$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa File: 473c7c36-4556-38c3-9405-8bc9ecfdf684.roa (raw, json) Hash identifier: 1cHT1h7gcO/kGVEAZuR1/2T/J5eiXCIVvfKaEGPUyf0= Subject key identifier: 0D:43:BB:06:EA:2D:8A:93:65:BF:89:B1:12:29:B3:20:B0:DA:24:A5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483E1AA9417758FDA1A70EEBC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a9:41:77:58:fd:a1:a7:0e:eb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=4577f498-0fff-41bb-922a-31bc5cb0a633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:19:8f:c1:a5:4c:ef:bc:3b:ff:85:26:88:a3: b1:d1:ba:ec:15:4d:7d:21:0a:eb:07:01:1f:dc:07: 01:b9:a2:45:a7:33:19:3c:31:27:5d:58:81:d5:0e: 60:9b:99:9a:83:ff:d3:bc:d7:84:b9:68:ed:44:42: 79:7b:1a:c9:40:3f:fd:d6:78:d5:33:d3:99:36:43: 46:78:5e:26:dc:a6:d4:6d:2b:c7:da:05:ed:85:bc: 5a:70:d3:9b:26:e5:ee:a8:91:68:10:d4:d7:8a:c2: de:58:f4:d4:dd:b4:29:e6:19:5a:80:85:53:17:3d: 1d:0b:4a:1f:01:1f:fd:ca:bd:11:8f:00:34:1c:17: e9:e0:8e:c4:13:a8:8e:ce:b1:22:39:d9:74:92:82: 78:6c:ce:a9:f3:cd:3a:7d:5c:6b:c4:76:97:b5:2c: 6a:d9:41:8f:f0:e1:93:79:12:37:51:74:93:9e:23: a7:1f:a4:94:f6:1a:09:7c:f2:3b:a3:c0:0c:cd:c7: 97:09:c0:83:7e:64:70:f3:e0:e9:46:3e:f8:8f:5d: 35:6e:c3:90:c1:31:28:f1:70:64:67:cc:e2:42:d7: 1e:82:07:d8:c9:e3:e9:2e:59:bc:2c:28:fb:38:6d: 99:f2:7e:6c:9d:77:41:6c:7c:29:2e:32:4c:8c:f2: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:43:BB:06:EA:2D:8A:93:65:BF:89:B1:12:29:B3:20:B0:DA:24:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:da:d7:09:cf:d8:13:a7:27:f2:dd:d1:68:72:b0:9e:c1:64: 6e:98:98:1b:b4:49:c9:12:83:48:bd:f5:91:4e:9c:20:35:c0: 1e:56:8d:0e:5c:52:c6:a6:fa:1c:47:c7:21:cc:2c:69:e7:f5: 27:b7:0d:5e:83:4c:d4:2d:7c:bb:42:d3:02:66:4c:e3:63:77: 1f:82:80:68:63:01:fd:44:26:c0:58:bf:48:2d:45:5b:3c:ae: be:ee:c4:12:ca:fe:75:62:0b:c8:ab:97:72:00:17:60:64:3b: 4d:f3:da:88:94:79:7e:fc:9d:ca:5c:fe:5b:49:3a:0d:86:75: 7b:b1:34:59:4b:9b:6a:b7:7f:5b:f1:d2:dc:38:b1:59:30:4c: 03:81:f1:8c:f2:56:91:9c:11:1f:97:47:34:af:17:ae:39:80: 54:36:b2:29:48:07:be:f1:22:66:91:24:38:55:fd:47:74:86: 7d:2b:5a:f6:d7:03:7d:a4:d6:f9:81:e9:aa:a9:a1:1f:df:a6: bf:e1:4d:83:47:23:96:44:e3:15:ad:b0:29:6a:bb:b7:95:d9: 71:59:02:97:69:d3:af:d3:6f:13:24:81:9f:a3:94:b8:48:88: f8:d2:e7:56:92:3b:c9:78:48:71:e5:9c:93:34:93:3c:66:1b: 1a:dd:0d:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqlBd1j9oacO68AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk NDU3N2Y0OTgtMGZmZi00MWJiLTkyMmEtMzFiYzVjYjBhNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBmPwaVM77w7/4UmiKOx0brsFU19IQrrBwEf 3AcBuaJFpzMZPDEnXViB1Q5gm5mag//TvNeEuWjtREJ5exrJQD/91njVM9OZNkNG eF4m3KbUbSvH2gXthbxacNObJuXuqJFoENTXisLeWPTU3bQp5hlagIVTFz0dC0of AR/9yr0RjwA0HBfp4I7EE6iOzrEiOdl0koJ4bM6p8806fVxrxHaXtSxq2UGP8OGT eRI3UXSTniOnH6SU9hoJfPI7o8AMzceXCcCDfmRw8+DpRj74j101bsOQwTEo8XBk Z8ziQtceggfYyePpLlm8LCj7OG2Z8n5snXdBbHwpLjJMjPLiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA1DuwbqLYqTZb+JsRIpsyCw2iSlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDczYzdjMzYtNDU1Ni0z OGMzLTk0MDUtOGJjOWVjZmRmNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3a1wnP2BOnJ/Ld0WhysJ7BZG6YmBu0SckSg0i99ZFOnCA1wB5WjQ5c Usam+hxHxyHMLGnn9Se3DV6DTNQtfLtC0wJmTONjdx+CgGhjAf1EJsBYv0gtRVs8 rr7uxBLK/nViC8irl3IAF2BkO03z2oiUeX78ncpc/ltJOg2GdXuxNFlLm2q3f1vx 0tw4sVkwTAOB8YzyVpGcER+XRzSvF645gFQ2silIB77xImaRJDhV/Ud0hn0rWvbX A32k1vmB6aqpoR/fpr/hTYNHI5ZE4xWtsClqu7eV2XFZApdp06/TbxMkgZ+jlLhI iPjS51aSO8l4SHHlnJM0kzxmGxrdDfA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:21 2025 by rpki-client