$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa File: 6ef338cd-c610-38f3-be69-d15fa5352ab1.roa (raw, json) Hash identifier: rXtAUYv6lWgJMM/4IuzT683DnivGdlg7KQ6zuCZlSxI= Subject key identifier: 36:AB:20:F7:02:1A:60:38:B5:20:2A:C7:17:94:78:BF:7D:58:54:B3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848090FB1B7FB481D5321505400 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 130.137.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:b1:b7:fb:48:1d:53:21:50:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=ef6b276e-903b-42a7-903d-63e926e76bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:40:e5:f5:fa:ae:2b:84:b4:93:e5:68:9e: 37:13:e4:16:33:60:a4:60:81:55:d6:fb:85:23:8c: 15:45:ed:6c:73:60:0d:32:53:77:94:6a:30:9b:a4: 6d:50:c5:cb:fb:ed:73:e1:a1:7e:fd:a7:55:2a:fe: cd:5c:45:d3:d0:48:86:43:dd:85:3d:e6:ce:75:fc: 53:88:8f:1d:3d:75:87:06:b6:52:85:5c:6b:33:3f: 65:a2:3c:7c:7f:f9:a8:29:84:7a:ac:91:26:2d:25: 10:4f:03:9b:74:98:53:90:8c:a3:0e:28:c6:32:a8: 6c:85:d6:20:2b:bb:be:2c:09:4b:81:53:ea:e7:e6: 01:fa:f2:d5:3e:a2:61:e7:bc:83:4e:7f:db:e0:59: 92:6d:c7:01:b7:b6:af:f3:3b:54:66:a6:bf:95:e6: fc:f7:25:cd:ed:89:8d:52:2b:23:2d:af:a5:3d:bd: 4c:58:be:e3:96:ce:a0:dd:60:c4:fe:c5:8d:a8:93: a9:95:2a:c4:60:c9:b3:04:16:bf:33:48:f4:93:82: 58:eb:f1:8a:c2:c8:ce:65:56:1c:9e:ca:69:f8:96: 45:af:80:d4:d9:a3:da:72:59:c2:f8:14:15:0d:e8: ef:3e:21:e2:96:28:4e:f7:d9:96:56:53:7f:f8:b7: 47:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:AB:20:F7:02:1A:60:38:B5:20:2A:C7:17:94:78:BF:7D:58:54:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6ef338cd-c610-38f3-be69-d15fa5352ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:50:30:2a:f1:91:83:dc:fe:e7:3c:d2:1e:63:14:a0:74:6b: 80:ff:9a:e3:44:eb:a3:c4:75:46:2d:47:6b:09:a7:de:75:78: 3b:72:d9:cb:3e:80:31:10:e3:af:44:9e:5d:7d:47:6f:6f:dd: 3c:02:2a:72:73:01:cf:66:18:2c:03:bd:a2:d7:3c:19:e0:10: b6:a8:e2:c0:78:1d:7a:7d:12:03:37:ed:b1:97:b4:f9:2f:59: 52:ef:00:b8:8d:52:32:a1:56:7d:01:4f:c8:55:8e:90:ac:6c: 22:4f:15:33:a4:03:e5:25:87:11:b5:c6:ba:f0:49:b3:6e:c4: e0:4f:50:77:eb:1e:e9:7d:89:bd:31:ce:8b:75:64:88:f1:43: 30:d5:e7:6d:c5:a3:2f:96:b9:18:ac:ca:d6:13:38:0f:2c:02: 1d:0c:55:4b:be:8f:04:b2:22:22:8b:68:3e:83:82:0a:83:eb: 69:66:93:61:23:07:03:01:99:32:b2:11:71:f6:6d:17:36:b7: 2a:79:ec:4b:ed:ce:2a:e5:2b:f3:32:a7:b4:92:f3:71:33:2a: dd:01:4c:f8:e7:7f:0a:f9:2e:5c:74:0b:f8:03:99:fc:11:be: 1f:65:df:d3:49:56:37:50:97:4e:5d:47:b3:69:18:bb:87:fc: 21:82:23:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7G3+0gdUyFQVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk ZWY2YjI3NmUtOTAzYi00MmE3LTkwM2QtNjNlOTI2ZTc2YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLJA5fX6riuEtJPlaJ43E+QWM2CkYIFV1vuF I4wVRe1sc2ANMlN3lGowm6RtUMXL++1z4aF+/adVKv7NXEXT0EiGQ92FPebOdfxT iI8dPXWHBrZShVxrMz9lojx8f/moKYR6rJEmLSUQTwObdJhTkIyjDijGMqhshdYg K7u+LAlLgVPq5+YB+vLVPqJh57yDTn/b4FmSbccBt7av8ztUZqa/leb89yXN7YmN UisjLa+lPb1MWL7jls6g3WDE/sWNqJOplSrEYMmzBBa/M0j0k4JY6/GKwsjOZVYc nspp+JZFr4DU2aPaclnC+BQVDejvPiHilihO99mWVlN/+LdHGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDarIPcCGmA4tSAqxxeUeL99WFSzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNmVmMzM4Y2QtYzYxMC0z OGYzLWJlNjktZDE1ZmE1MzUyYWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5QMCrxkYPc/uc80h5jFKB0a4D/muNE66PEdUYtR2sJp951eDty2cs+ gDEQ469Enl19R29v3TwCKnJzAc9mGCwDvaLXPBngELao4sB4HXp9EgM37bGXtPkv WVLvALiNUjKhVn0BT8hVjpCsbCJPFTOkA+UlhxG1xrrwSbNuxOBPUHfrHul9ib0x zot1ZIjxQzDV523Foy+WuRisytYTOA8sAh0MVUu+jwSyIiKLaD6DggqD62lmk2Ej BwMBmTKyEXH2bRc2typ57EvtzirlK/Myp7SS83EzKt0BTPjnfwr5Llx0C/gDmfwR vh9l39NJVjdQl05dR7NpGLuH/CGCI0k= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:03 2025 by rpki-client