$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa File: 42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa (raw, json) Hash identifier: n2uqwEp6feO9OLdLoayJ6XcdB73EzoAkjhj1F1IaGeQ= Subject key identifier: 8F:37:2B:DE:34:1C:00:85:8F:16:6C:C3:D4:33:01:C7:04:AE:39:0E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858484945623365B048D427981900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa Signing time: Sun 22 Dec 2024 02:00:39 +0000 ROA not before: Sun 22 Dec 2024 02:00:39 +0000 ROA not after: Sat 22 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:49:45:62:33:65:b0:48:d4:27:98:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 22 02:00:39 2024 GMT Not After : Mar 22 01:00:39 2025 GMT Subject: CN=fc4e82fc-0a98-4bf7-b336-65e3ebb2285c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5b:48:d9:76:25:0e:a5:b1:ee:49:29:b1:b5: f2:23:d1:92:4c:16:f7:40:5d:d7:73:1b:d9:a8:f9: ae:ef:f3:b8:b7:0e:dc:fd:41:fa:87:4b:80:c8:b0: 77:1b:0f:b0:0f:2c:84:06:20:f6:90:01:b8:08:bd: 4c:78:1a:da:31:f0:01:7c:6f:61:d0:92:6a:2f:0d: ba:25:1c:5b:5a:70:d3:ee:94:e9:07:ec:d6:9d:5c: 68:d7:cd:9b:46:bf:bb:75:6c:9e:09:71:c5:f0:6e: c8:e6:ad:63:22:42:a5:40:b4:f4:b6:c7:ae:2c:78: 1a:35:d4:f3:28:39:bd:c0:7a:b7:af:fc:43:99:8e: 98:fe:e9:12:7f:e9:d5:25:7c:04:f6:4b:e6:8a:38: 37:8d:14:a6:0a:95:ce:7c:51:19:90:f7:83:ca:20: 92:c9:c0:f0:66:f0:60:48:95:34:c5:7f:60:f3:42: 71:38:8d:77:a1:2f:b6:21:0c:c1:8f:cc:b5:0f:67: a6:15:06:25:09:7a:99:7d:42:b7:f8:25:da:b2:a3: 03:5c:23:eb:1e:a3:21:fe:63:04:a7:61:eb:60:ad: d9:de:62:68:4a:7e:ac:1c:f7:d5:38:4a:21:66:08: 41:a2:5a:af:29:10:d7:ba:a0:49:3f:38:1b:b8:10: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:37:2B:DE:34:1C:00:85:8F:16:6C:C3:D4:33:01:C7:04:AE:39:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:11:1f:92:8f:75:88:b0:8c:eb:44:20:2a:57:5b:3c:e9:34: 03:ad:e8:20:05:2c:09:3c:dc:97:67:1f:8c:cc:09:d4:73:09: 78:52:2f:25:ce:de:c1:8b:6b:d2:4a:6e:3e:c4:2d:d9:b6:88: 6e:cb:20:29:85:4d:db:a0:32:db:dc:85:6d:aa:04:c2:4c:38: ba:a0:e7:e0:b9:85:9e:a1:77:9a:06:8f:44:cd:06:8f:91:a1: ea:cd:8a:d1:f7:48:0d:df:d8:13:31:94:58:a9:eb:bc:af:b1: 82:d9:fa:53:84:b3:7d:15:c3:c9:c1:09:57:bc:aa:80:53:fd: 4a:85:c8:01:23:99:06:70:be:a3:71:4b:9b:e0:16:3c:4a:1b: b9:f6:50:ac:15:81:4d:41:35:91:98:3a:cc:a1:40:ae:f9:66: 7d:9a:43:e6:33:49:2d:d2:fc:bb:05:4f:11:5b:be:0a:cc:98: 7b:59:d4:64:f6:6c:01:b1:b1:02:45:16:d3:82:37:37:11:04: 72:1e:e0:14:30:00:01:10:5b:4d:aa:0b:b0:08:ec:52:37:60: 32:55:91:82:a2:4c:25:a0:af:0a:27:f1:a4:f7:0b:a4:02:b4: d2:0a:68:d9:b3:6c:fb:fc:f9:de:d5:db:2a:8c:15:89:d2:e5: ab:81:d3:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhJRWIzZbBI1CeYGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyMjAyMDAzOVoXDTI1MDMyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZmM0ZTgyZmMtMGE5OC00YmY3LWIzMzYtNjVlM2ViYjIyODVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVtI2XYlDqWx7kkpsbXyI9GSTBb3QF3XcxvZ qPmu7/O4tw7c/UH6h0uAyLB3Gw+wDyyEBiD2kAG4CL1MeBraMfABfG9h0JJqLw26 JRxbWnDT7pTpB+zWnVxo182bRr+7dWyeCXHF8G7I5q1jIkKlQLT0tseuLHgaNdTz KDm9wHq3r/xDmY6Y/ukSf+nVJXwE9kvmijg3jRSmCpXOfFEZkPeDyiCSycDwZvBg SJU0xX9g80JxOI13oS+2IQzBj8y1D2emFQYlCXqZfUK3+CXasqMDXCPrHqMh/mME p2HrYK3Z3mJoSn6sHPfVOEohZghBolqvKRDXuqBJPzgbuBC2+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI83K940HACFjxZsw9QzAccErjkOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDI3MDhiY2UtNjY3My0z YzliLWEzYzYtNDhlZWFjMWUzYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFcRH5KPdYiwjOtEICpXWzzpNAOt6CAFLAk83JdnH4zMCdRzCXhSLyXO 3sGLa9JKbj7ELdm2iG7LICmFTdugMtvchW2qBMJMOLqg5+C5hZ6hd5oGj0TNBo+R oerNitH3SA3f2BMxlFip67yvsYLZ+lOEs30Vw8nBCVe8qoBT/UqFyAEjmQZwvqNx S5vgFjxKG7n2UKwVgU1BNZGYOsyhQK75Zn2aQ+YzSS3S/LsFTxFbvgrMmHtZ1GT2 bAGxsQJFFtOCNzcRBHIe4BQwAAEQW02qC7AI7FI3YDJVkYKiTCWgrwon8aT3C6QC tNIKaNmzbPv8+d7V2yqMFYnS5auB0wg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:33 2025 by rpki-client