$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa File: 3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa (raw, json) Hash identifier: gfDRr6t/yKTGhbaZxsfGoSJf2ihMKhj0zgxyskq9s7M= Subject key identifier: 7F:0C:5A:80:D7:75:BB:7A:73:F1:7B:30:ED:86:E0:74:35:3E:1B:6F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483E1AA8DB92332F1B0501E100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a8:db:92:33:2f:1b:05:01:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=ac7c870c-4925-49b0-83bf-dea96eb54135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:b7:75:73:95:ce:7f:74:f3:88:a8:85:1c: 2e:47:38:59:57:65:1c:3c:81:76:c0:17:32:0e:4e: f2:98:0d:3c:4a:87:6b:9f:d1:c4:1b:88:17:35:a9: 15:1e:b8:58:18:73:b8:28:7f:6c:65:65:f1:a0:9b: 8a:02:ec:7b:bc:48:0e:3f:7c:47:ef:23:7d:a6:5b: 4c:db:31:ca:5c:ba:4c:cf:0d:af:42:0d:21:a5:b5: ee:33:fc:5f:5b:c7:5b:d0:7a:fd:6b:30:b7:86:6e: f4:65:45:c8:17:b7:35:a1:43:66:16:a5:5c:89:cd: 9d:9e:51:d5:fa:6d:64:9a:6e:ba:59:ae:bc:31:6d: 43:e3:fd:66:5b:a2:bb:f0:05:c5:21:9e:bc:9e:db: b4:27:60:09:1a:c3:8c:b4:27:4e:6e:8d:78:65:36: 88:6e:27:68:8a:21:59:20:86:be:0f:1c:88:51:69: 04:2c:0b:fa:a5:e6:b4:09:da:75:06:dc:95:67:b8: 2f:d7:4e:64:8e:3e:83:58:61:e8:d1:89:43:db:ce: 58:78:ee:bf:c9:9d:3c:3c:dd:1c:2c:9c:d2:9a:17: fb:ea:6e:38:3b:5b:7b:50:75:ca:3b:2a:8e:b7:f9: da:7f:89:f6:92:fc:7b:a8:77:e4:c6:c9:39:d3:e1: 39:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0C:5A:80:D7:75:BB:7A:73:F1:7B:30:ED:86:E0:74:35:3E:1B:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3c2d0064-9a0f-33c1-9391-8e91e3f1a427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:70:30:c1:c9:80:c3:61:a2:f5:de:5e:0f:4f:ab:90:bb:2b: 95:76:52:75:8b:84:f2:6b:4d:8c:84:82:d7:19:b1:99:90:92: 90:a4:4a:9d:96:81:a3:49:87:a3:19:79:af:d6:d6:34:fc:6b: 5f:1e:55:8f:bb:fd:dc:1a:e9:37:b8:d5:00:eb:fd:48:1a:42: d0:40:72:93:35:53:47:14:be:e6:d8:d8:c2:56:b1:6d:c3:ca: c0:0c:54:b0:28:08:d7:a8:84:d0:94:52:33:17:7d:8e:ac:95: 85:b0:f7:99:61:91:29:a2:2e:8a:76:92:5a:27:1f:ef:ed:8b: 47:ff:97:12:97:b2:e9:d6:99:00:c8:82:99:51:68:d7:22:86: 44:aa:9d:0a:8f:78:fe:ad:c0:1a:39:c5:8a:c8:d8:dd:0c:19: 33:db:11:29:f1:3e:2b:7f:3f:c3:3e:c9:72:13:ab:20:3f:30: c2:81:fc:ad:3b:c4:1c:1a:a9:00:74:dc:8f:36:89:aa:ff:a2: b1:24:30:be:30:b5:6f:d4:0d:28:32:3a:f6:c3:1b:a8:27:f6: df:c3:ee:cf:da:67:33:11:35:7a:71:89:1e:bc:7c:08:05:bd: be:9c:2a:65:3c:af:81:f3:35:cc:24:37:8a:6f:06:1a:f2:00: f9:7d:04:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqjbkjMvGwUB4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk YWM3Yzg3MGMtNDkyNS00OWIwLTgzYmYtZGVhOTZlYjU0MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymy3dXOVzn9084iohRwuRzhZV2UcPIF2wBcy Dk7ymA08Sodrn9HEG4gXNakVHrhYGHO4KH9sZWXxoJuKAux7vEgOP3xH7yN9pltM 2zHKXLpMzw2vQg0hpbXuM/xfW8db0Hr9azC3hm70ZUXIF7c1oUNmFqVcic2dnlHV +m1kmm66Wa68MW1D4/1mW6K78AXFIZ68ntu0J2AJGsOMtCdObo14ZTaIbidoiiFZ IIa+DxyIUWkELAv6pea0Cdp1BtyVZ7gv105kjj6DWGHo0YlD285YeO6/yZ08PN0c LJzSmhf76m44O1t7UHXKOyqOt/naf4n2kvx7qHfkxsk50+E5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8MWoDXdbt6c/F7MO2G4HQ1PhtvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2MyZDAwNjQtOWEwZi0z M2MxLTkzOTEtOGU5MWUzZjFhNDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhwMMHJgMNhovXeXg9Pq5C7K5V2UnWLhPJrTYyEgtcZsZmQkpCkSp2W gaNJh6MZea/W1jT8a18eVY+7/dwa6Te41QDr/UgaQtBAcpM1U0cUvubY2MJWsW3D ysAMVLAoCNeohNCUUjMXfY6slYWw95lhkSmiLop2klonH+/ti0f/lxKXsunWmQDI gplRaNcihkSqnQqPeP6twBo5xYrI2N0MGTPbESnxPit/P8M+yXITqyA/MMKB/K07 xBwaqQB03I82iar/orEkML4wtW/UDSgyOvbDG6gn9t/D7s/aZzMRNXpxiR68fAgF vb6cKmU8r4HzNcwkN4pvBhryAPl9BDQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:11 2025 by rpki-client