$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa File: 9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa (raw, json) Hash identifier: Q0Pr0EJOM+8wK2hL9rknw/uo73+rXqCsL22Z1NlcQE0= Subject key identifier: 70:FB:55:DF:FA:48:99:72:C4:BC:9C:11:C1:0C:A2:F1:2D:78:69:1B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFB56FEE3171A3F56B240 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 8987 IP address blocks: 130.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 12 Feb 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fb:56:fe:e3:17:1a:3f:56:b2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=f1f8d079-08d9-4222-afe0-48dcdd2b06aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c5:23:03:b8:da:2e:e5:8d:f1:b5:0a:e3:85: 1a:3f:81:5a:03:25:50:48:c8:cc:95:73:ee:a0:a7: 78:e0:77:0c:da:ac:a7:dc:39:5d:aa:8a:ba:7b:92: 0f:8d:b1:29:a0:12:89:97:02:59:69:f3:c0:f9:17: 51:2d:f6:3f:10:23:ed:73:cb:fc:28:ff:2d:f4:0b: 63:a4:91:cc:a8:78:cf:c8:4e:96:f5:fc:44:45:39: 00:15:a7:b9:71:4c:59:02:51:c4:8a:9c:82:61:f2: aa:ff:7f:31:a0:42:0f:76:d9:4c:1e:3f:69:7f:9a: a1:d3:4e:73:d2:99:09:7f:de:8b:c9:15:16:ee:76: a2:47:07:77:7e:26:c4:39:f9:14:65:e0:e2:21:55: f3:1f:f5:5b:a5:89:8f:c2:b6:99:19:e2:8c:af:bb: 6b:18:b1:0a:e7:7f:87:b4:a0:2d:b0:56:ec:14:3e: 54:ab:e2:1e:fb:e4:01:95:f5:cc:e0:c0:e9:ca:78: 4a:78:71:f7:d2:ce:0b:92:3a:1b:fc:41:f4:23:26: 53:83:4a:ae:83:7e:85:75:17:21:92:f3:cc:8d:6b: ed:e2:b3:9a:04:ca:4e:eb:69:5b:58:58:88:b1:83: 5c:b2:7f:12:81:24:1e:fc:e3:29:fb:8a:ad:1c:cc: 53:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FB:55:DF:FA:48:99:72:C4:BC:9C:11:C1:0C:A2:F1:2D:78:69:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:19:a1:fe:73:d1:47:8f:46:45:87:c2:8e:7b:c1:58:54:94: a0:02:8e:84:98:93:8b:ca:d0:a7:c7:e3:b6:3e:bc:f1:53:50: b4:95:b9:0f:88:e9:74:2f:2e:90:b6:e5:bd:cb:62:62:97:6a: 47:39:5c:9a:49:a4:cc:9d:9c:09:4c:41:80:cf:4c:ca:9d:25: cd:84:51:88:33:89:c3:ed:7d:9b:f6:20:99:51:8f:f5:ed:f7: fe:63:82:e7:fb:36:71:23:77:1d:f4:e1:8c:4a:cb:8e:fb:00: 87:cb:95:dc:a5:1a:17:87:2f:29:84:13:41:e6:c7:c7:bf:03: 64:b4:58:6e:9b:ef:7a:f1:df:8e:ea:74:48:7e:c1:f2:4b:2d: cc:4f:9d:24:35:32:a6:1c:56:00:e4:6c:95:5a:24:54:d5:7c: 56:1a:02:5b:38:62:91:ba:93:6c:87:30:45:1d:2c:f9:91:28: cf:34:42:7a:fe:9a:46:d5:90:69:92:0c:c5:5f:11:fa:44:3a: 3e:b3:1f:d3:fb:e8:ba:af:c1:52:24:f5:dc:88:f3:01:70:b8: 2d:4a:7f:b4:05:56:0b:d4:66:06:ed:5c:df:6b:0f:08:80:d8: 1d:e7:be:4a:c5:d0:59:4b:6d:04:bc:6b:c2:f8:69:e9:76:55: a0:90:77:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/tW/uMXGj9WskAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk ZjFmOGQwNzktMDhkOS00MjIyLWFmZTAtNDhkY2RkMmIwNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2sUjA7jaLuWN8bUK44UaP4FaAyVQSMjMlXPu oKd44HcM2qyn3Dldqoq6e5IPjbEpoBKJlwJZafPA+RdRLfY/ECPtc8v8KP8t9Atj pJHMqHjPyE6W9fxERTkAFae5cUxZAlHEipyCYfKq/38xoEIPdtlMHj9pf5qh005z 0pkJf96LyRUW7naiRwd3fibEOfkUZeDiIVXzH/VbpYmPwraZGeKMr7trGLEK53+H tKAtsFbsFD5Uq+Ie++QBlfXM4MDpynhKeHH30s4Lkjob/EH0IyZTg0qug36FdRch kvPMjWvt4rOaBMpO62lbWFiIsYNcsn8SgSQe/OMp+4qtHMxTGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD7Vd/6SJlyxLycEcEMovEteGkbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWMzMjliMWQtZDQ1OS0z ZDY5LThiZTEtMThkYzFiMjgzN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYZof5z0UePRkWHwo57wVhUlKACjoSYk4vK0KfH47Y+vPFTULSVuQ+I 6XQvLpC25b3LYmKXakc5XJpJpMydnAlMQYDPTMqdJc2EUYgzicPtfZv2IJlRj/Xt 9/5jguf7NnEjdx304YxKy477AIfLldylGheHLymEE0Hmx8e/A2S0WG6b73rx347q dEh+wfJLLcxPnSQ1MqYcVgDkbJVaJFTVfFYaAls4YpG6k2yHMEUdLPmRKM80Qnr+ mkbVkGmSDMVfEfpEOj6zH9P76LqvwVIk9dyI8wFwuC1Kf7QFVgvUZgbtXN9rDwiA 2B3nvkrF0FlLbQS8a8L4ael2VaCQd5s= -----END CERTIFICATE-----Generated at Tue Feb 11 16:22:29 2025 by rpki-client