$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa File: 5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa (raw, json) Hash identifier: Zr+Grt5BfPoFj5zTy3xdh3Mrt3P5XpGFlOZkyBNFNy4= Subject key identifier: 48:92:2A:36:C0:4E:6D:E7:87:BA:B1:38:42:74:22:14:C0:EC:A4:3B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858482BF551605FE92319A9FD8B10 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa Signing time: Wed 11 Dec 2024 14:00:52 +0000 ROA not before: Wed 11 Dec 2024 14:00:52 +0000 ROA not after: Tue 11 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f5:51:60:5f:e9:23:19:a9:fd:8b:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 11 14:00:52 2024 GMT Not After : Mar 11 13:00:52 2025 GMT Subject: CN=90d11c97-a90a-42ad-954e-2ae9c24e9c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d7:3f:9c:65:a6:84:de:11:8a:9a:87:af:e6: b7:0a:b5:f9:23:89:fc:24:5f:29:8d:21:92:48:5d: c5:54:59:35:f7:20:ad:49:9d:30:48:2d:14:6e:68: 94:31:05:b5:27:c4:bc:12:fd:4e:79:00:d8:a8:8e: c4:df:ab:4f:1f:c2:39:7c:c1:b1:fd:22:6b:66:a6: 47:5a:42:f3:c6:61:35:23:26:d7:40:1d:3a:3c:dd: 5f:bd:70:30:24:09:b6:f9:00:86:2d:fc:c0:92:43: 41:8f:43:ce:02:0a:e1:0c:f5:13:84:93:a0:79:34: b9:46:dc:8d:20:77:a6:50:9e:00:68:e9:0c:ee:03: 1b:8d:4e:94:53:f3:c5:69:81:ed:a3:e8:c1:36:16: e7:ab:73:82:73:f7:d0:38:dd:5d:03:2e:8d:21:4d: fe:4f:7e:35:91:38:47:60:15:4d:c3:ae:8d:82:2a: 21:fe:11:b6:7a:60:68:16:e2:c5:f4:f9:71:cf:c3: 31:27:ac:9e:bb:9a:62:63:cf:a7:41:9d:a9:6e:28: e8:11:b1:51:d8:bc:59:bf:a4:68:4e:ba:d6:ea:71: a0:e2:11:76:45:fc:d9:e1:c7:6b:94:a4:c6:98:df: 41:e2:60:b9:b4:60:43:35:ac:f4:7d:98:e5:ea:b4: 1f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:92:2A:36:C0:4E:6D:E7:87:BA:B1:38:42:74:22:14:C0:EC:A4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5698d02a-cc23-3f5f-8cac-15c79e91d9a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:50:f4:a8:08:6f:b7:eb:fb:b6:35:0f:90:0d:be:df:80:e8: 6d:1b:aa:ad:0a:cc:39:d1:c5:42:92:be:7b:53:24:5a:0d:69: 61:de:cb:4e:fe:af:d9:58:b7:b1:07:36:9d:17:d9:59:26:db: 3d:5a:72:4b:b3:90:98:14:a2:fb:90:bc:b5:00:d6:94:3a:92: fd:7c:b3:d8:b7:5d:d1:83:04:94:49:d0:69:4c:a9:ed:96:82: ea:40:65:88:fc:fb:64:fe:b6:78:70:bf:0f:ba:02:f9:4a:16: 29:a6:62:e7:a4:90:b7:51:12:1d:79:86:f2:5a:54:b2:d3:7b: f3:03:4e:ba:65:88:97:3f:ce:11:75:f6:5a:3a:df:c5:52:d4: df:90:0f:36:f2:f8:2d:cf:c5:bc:5a:f9:2b:b4:fe:1f:7d:33: 3d:91:91:a0:1c:d8:81:f3:8d:e8:e3:e7:9d:e8:91:94:96:4b: 7f:9b:c6:6f:24:32:04:23:34:26:30:e1:7d:96:1c:e1:78:b4: 93:8d:15:d7:15:7a:73:b5:a4:7f:0e:c1:e6:b9:8d:6a:ab:20: 9f:f9:23:59:57:ff:f3:70:8b:f2:7b:a3:88:8f:8f:06:ad:8d: 8f:6d:81:d1:62:b6:2a:fb:a1:dc:4d:f6:ca:a8:65:44:18:a6: 3b:f6:47:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9VFgX+kjGan9ixAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk OTBkMTFjOTctYTkwYS00MmFkLTk1NGUtMmFlOWMyNGU5YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNc/nGWmhN4RipqHr+a3CrX5I4n8JF8pjSGS SF3FVFk19yCtSZ0wSC0UbmiUMQW1J8S8Ev1OeQDYqI7E36tPH8I5fMGx/SJrZqZH WkLzxmE1IybXQB06PN1fvXAwJAm2+QCGLfzAkkNBj0POAgrhDPUThJOgeTS5RtyN IHemUJ4AaOkM7gMbjU6UU/PFaYHto+jBNhbnq3OCc/fQON1dAy6NIU3+T341kThH YBVNw66Ngioh/hG2emBoFuLF9Plxz8MxJ6yeu5piY8+nQZ2pbijoEbFR2LxZv6Ro TrrW6nGg4hF2RfzZ4cdrlKTGmN9B4mC5tGBDNaz0fZjl6rQfKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiSKjbATm3nh7qxOEJ0IhTA7KQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTY5OGQwMmEtY2MyMy0z ZjVmLThjYWMtMTVjNzllOTFkOWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVQ9KgIb7fr+7Y1D5ANvt+A6G0bqq0KzDnRxUKSvntTJFoNaWHey07+ r9lYt7EHNp0X2Vkm2z1ackuzkJgUovuQvLUA1pQ6kv18s9i3XdGDBJRJ0GlMqe2W gupAZYj8+2T+tnhwvw+6AvlKFimmYuekkLdREh15hvJaVLLTe/MDTrpliJc/zhF1 9lo638VS1N+QDzby+C3Pxbxa+Su0/h99Mz2RkaAc2IHzjejj553okZSWS3+bxm8k MgQjNCYw4X2WHOF4tJONFdcVenO1pH8Owea5jWqrIJ/5I1lX//Nwi/J7o4iPjwat jY9tgdFitir7odxN9sqoZUQYpjv2R94= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:28 2025 by rpki-client