$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa File: 694c908b-5434-3ef7-9fc2-47fa10e515e5.roa (raw, json) Hash identifier: n7h5cnxI9lxXtPqfK4XR5Ei1WDb4GgcUIizO56Y67+E= Subject key identifier: 7A:95:80:50:F0:86:6C:58:39:DC:7F:DF:0A:1B:07:E3:66:8B:86:59 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848BE862C7D22E5B7B583CF7D80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 58588 IP address blocks: 130.137.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:2c:7d:22:e5:b7:b5:83:cf:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=2b7d5cd9-71a1-49de-a222-71f7ec5df74a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ea:1d:3d:f9:d7:56:f7:96:8c:ae:c4:75:94: 4d:b8:0f:f4:d8:13:9e:c1:77:3f:6f:86:a2:97:1f: 81:84:f3:94:c5:7d:36:54:5b:f3:48:02:af:66:ba: 2e:9c:53:ed:f0:15:49:9c:d2:f4:a2:84:de:29:9f: 53:4b:52:81:c1:c0:73:40:93:70:2d:c1:4b:6e:f4: ae:4c:20:3f:a5:79:75:34:62:68:f9:d3:21:73:f1: 81:56:a7:a5:b6:7b:e8:39:a8:76:e9:df:95:fd:16: f9:f8:9b:b9:af:d4:54:c8:95:f2:e9:63:c1:ea:a1: 2a:7c:fa:ac:16:29:49:10:0f:ad:a3:df:4f:5e:4a: 1a:2d:d9:94:bc:2b:36:13:d3:79:45:d0:17:8c:cd: 0f:51:3d:b1:d0:4b:ad:f0:68:99:7a:da:63:9a:93: e8:06:a6:47:dc:d4:91:40:ee:c4:bf:da:18:31:5f: ca:62:21:fd:2a:e4:80:bf:af:9c:b4:db:1e:6b:cf: 1e:7b:fc:91:77:b7:40:91:4c:ec:e7:27:80:7a:8d: 3f:2f:49:80:24:b3:18:d2:6b:77:e2:7c:0e:da:70: 96:83:6c:c6:f5:6b:7a:ed:d4:fe:cb:a2:b4:13:1e: 8f:85:b4:d7:af:99:6c:f8:18:66:09:ad:41:5a:c6: 8f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:95:80:50:F0:86:6C:58:39:DC:7F:DF:0A:1B:07:E3:66:8B:86:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/694c908b-5434-3ef7-9fc2-47fa10e515e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c7:50:c8:eb:0b:d7:c4:11:f1:a6:59:58:8f:1b:c2:ab:d1: 96:43:38:24:95:c3:a9:4c:22:2c:84:f7:1a:7f:1e:2f:95:13: 48:71:72:37:f0:dc:27:b6:36:66:ee:40:70:96:50:42:60:3c: a0:f4:c3:26:d4:67:49:62:0a:b5:ab:00:eb:03:4a:1e:58:73: f7:08:95:26:c5:26:87:79:3c:b6:58:95:89:50:0a:35:83:69: 2a:b4:83:fa:19:e1:ab:20:94:e4:39:ce:df:60:ba:c9:84:d8: ec:d2:95:34:5c:27:10:ee:c4:f3:d3:07:10:c4:a0:99:a1:19: 62:4a:d8:69:09:48:44:74:f9:9e:d1:c5:8e:f7:a5:94:4e:ca: fb:6f:af:6a:ba:60:b0:bb:3a:d9:b7:2b:ec:e7:05:da:d8:cb: 02:d8:93:a6:15:63:69:6a:68:76:e4:16:de:cf:3a:80:7a:f8: a6:e9:43:00:c4:60:45:c8:91:99:39:4d:e8:90:46:f0:dd:49: 3d:57:5f:07:48:07:ae:44:8a:b6:ab:3c:8f:4c:c6:fc:53:12: a2:c9:a6:3a:9b:53:37:cf:13:a5:c6:b1:f9:81:14:d2:f7:4e: 35:22:72:d0:a8:df:34:82:b3:75:0b:83:7f:f2:6d:d4:ca:0c: 53:62:64:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hix9IuW3tYPPfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MmI3ZDVjZDktNzFhMS00OWRlLWEyMjItNzFmN2VjNWRmNzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhuodPfnXVveWjK7EdZRNuA/02BOewXc/b4ai lx+BhPOUxX02VFvzSAKvZrounFPt8BVJnNL0ooTeKZ9TS1KBwcBzQJNwLcFLbvSu TCA/pXl1NGJo+dMhc/GBVqeltnvoOah26d+V/Rb5+Ju5r9RUyJXy6WPB6qEqfPqs FilJEA+to99PXkoaLdmUvCs2E9N5RdAXjM0PUT2x0Eut8GiZetpjmpPoBqZH3NSR QO7Ev9oYMV/KYiH9KuSAv6+ctNsea88ee/yRd7dAkUzs5yeAeo0/L0mAJLMY0mt3 4nwO2nCWg2zG9Wt67dT+y6K0Ex6PhbTXr5ls+BhmCa1BWsaPrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHqVgFDwhmxYOdx/3wobB+Nmi4ZZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjk0YzkwOGItNTQzNC0z ZWY3LTlmYzItNDdmYTEwZTUxNWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHHUMjrC9fEEfGmWViPG8Kr0ZZDOCSVw6lMIiyE9xp/Hi+VE0hxcjfw 3Ce2NmbuQHCWUEJgPKD0wybUZ0liCrWrAOsDSh5Yc/cIlSbFJod5PLZYlYlQCjWD aSq0g/oZ4asglOQ5zt9gusmE2OzSlTRcJxDuxPPTBxDEoJmhGWJK2GkJSER0+Z7R xY73pZROyvtvr2q6YLC7Otm3K+znBdrYywLYk6YVY2lqaHbkFt7POoB6+KbpQwDE YEXIkZk5TeiQRvDdST1XXwdIB65EirarPI9MxvxTEqLJpjqbUzfPE6XGsfmBFNL3 TjUictCo3zSCs3ULg3/ybdTKDFNiZL0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:49 2025 by rpki-client