$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa File: 499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa (raw, json) Hash identifier: SE0W/fJDELf6HKWTU1/Xlvxlitlnf5CcXRs3jeti/5g= Subject key identifier: 1B:6B:4E:4B:AE:55:B1:DE:CB:95:BD:F5:93:95:0F:94:33:52:2F:53 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE8638795C167F528D900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e8:63:87:95:c1:67:f5:28:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=94e77242-e632-47e2-ae84-3a1c9d165cf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d1:58:c7:7b:c2:73:9d:65:5a:f5:56:91:00: 0f:72:46:9f:2d:ed:2a:b4:1b:85:c3:71:5e:28:df: 76:5a:4a:6a:fe:dd:57:3f:60:5a:5f:2e:b8:b8:36: 6e:79:22:ec:33:92:1e:9d:8f:76:f6:d4:de:6e:2c: d3:9a:16:67:f9:16:b1:bb:a3:5b:fa:a0:f3:69:bb: 85:bf:65:32:a8:ec:e5:41:81:99:de:92:bf:b5:5b: f6:16:e4:48:3a:6c:df:52:18:73:ef:81:a4:73:f4: 88:5e:ac:52:be:be:87:4d:87:7a:31:1f:47:6a:29: ad:86:4c:39:5d:15:b2:01:a3:62:21:30:8b:ee:7d: 1d:d0:2e:6a:37:fc:dd:e0:0e:5b:da:c8:ef:ae:36: d4:7b:3d:95:0e:25:bd:40:c8:76:68:4e:15:78:6b: c9:ca:bc:e2:ea:de:8d:83:0f:2a:0f:17:13:fd:a0: dc:a4:d8:c6:c4:fb:0f:67:ce:6d:ea:b5:2b:55:fd: 18:51:3c:9c:dc:ce:19:5a:01:a6:9a:91:99:1c:63: 13:7b:de:bd:a1:30:0b:0b:34:9c:39:ba:a8:9a:1a: 02:c5:7e:ae:2f:22:c3:15:dd:93:a5:14:e7:02:b0: a0:b0:51:7c:ae:7e:a2:a5:b9:e5:39:d1:64:a2:30: 1e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:6B:4E:4B:AE:55:B1:DE:CB:95:BD:F5:93:95:0F:94:33:52:2F:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/499c46c9-6703-3b57-9c6b-7d35b5c8c11e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:bb:f3:4b:91:d1:e6:21:d0:c1:61:ee:e7:61:c1:29:ed:d9: c7:53:f6:32:30:b6:03:a4:e8:5e:93:28:42:2d:3f:f2:bf:93: 07:65:3d:d4:b0:cb:c2:04:dd:2c:9d:99:ff:7e:85:c5:db:34: 39:88:39:98:4a:f2:9e:f0:fc:96:50:9b:e4:47:b1:ab:7f:fc: 0d:99:dc:a1:e1:9e:2b:59:f5:fb:b5:d6:70:12:ae:00:74:bf: e3:3d:8b:13:59:44:9e:39:4f:50:0a:41:f8:82:c4:33:9b:4c: 50:c3:d1:39:04:9c:e1:80:ce:6d:76:f5:d2:d4:bf:d3:1e:9e: e5:91:54:da:ce:58:21:d8:02:68:2a:7d:58:66:fa:52:d3:9c: 60:ea:f9:4b:0f:8c:82:c9:09:2b:f2:77:d3:c0:77:56:9a:6e: 6b:4c:e8:56:78:ae:4c:54:2b:c3:ab:b3:d4:a4:0d:1a:a6:79: 7f:23:5f:66:2d:5a:17:da:b7:ce:e5:78:14:96:e9:eb:c1:1f: 0a:94:31:e8:b2:02:51:87:a3:b4:63:6f:55:ad:01:f2:25:0b: 90:ca:95:77:6a:f6:10:88:89:70:f9:80:76:96:94:1c:01:63: 93:f1:2c:4d:e7:c9:95:b1:00:80:4b:b1:59:5b:0b:19:5d:6d: d0:2d:d6:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuhjh5XBZ/Uo2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk OTRlNzcyNDItZTYzMi00N2UyLWFlODQtM2ExYzlkMTY1Y2YyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtFYx3vCc51lWvVWkQAPckafLe0qtBuFw3Fe KN92Wkpq/t1XP2BaXy64uDZueSLsM5IenY929tTebizTmhZn+Raxu6Nb+qDzabuF v2UyqOzlQYGZ3pK/tVv2FuRIOmzfUhhz74Gkc/SIXqxSvr6HTYd6MR9Haimthkw5 XRWyAaNiITCL7n0d0C5qN/zd4A5b2sjvrjbUez2VDiW9QMh2aE4VeGvJyrzi6t6N gw8qDxcT/aDcpNjGxPsPZ85t6rUrVf0YUTyc3M4ZWgGmmpGZHGMTe969oTALCzSc ObqomhoCxX6uLyLDFd2TpRTnArCgsFF8rn6ipbnlOdFkojAeZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtrTkuuVbHey5W99ZOVD5QzUi9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDk5YzQ2YzktNjcwMy0z YjU3LTljNmItN2QzNWI1YzhjMTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJy780uR0eYh0MFh7udhwSnt2cdT9jIwtgOk6F6TKEItP/K/kwdlPdSw y8IE3Sydmf9+hcXbNDmIOZhK8p7w/JZQm+RHsat//A2Z3KHhnitZ9fu11nASrgB0 v+M9ixNZRJ45T1AKQfiCxDObTFDD0TkEnOGAzm129dLUv9MenuWRVNrOWCHYAmgq fVhm+lLTnGDq+UsPjILJCSvyd9PAd1aabmtM6FZ4rkxUK8Ors9SkDRqmeX8jX2Yt Whfat87leBSW6evBHwqUMeiyAlGHo7Rjb1WtAfIlC5DKlXdq9hCIiXD5gHaWlBwB Y5PxLE3nyZWxAIBLsVlbCxldbdAt1jQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:37 2025 by rpki-client