$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa File: 99153d29-8d3f-3d62-8907-3ff7fedc7562.roa (raw, json) Hash identifier: yr42EESXWdOhXameFiosejA9huwrT6T1ocLAo2XMA4k= Subject key identifier: 74:7F:84:74:AE:4B:ED:56:10:55:2B:29:29:2C:45:77:D8:B7:83:8D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE8EA7A4614E7332283E0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e8:ea:7a:46:14:e7:33:22:83:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=fd4838f2-ad92-4049-ad7e-f1d50bdf34c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:9a:c7:8c:24:19:a6:c1:69:58:3f:47:09:4c: 8e:8d:0f:d9:a0:c5:ae:0f:88:e9:68:58:e6:1a:86: f5:4b:b4:85:6d:2c:4c:c1:d1:71:80:6a:9a:1e:6a: d5:fc:2f:a2:8d:f2:62:e7:b7:76:e3:aa:22:02:ce: 85:4a:aa:a6:18:e4:e5:ac:92:1a:50:43:ac:b2:84: 3d:bc:53:ce:a7:5d:d8:85:df:51:05:35:87:2c:e2: 46:f3:e1:97:c2:c9:48:9c:58:02:93:47:1d:89:d8: b0:4b:a0:89:00:b3:87:df:ca:35:35:a9:e4:4c:bd: cc:34:d1:b4:72:5c:1d:21:1e:be:5e:c8:08:86:c6: f1:6b:b9:1c:4c:9e:c2:04:e9:66:b9:cf:e3:89:85: ba:87:9c:3b:91:7e:50:0f:9f:28:45:f3:94:ee:5a: 74:9b:9d:1e:d7:23:34:55:4f:71:70:63:dc:ef:3b: 04:ab:ff:25:07:eb:f4:8c:df:09:2a:e9:5f:fb:f3: c9:1e:41:66:db:33:a5:cb:24:55:63:a7:1c:5f:8a: 49:90:48:3f:5e:63:98:cf:d6:27:5f:82:fe:e3:9b: 01:8d:2b:02:c8:ef:7f:58:5f:04:25:6e:81:15:16: 36:f0:2f:b1:8f:97:68:a8:1d:21:2e:1a:dd:0f:aa: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:7F:84:74:AE:4B:ED:56:10:55:2B:29:29:2C:45:77:D8:B7:83:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c9:a6:e2:e0:66:02:32:62:0d:d8:21:a0:6d:71:5c:f4:4d: ea:da:1f:67:d7:05:67:20:8f:d5:24:4e:09:03:f0:11:75:aa: e8:82:2a:3e:e2:48:91:6d:7c:22:8f:44:81:af:75:2a:ed:9d: 1b:57:4c:3b:bd:15:30:80:43:11:d8:20:0c:cf:35:45:c3:9f: 35:8f:6d:3f:ac:3c:06:e8:a3:11:96:64:b5:ea:0b:44:d6:1b: fb:4e:db:b5:65:0d:7a:26:6d:2d:32:b4:ad:f0:bf:f1:86:38: cc:d6:b8:5f:74:12:f8:26:61:25:2d:93:a1:6e:74:cc:41:c9: 45:b0:85:5f:a7:a4:85:c9:c0:88:37:3e:72:4f:14:cb:68:7a: c1:4a:83:55:cc:df:5c:cd:5d:cf:c1:56:57:79:e8:54:4a:72: 5b:09:40:be:7f:4d:fd:24:98:93:79:d1:ee:86:fa:8e:4f:f9: f1:ee:ea:50:3b:9b:f8:b1:74:af:5a:3a:94:ca:53:9b:89:82: 47:17:e1:e3:ba:04:32:5f:7f:4a:11:66:c1:48:d1:33:f0:72: 77:6a:43:04:ec:9a:23:4e:b9:83:3a:a4:62:f4:93:e2:3e:67: 2a:f4:19:1b:14:56:21:e4:30:91:ac:fa:ef:e2:7a:92:8d:a1: ca:84:40:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCujqekYU5zMig+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmQ0ODM4ZjItYWQ5Mi00MDQ5LWFkN2UtZjFkNTBiZGYzNGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJrHjCQZpsFpWD9HCUyOjQ/ZoMWuD4jpaFjm Gob1S7SFbSxMwdFxgGqaHmrV/C+ijfJi57d246oiAs6FSqqmGOTlrJIaUEOssoQ9 vFPOp13Yhd9RBTWHLOJG8+GXwslInFgCk0cdidiwS6CJALOH38o1NankTL3MNNG0 clwdIR6+XsgIhsbxa7kcTJ7CBOlmuc/jiYW6h5w7kX5QD58oRfOU7lp0m50e1yM0 VU9xcGPc7zsEq/8lB+v0jN8JKulf+/PJHkFm2zOlyyRVY6ccX4pJkEg/XmOYz9Yn X4L+45sBjSsCyO9/WF8EJW6BFRY28C+xj5doqB0hLhrdD6qyiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHR/hHSuS+1WEFUrKSksRXfYt4ONMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTkxNTNkMjktOGQzZi0z ZDYyLTg5MDctM2ZmN2ZlZGM3NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzJpuLgZgIyYg3YIaBtcVz0TeraH2fXBWcgj9UkTgkD8BF1quiCKj7i SJFtfCKPRIGvdSrtnRtXTDu9FTCAQxHYIAzPNUXDnzWPbT+sPAbooxGWZLXqC0TW G/tO27VlDXombS0ytK3wv/GGOMzWuF90EvgmYSUtk6FudMxByUWwhV+npIXJwIg3 PnJPFMtoesFKg1XM31zNXc/BVld56FRKclsJQL5/Tf0kmJN50e6G+o5P+fHu6lA7 m/ixdK9aOpTKU5uJgkcX4eO6BDJff0oRZsFI0TPwcndqQwTsmiNOuYM6pGL0k+I+ Zyr0GRsUViHkMJGs+u/iepKNocqEQHw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:37 2025 by rpki-client