$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa File: a0be746d-3ade-308a-8935-9ce4590d0cee.roa (raw, json) Hash identifier: 1DGQmOGmn22G1+w/AHWsODlWHhF11hp+gaqvEtJzq5o= Subject key identifier: 74:8A:7A:80:C3:2B:29:2E:F1:F2:4C:9E:0D:FC:CA:B0:D0:CA:D5:34 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE87680BCA628D9CAC700 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e8:76:80:bc:a6:28:d9:ca:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=e301d262-9d3b-4b95-9363-45265ffc285a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:45:c9:58:1d:a2:dd:48:a5:87:a4:79:7f:87: 79:21:7c:32:fb:4f:f0:89:a7:c1:6e:3f:6a:47:07: e8:9a:53:56:85:a5:9b:9a:78:01:97:8b:23:da:80: b8:c1:be:12:ea:36:92:6a:1d:ca:f8:de:07:ff:da: 0e:24:63:1a:64:00:68:20:c6:2f:41:a0:fa:24:0b: 43:38:6f:3b:06:3e:86:87:24:f3:74:17:12:fa:59: 4f:55:57:3c:f7:76:c3:8a:33:2f:61:48:29:c3:47: cd:98:a5:51:6d:cd:db:64:16:d2:ff:e6:b9:be:c8: 9d:d2:10:c4:21:5f:f7:60:b2:91:0f:c8:88:8f:9e: e5:3f:e7:a8:97:58:55:6d:f6:6b:25:4d:b7:4f:47: b4:3a:8b:3c:d1:ec:25:29:a6:7d:a8:29:8b:21:9c: 90:15:d1:81:82:91:96:58:79:67:34:e8:3a:6b:43: 62:46:ce:7c:86:2c:9e:5c:16:80:b0:1e:ad:fd:73: 04:07:92:9d:99:a0:4a:b4:de:7b:43:91:30:94:45: f7:24:cf:17:6e:a2:c3:6a:70:df:e6:92:a7:7c:d4: 02:5e:29:b0:00:61:f5:75:a3:77:38:bc:45:5f:54: 47:53:7b:80:6f:3d:4d:a2:0a:1f:ba:02:70:9b:cb: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:8A:7A:80:C3:2B:29:2E:F1:F2:4C:9E:0D:FC:CA:B0:D0:CA:D5:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:08:c2:80:11:5b:cf:6a:f1:fc:50:f5:15:f2:b6:9b:2c:2f: 2d:1a:f3:2b:7f:1b:bd:b7:02:4f:05:59:7d:d1:52:d5:d8:29: d9:1c:f0:71:34:56:5f:1e:90:f4:9b:1b:16:9b:a2:04:6f:12: 32:a3:79:39:eb:b9:9a:8d:45:94:27:c6:28:22:a9:c6:83:94: a4:d3:d0:c6:2a:47:c1:eb:92:d0:b1:39:d1:0b:7e:6d:d4:e3: 96:2f:68:ba:b0:ae:ee:df:c7:a3:c1:95:96:27:f7:dc:8b:c1: 17:4a:0a:4a:49:ad:70:d5:4d:6d:50:8f:95:b7:99:96:60:d5: d2:24:d5:14:5a:e6:29:4f:ed:ad:49:7a:02:b4:a4:b3:b2:c8: 7c:4d:27:32:c5:a3:6f:e6:08:6a:89:73:0c:ce:44:30:cc:c4: 4d:4f:c9:81:6b:4a:49:b1:70:10:a3:f9:10:9e:f8:4b:12:e2: a9:6e:0e:7a:75:59:d1:48:fc:5e:53:92:67:b8:be:e0:a4:d4: da:fe:b8:33:36:c8:4b:9d:d9:a8:4a:de:37:df:67:ea:99:a9: 99:ca:2c:3d:70:7f:7f:0b:ef:f0:d8:c4:e5:80:3e:a7:ec:bf: 35:7b:64:c3:d5:e8:9f:7e:9d:32:37:b0:f7:46:4b:df:a0:f7: f1:68:92:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuh2gLymKNnKxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTMwMWQyNjItOWQzYi00Yjk1LTkzNjMtNDUyNjVmZmMyODVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikXJWB2i3Uilh6R5f4d5IXwy+0/wiafBbj9q RwfomlNWhaWbmngBl4sj2oC4wb4S6jaSah3K+N4H/9oOJGMaZABoIMYvQaD6JAtD OG87Bj6GhyTzdBcS+llPVVc893bDijMvYUgpw0fNmKVRbc3bZBbS/+a5vsid0hDE IV/3YLKRD8iIj57lP+eol1hVbfZrJU23T0e0Oos80ewlKaZ9qCmLIZyQFdGBgpGW WHlnNOg6a0NiRs58hiyeXBaAsB6t/XMEB5KdmaBKtN57Q5EwlEX3JM8XbqLDanDf 5pKnfNQCXimwAGH1daN3OLxFX1RHU3uAbz1NogofugJwm8siFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSKeoDDKyku8fJMng38yrDQytU0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTBiZTc0NmQtM2FkZS0z MDhhLTg5MzUtOWNlNDU5MGQwY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4IwoARW89q8fxQ9RXytpssLy0a8yt/G723Ak8FWX3RUtXYKdkc8HE0 Vl8ekPSbGxabogRvEjKjeTnruZqNRZQnxigiqcaDlKTT0MYqR8HrktCxOdELfm3U 45YvaLqwru7fx6PBlZYn99yLwRdKCkpJrXDVTW1Qj5W3mZZg1dIk1RRa5ilP7a1J egK0pLOyyHxNJzLFo2/mCGqJcwzORDDMxE1PyYFrSkmxcBCj+RCe+EsS4qluDnp1 WdFI/F5Tkme4vuCk1Nr+uDM2yEud2ahK3jffZ+qZqZnKLD1wf38L7/DYxOWAPqfs vzV7ZMPV6J9+nTI3sPdGS9+g9/FoknA= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:38 2025 by rpki-client