= Subject key identifier: 1B:99:6B:D7:76:8E:3B:C5:2D:AF:97:E9:07:AA:E2:4E:52:D7:2B:9C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483E1AAEC51E7BBEC56DD65C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/326f55e3-bd1e-377f-8bac-4572b25ecd9f.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:ae:c5:1e:7b:be:c5:6d:d6:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=017480fa-bd6b-4356-afbc-cc5a8b10715f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:88:f6:11:85:f0:f2:04:e0:0b:53:3f:dc:75: 61:c4:97:f8:17:13:41:99:38:4e:02:e6:a3:80:af: 6e:bc:63:ae:8a:21:5b:48:b4:36:af:f6:f8:b6:c5: a3:ff:93:07:f2:52:f2:93:ac:bd:c5:23:39:56:8b: 83:87:60:50:d0:7b:dc:88:bc:aa:ca:e3:25:da:0a: 6f:c7:16:bf:22:e0:14:f4:65:c6:18:68:08:b4:d5: 78:a6:e2:73:85:37:44:54:58:6c:7f:e3:93:ff:1a: 67:3f:01:b4:bb:17:15:68:0a:bf:b3:15:a6:34:0c: 2c:e3:01:6e:1b:64:72:0e:ab:cd:4b:05:31:dd:92: 6d:5c:03:fe:72:55:4e:ea:56:ee:69:86:b4:4f:1f: 0c:25:a9:4e:99:d8:7b:c8:6b:2b:37:08:57:3b:e7: 78:87:18:e6:83:62:8c:0f:61:da:36:cd:60:63:dc: 95:ab:63:73:c3:ab:77:b4:e4:15:85:36:06:9f:de: f3:21:df:c5:6b:05:c9:41:8c:57:cd:52:a2:02:7d: b5:64:16:a7:17:2b:8d:32:dc:1a:aa:10:d3:0f:1d: d0:bb:3a:5b:02:bb:6a:f8:3f:df:64:ca:17:14:a6: 89:f9:0e:35:20:5b:9c:a0:0e:ce:60:11:31:86:2a: 4d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:99:6B:D7:76:8E:3B:C5:2D:AF:97:E9:07:AA:E2:4E:52:D7:2B:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/326f55e3-bd1e-377f-8bac-4572b25ecd9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:bb:af:c5:c1:af:76:99:50:b2:18:b3:71:04:b9:01:71:f8: 5b:f4:fc:ae:d5:56:99:8c:b0:5c:09:4e:d6:64:c4:a0:34:97: 34:32:ad:b5:ad:32:a2:12:d9:8b:4a:78:93:05:fe:07:d2:8a: 5c:5e:63:25:29:b0:f9:96:2a:89:99:36:9e:8e:4b:c7:f1:f4: 69:3c:94:56:b4:58:38:2c:94:d7:79:76:e9:2d:85:66:5f:59: e5:c9:ae:de:b4:96:74:43:cf:5f:73:93:cb:b8:c9:1f:4d:ed: f9:fb:00:14:9d:03:2f:94:59:7f:d1:b0:cd:84:ab:0d:ad:57: e5:29:35:eb:ce:4f:6c:51:e3:72:74:5e:c9:0d:ac:71:8b:48: fb:f3:26:92:62:3f:9f:3f:46:4f:82:d3:ac:a0:1c:74:b5:1b: 9a:81:7f:02:ea:38:70:61:9c:c8:bf:8b:f0:66:c1:6a:6b:9f: c6:ed:3a:b3:73:0e:d5:bf:f6:78:12:6d:9c:05:7c:03:e5:1b: d0:76:ea:12:c9:2a:d6:22:80:d6:27:3f:8e:ba:b2:e5:ce:07: ff:16:ef:17:fa:c6:14:dd:60:b8:9d:d4:70:7a:0c:46:c2:ad: 8c:c0:cb:04:cd:0a:31:b4:91:25:88:8d:05:da:fe:c9:7e:3b: 09:e6:93:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gq7FHnu+xW3WXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MDE3NDgwZmEtYmQ2Yi00MzU2LWFmYmMtY2M1YThiMTA3MTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkoj2EYXw8gTgC1M/3HVhxJf4FxNBmThOAuaj gK9uvGOuiiFbSLQ2r/b4tsWj/5MH8lLyk6y9xSM5VouDh2BQ0HvciLyqyuMl2gpv xxa/IuAU9GXGGGgItNV4puJzhTdEVFhsf+OT/xpnPwG0uxcVaAq/sxWmNAws4wFu G2RyDqvNSwUx3ZJtXAP+clVO6lbuaYa0Tx8MJalOmdh7yGsrNwhXO+d4hxjmg2KM D2HaNs1gY9yVq2Nzw6t3tOQVhTYGn97zId/FawXJQYxXzVKiAn21ZBanFyuNMtwa qhDTDx3QuzpbArtq+D/fZMoXFKaJ+Q41IFucoA7OYBExhipNNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuZa9d2jjvFLa+X6Qeq4k5S1yucMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzI2ZjU1ZTMtYmQxZS0z NzdmLThiYWMtNDU3MmIyNWVjZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO7r8XBr3aZULIYs3EEuQFx+Fv0/K7VVpmMsFwJTtZkxKA0lzQyrbWt MqIS2YtKeJMF/gfSilxeYyUpsPmWKomZNp6OS8fx9Gk8lFa0WDgslNd5dukthWZf WeXJrt60lnRDz19zk8u4yR9N7fn7ABSdAy+UWX/RsM2Eqw2tV+UpNevOT2xR43J0 XskNrHGLSPvzJpJiP58/Rk+C06ygHHS1G5qBfwLqOHBhnMi/i/BmwWprn8btOrNz DtW/9ngSbZwFfAPlG9B26hLJKtYigNYnP466suXOB/8W7xf6xhTdYLid1HB6DEbC rYzAywTNCjG0kSWIjQXa/sl+Ownmk7Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:41 2025 by rpki-client