$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa File: 67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa (raw, json) Hash identifier: d5qDAfQ6PlASGvZLYjS5drQeh+TSDN5P2zHIZ6cD/k0= Subject key identifier: 0D:D3:E5:D2:A1:49:D8:F2:B2:BE:56:6A:75:D6:4C:B4:80:F9:E2:74 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848388551AA569FABD552A5D400 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa Signing time: Mon 16 Dec 2024 02:00:39 +0000 ROA not before: Mon 16 Dec 2024 02:00:39 +0000 ROA not after: Sun 16 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:38:85:51:aa:56:9f:ab:d5:52:a5:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 16 02:00:39 2024 GMT Not After : Mar 16 01:00:39 2025 GMT Subject: CN=49137fcd-f0c9-4e3a-8293-140579105bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e1:91:9d:11:2e:74:bd:e5:75:77:f2:5d:e8: 16:45:7e:b2:21:1b:49:91:d5:ca:13:63:5a:b4:ab: 21:a2:42:d5:8b:1f:70:f5:03:cc:bc:a1:7d:91:72: 90:5c:70:e9:ea:55:20:7b:8b:fe:1a:d0:a5:eb:9d: 94:75:6a:99:4c:dc:db:d8:2f:9e:b5:7d:8c:14:cb: 43:03:e1:a6:2c:92:14:0a:d9:a3:d9:7e:51:04:c6: 1e:20:52:e0:9e:a1:b6:9e:d5:16:bf:38:18:47:e1: 40:d4:1e:32:ce:cd:27:09:47:50:ef:70:1f:d9:65: 2d:1f:33:a0:45:5d:62:ac:67:b7:e2:cd:c7:94:0a: 50:f3:cb:6b:5a:3a:18:56:4c:6a:e2:05:4b:29:22: eb:e7:f3:d4:ab:50:3b:1c:2c:49:11:ff:af:02:a5: 31:7d:6e:53:c2:b5:d6:46:31:26:1a:b6:9f:65:dd: 8d:47:49:c1:32:fa:e5:ab:6b:45:be:e1:8e:58:b2: 9c:1e:74:f7:21:d8:66:6c:1d:66:6a:37:14:04:f6: 8b:6f:c0:66:e8:00:48:35:d2:70:85:9d:4e:11:5c: 8d:f4:61:6d:25:b7:56:65:78:ee:39:16:25:91:1e: 5a:b0:96:68:59:4a:7c:b8:81:67:91:47:0e:84:3a: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D3:E5:D2:A1:49:D8:F2:B2:BE:56:6A:75:D6:4C:B4:80:F9:E2:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/67e9bfe3-6204-31a1-99ff-76b89b2a8067.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:07:12:6e:bb:84:38:76:93:ad:67:be:ac:d0:40:b7:48:71: 6d:9d:fd:88:3e:be:4f:3c:f9:61:2b:15:25:5d:e4:5e:34:b7: 4e:ea:96:bd:92:ec:2c:4a:4d:8e:f9:7b:16:c7:eb:e8:97:4a: fa:58:60:6e:d5:a0:3d:11:d6:89:c5:df:91:a1:2c:f4:38:26: 79:1e:a2:dc:72:c8:d9:d3:9d:71:f5:7c:91:00:31:c4:bf:08: ac:84:ed:b9:25:56:e6:da:f0:00:50:a5:e3:59:ac:27:fa:da: 22:45:53:d0:78:ef:dc:55:86:46:ba:03:67:38:50:d1:2c:d9: 03:ed:ce:36:95:2b:52:6d:a3:63:9d:3d:c6:db:c4:51:df:ae: 72:7f:bd:05:b9:95:c9:ef:fb:a8:63:4d:69:f7:16:3f:aa:c7: 5f:6c:a0:71:fc:38:ca:df:bb:3d:6c:48:c6:d6:ab:ce:89:05: cd:43:e8:b0:ff:38:9c:03:ec:5b:2b:24:63:b2:20:16:a4:37: c7:bb:93:68:94:7e:5d:49:e9:0e:ac:5c:5d:2d:c8:e1:1d:a5: 79:3e:0e:b4:7f:8b:05:80:94:41:e9:72:fa:93:2f:73:af:18: 7a:ed:5d:2a:9b:89:8d:d1:a8:d5:7e:29:ad:2d:e6:cb:d7:93: 0d:38:0a:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg4hVGqVp+r1VKl1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNjAyMDAzOVoXDTI1MDMxNjAxMDAzOVowLzEtMCsGA1UEAxMk NDkxMzdmY2QtZjBjOS00ZTNhLTgyOTMtMTQwNTc5MTA1YmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheGRnREudL3ldXfyXegWRX6yIRtJkdXKE2Na tKshokLVix9w9QPMvKF9kXKQXHDp6lUge4v+GtCl652UdWqZTNzb2C+etX2MFMtD A+GmLJIUCtmj2X5RBMYeIFLgnqG2ntUWvzgYR+FA1B4yzs0nCUdQ73Af2WUtHzOg RV1irGe34s3HlApQ88trWjoYVkxq4gVLKSLr5/PUq1A7HCxJEf+vAqUxfW5TwrXW RjEmGrafZd2NR0nBMvrlq2tFvuGOWLKcHnT3IdhmbB1majcUBPaLb8Bm6ABINdJw hZ1OEVyN9GFtJbdWZXjuORYlkR5asJZoWUp8uIFnkUcOhDpuYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3T5dKhSdjysr5WanXWTLSA+eJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjdlOWJmZTMtNjIwNC0z MWExLTk5ZmYtNzZiODliMmE4MDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIHEm67hDh2k61nvqzQQLdIcW2d/Yg+vk88+WErFSVd5F40t07qlr2S 7CxKTY75exbH6+iXSvpYYG7VoD0R1onF35GhLPQ4JnkeotxyyNnTnXH1fJEAMcS/ CKyE7bklVuba8ABQpeNZrCf62iJFU9B479xVhka6A2c4UNEs2QPtzjaVK1Jto2Od PcbbxFHfrnJ/vQW5lcnv+6hjTWn3Fj+qx19soHH8OMrfuz1sSMbWq86JBc1D6LD/ OJwD7FsrJGOyIBakN8e7k2iUfl1J6Q6sXF0tyOEdpXk+DrR/iwWAlEHpcvqTL3Ov GHrtXSqbiY3RqNV+Ka0t5svXkw04Cj4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:12 2025 by rpki-client