$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa File: 3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa (raw, json) Hash identifier: d7mGgdsX+da0n5La+2Lo/Og0agEaWtvftPRL0uodP2o= Subject key identifier: FC:E7:39:7A:5F:FC:C0:08:76:4D:85:57:1F:57:11:3F:2F:79:4D:5D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848090FA8BBD792413B68D58D00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 130.137.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:a8:bb:d7:92:41:3b:68:d5:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=3d5bd130-7985-49f7-a3b9-2f1056d99ae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:3f:9c:bb:b0:0d:33:11:27:e7:3b:73:05:99: 58:ef:56:b7:f4:33:48:12:12:c1:eb:20:ea:01:da: 6c:b7:f2:1b:6b:fc:34:ce:3a:59:a8:f1:fd:58:04: 56:07:fe:3f:d6:2f:de:d8:e8:9d:95:bd:dd:7c:a7: 91:47:16:7e:2e:ae:39:dc:41:42:1b:f4:82:42:d4: 69:fd:48:0c:10:28:80:e0:97:47:fe:3d:6d:5d:5d: 78:6c:2f:58:e6:64:8e:5e:2f:89:9e:fd:ab:9c:50: cf:c2:44:ec:de:3f:0d:47:db:8b:33:10:d2:4a:2e: 34:0e:da:1d:d7:24:95:82:6e:84:f6:7d:9b:38:33: d9:9b:02:97:c8:e6:25:ce:14:f8:df:f8:1d:ed:4b: 06:08:9f:b6:34:ba:ab:3e:81:bd:6b:cd:a1:30:15: 32:81:bb:c4:93:de:e7:c5:40:ad:6d:3b:6d:76:47: fd:76:8e:c0:cb:b5:6d:56:98:b7:da:f4:1f:2f:fe: 06:cf:50:68:5c:ac:d4:65:95:da:06:a8:b7:4b:fc: 24:7e:8c:a0:af:f4:ac:7d:25:0b:f6:9d:f7:18:4d: a4:6d:98:1d:56:56:42:13:e9:49:35:46:0d:61:48: 67:ac:4c:ca:09:75:35:6f:5b:1b:be:fb:88:c2:58: 5a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:E7:39:7A:5F:FC:C0:08:76:4D:85:57:1F:57:11:3F:2F:79:4D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3b8e2097-f05e-37ba-8f91-dd75f22ce383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:f7:0b:af:79:63:96:db:15:a9:06:14:f4:7e:50:f2:ac:03: 86:ff:5b:92:a0:cc:13:ee:60:a8:0e:0f:86:fb:f0:1c:ce:0e: 38:db:5f:7f:a0:14:38:3d:2d:36:d0:1c:3c:e1:67:8f:ed:bc: a4:19:55:09:91:6c:a1:0f:83:4e:7f:4f:f3:eb:16:d4:7b:cc: bc:8d:64:b2:44:26:2c:c8:1b:8e:93:86:08:36:d6:0f:29:9e: 7a:b9:44:ec:27:5c:96:ba:1b:1c:29:7d:a9:02:93:69:60:ac: 04:da:75:d1:11:eb:68:e1:0b:d8:77:b6:43:90:56:00:d8:4e: a1:3a:78:4c:30:82:75:5d:f6:cb:a4:03:99:46:92:e2:9b:13: 99:2b:63:cb:00:86:a1:5b:63:46:7c:76:57:58:1c:56:b8:90: c1:76:df:60:e7:89:89:e1:58:5b:87:6b:e8:de:29:39:5f:42: 3d:3c:de:ad:e0:8e:d4:4c:a9:96:b9:b2:66:54:b6:6b:fa:1f: 04:b4:52:2e:6a:9e:dc:4c:f1:4c:a3:8e:21:ca:9f:16:88:2f: c8:61:5f:8b:26:c3:48:4b:58:d4:bc:11:16:a9:cf:17:29:da: a4:80:a4:0f:13:9c:53:6e:7a:c4:10:5c:1a:eb:3c:ed:33:56: 80:3d:56:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD6i715JBO2jVjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk M2Q1YmQxMzAtNzk4NS00OWY3LWEzYjktMmYxMDU2ZDk5YWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsD+cu7ANMxEn5ztzBZlY71a39DNIEhLB6yDq Adpst/Iba/w0zjpZqPH9WARWB/4/1i/e2Oidlb3dfKeRRxZ+Lq453EFCG/SCQtRp /UgMECiA4JdH/j1tXV14bC9Y5mSOXi+Jnv2rnFDPwkTs3j8NR9uLMxDSSi40Dtod 1ySVgm6E9n2bODPZmwKXyOYlzhT43/gd7UsGCJ+2NLqrPoG9a82hMBUygbvEk97n xUCtbTttdkf9do7Ay7VtVpi32vQfL/4Gz1BoXKzUZZXaBqi3S/wkfoygr/SsfSUL 9p33GE2kbZgdVlZCE+lJNUYNYUhnrEzKCXU1b1sbvvuIwlhaGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPznOXpf/MAIdk2FVx9XET8veU1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2I4ZTIwOTctZjA1ZS0z N2JhLThmOTEtZGQ3NWYyMmNlMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE73C695Y5bbFakGFPR+UPKsA4b/W5KgzBPuYKgOD4b78BzODjjbX3+g FDg9LTbQHDzhZ4/tvKQZVQmRbKEPg05/T/PrFtR7zLyNZLJEJizIG46Thgg21g8p nnq5ROwnXJa6GxwpfakCk2lgrATaddER62jhC9h3tkOQVgDYTqE6eEwwgnVd9suk A5lGkuKbE5krY8sAhqFbY0Z8dldYHFa4kMF232DniYnhWFuHa+jeKTlfQj083q3g jtRMqZa5smZUtmv6HwS0Ui5qntxM8UyjjiHKnxaIL8hhX4smw0hLWNS8ERapzxcp 2qSApA8TnFNuesQQXBrrPO0zVoA9Vnk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:08 2025 by rpki-client