$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa File: 5f0c1c12-64ae-39de-80a7-8a8c75568950.roa (raw, json) Hash identifier: jXSsvH/Ssap91Dsqy+tgCazf+VE12y9snDIkdcTYyxs= Subject key identifier: 88:B4:FB:40:53:AF:71:C5:51:11:B7:71:83:66:A6:EB:76:C2:F3:AA Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285847E78F599C2C5B4686ED3C5900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa Signing time: Sun 17 Nov 2024 02:00:28 +0000 ROA not before: Sun 17 Nov 2024 02:00:28 +0000 ROA not after: Sat 15 Feb 2025 02:00:28 +0000 asID: 14618 IP address blocks: 130.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 26 Nov 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:e7:8f:59:9c:2c:5b:46:86:ed:3c:59:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 17 02:00:28 2024 GMT Not After : Feb 15 02:00:28 2025 GMT Subject: CN=9d71b528-32d2-4133-8636-5d418c6c0c9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:95:a2:eb:3e:00:e1:09:3e:4e:d5:85:e9: ef:c7:61:a6:bd:10:33:95:78:80:46:6d:8a:48:fd: 36:81:c1:e1:9b:86:1e:ff:10:b1:89:e8:fe:fe:93: 75:be:46:6b:a3:f5:d7:91:23:6a:32:98:a6:0e:7f: a9:ef:94:f4:c3:27:5e:11:99:fe:a7:6e:6e:53:a9: 90:16:29:be:d1:2b:a3:b2:89:cb:bd:5a:ba:f1:69: e9:f4:9a:5e:cc:4d:a5:c0:6f:fb:a4:ce:56:78:88: f5:aa:b2:e6:0f:54:6c:21:91:ac:72:8b:ca:35:d0: 86:12:1b:55:19:cb:dd:e3:8f:10:3e:95:12:8a:33: e7:32:76:d3:a6:f8:58:fb:c7:c1:2c:b7:e4:e9:68: b8:89:96:0f:8c:ee:90:e8:78:30:18:2d:24:71:31: 12:c1:09:e9:11:41:a6:47:02:71:cd:87:59:d5:21: 82:ae:8d:a7:3f:86:09:9b:e8:a8:97:9c:a4:e4:b1: 9c:ce:0f:c4:15:f1:cd:50:a9:5d:c8:19:61:4f:2a: c0:b7:97:e9:db:fe:0e:a0:5b:b8:ac:fe:e0:2b:3b: a9:dc:a4:2a:a5:e6:4c:34:46:d7:41:47:c8:ce:60: c4:20:29:a6:dd:b4:1a:7b:69:d4:9b:b3:0d:55:0b: 6d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B4:FB:40:53:AF:71:C5:51:11:B7:71:83:66:A6:EB:76:C2:F3:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:f8:4d:c0:3a:33:25:07:9a:0d:9a:91:5b:0c:41:a0:1b:1e: df:13:c1:cf:17:aa:84:f6:a2:71:bb:6d:c7:a4:5e:f3:18:82: cc:c8:ac:fe:4b:e7:7e:d8:23:a4:67:6f:66:c2:50:99:7b:f6: 5d:5d:5e:a0:81:d1:09:e6:4e:49:41:04:93:e1:bf:14:98:ca: 34:fd:e7:80:5b:d6:ce:d1:51:8f:72:86:bf:f4:8c:64:78:20: 45:bb:8d:6f:44:39:53:2d:ad:b3:47:85:f5:24:90:37:ec:70: 8c:7a:cb:fb:2c:a7:c5:73:88:16:f0:82:c0:33:35:8b:29:d9: 40:c3:bd:0a:3d:5e:bd:9b:37:56:cf:6d:b2:a6:a8:3b:19:a6: 14:f7:f5:b4:16:0e:19:ca:2a:94:12:e4:32:ee:09:f0:b4:c3: a3:da:fc:9c:c0:bb:08:f4:6d:db:4d:81:d3:1f:02:4d:67:7b: 8f:e2:99:ca:33:d7:49:26:58:13:42:18:90:fb:7d:8d:21:e1: 1b:4b:6d:20:21:95:94:88:f1:75:72:7b:fd:a1:b7:4e:fc:be: 34:e0:a9:eb:90:be:7f:e8:01:08:03:62:b3:c1:65:d8:b3:92: 5f:10:a2:6b:e5:81:69:d8:85:04:77:e1:1c:1f:b4:ec:e3:8d: b6:51:45:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfnj1mcLFtGhu08WQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTExNzAyMDAyOFoXDTI1MDIxNTAyMDAyOFowLzEtMCsGA1UEAxMk OWQ3MWI1MjgtMzJkMi00MTMzLTg2MzYtNWQ0MThjNmMwYzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihqVous+AOEJPk7Vhenvx2GmvRAzlXiARm2K SP02gcHhm4Ye/xCxiej+/pN1vkZro/XXkSNqMpimDn+p75T0wydeEZn+p25uU6mQ Fim+0SujsonLvVq68Wnp9JpezE2lwG/7pM5WeIj1qrLmD1RsIZGscovKNdCGEhtV Gcvd448QPpUSijPnMnbTpvhY+8fBLLfk6Wi4iZYPjO6Q6HgwGC0kcTESwQnpEUGm RwJxzYdZ1SGCro2nP4YJm+iol5yk5LGczg/EFfHNUKldyBlhTyrAt5fp2/4OoFu4 rP7gKzup3KQqpeZMNEbXQUfIzmDEICmm3bQae2nUm7MNVQtt3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi0+0BTr3HFURG3cYNmput2wvOqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWYwYzFjMTItNjRhZS0z OWRlLTgwYTctOGE4Yzc1NTY4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgommMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIz4TcA6MyUHmg2akVsMQaAbHt8Twc8XqoT2onG7bcekXvMYgszIrP5L 537YI6Rnb2bCUJl79l1dXqCB0QnmTklBBJPhvxSYyjT954Bb1s7RUY9yhr/0jGR4 IEW7jW9EOVMtrbNHhfUkkDfscIx6y/ssp8VziBbwgsAzNYsp2UDDvQo9Xr2bN1bP bbKmqDsZphT39bQWDhnKKpQS5DLuCfC0w6Pa/JzAuwj0bdtNgdMfAk1ne4/imcoz 10kmWBNCGJD7fY0h4RtLbSAhlZSI8XVye/2ht078vjTgqeuQvn/oAQgDYrPBZdiz kl8QomvlgWnYhQR34RwftOzjjbZRRe0= -----END CERTIFICATE-----Generated at Sun Nov 24 23:12:21 2024 by rpki-client on console-ams.rpki-client.org