$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa File: a0be746d-3ade-308a-8935-9ce4590d0cee.roa (raw, json) Hash identifier: yN/QIAU1v/LD77MJjxqJ6SbAo4sfCWOPE3YlJfdyi9A= Subject key identifier: 33:10:0F:BE:43:14:6A:F3:89:A3:3B:F1:83:4C:B9:FF:97:EF:33:20 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285845B383680B9EF120A1EAA1DD00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa Signing time: Mon 29 Apr 2024 01:00:25 +0000 ROA not before: Mon 29 Apr 2024 01:00:25 +0000 ROA not after: Sun 28 Jul 2024 01:00:25 +0000 asID: 8987 IP address blocks: 130.137.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:b3:83:68:0b:9e:f1:20:a1:ea:a1:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 29 01:00:25 2024 GMT Not After : Jul 28 01:00:25 2024 GMT Subject: CN=8b559563-c2ec-4761-8de0-492101482164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:0c:22:d9:54:df:e9:cd:06:5c:56:ae:5c:4b: d1:6e:96:d5:e4:73:c5:34:0a:d2:dd:4d:8e:a1:1c: 9e:a6:2e:09:88:0f:7f:bf:93:60:f3:1c:c1:5f:4b: af:30:f5:32:4e:c2:58:46:b4:d8:87:68:7f:63:97: 5b:b9:72:10:92:77:13:09:67:65:cd:f8:dc:e6:e0: 52:af:22:c1:e1:d0:97:8b:c6:3e:cf:b1:c0:70:34: e4:67:5e:1b:40:f7:b0:75:02:5f:eb:29:17:d6:35: e1:0c:c7:da:e1:ed:a9:a5:61:c2:be:bd:07:3f:c2: 97:71:03:6a:d9:f0:eb:c0:88:51:bf:4c:9f:e9:45: 33:92:53:93:a9:a1:46:c6:01:40:e4:0b:23:a7:7c: 54:8e:a6:a0:4d:d1:ab:2a:c8:aa:fd:7a:db:f1:14: 06:04:fa:ef:e4:e2:1b:47:de:95:1e:c2:8a:74:ae: 0a:10:0b:80:e1:e1:0b:d4:f6:7d:d9:b7:1b:76:b6: 29:4f:21:42:00:de:92:8a:28:4b:2e:02:54:16:2c: b6:1b:ec:62:4c:08:19:97:a4:4f:bf:42:56:20:f1: 0c:37:2f:98:22:72:9d:66:ff:d8:6f:97:67:72:4d: ce:71:44:8c:5b:5b:ec:ed:dc:49:5c:c1:3d:13:46: 5e:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:10:0F:BE:43:14:6A:F3:89:A3:3B:F1:83:4C:B9:FF:97:EF:33:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a0be746d-3ade-308a-8935-9ce4590d0cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6f:2f:37:7c:74:db:0d:bb:b9:20:2e:9d:0f:79:96:06:b6: d6:80:a5:4c:a1:d7:30:43:51:95:66:de:17:47:e7:b9:80:8a: 9f:88:93:59:02:74:c5:fa:c7:cc:3e:7b:ff:3c:13:23:a0:be: f2:3e:f4:93:c3:8d:da:cb:38:f2:e7:83:da:cf:e7:05:f1:60: 31:83:32:30:85:4d:ee:4e:4d:52:65:10:84:25:36:09:e8:0e: 85:f1:93:41:f9:15:ec:55:7b:f7:30:5e:0c:dd:f8:c6:81:53: 84:50:ff:61:a4:a4:2a:a8:4e:4c:80:7a:d8:07:ea:a4:dd:71: 9b:dc:21:4b:17:44:de:5d:9f:b4:a5:b2:b4:ae:e3:f9:93:04: f5:b8:bc:80:ae:d5:f6:ae:90:a0:0d:4a:9b:a6:8b:57:69:84: 82:72:32:4a:5a:ed:f7:57:33:36:0b:ea:48:53:9d:ad:26:77: cc:9a:22:0a:56:14:9f:19:58:a7:b5:50:5a:50:fb:b9:88:cf: 8a:07:9c:b7:0b:a6:c6:28:e4:27:e7:d2:c3:16:bd:d4:77:3d: b9:37:d8:7a:a1:27:62:23:45:7f:82:02:c0:3b:70:87:6b:9d: 21:1e:bd:94:86:0f:40:1c:7a:42:10:c7:28:87:c7:06:0b:33: 53:66:65:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWzg2gLnvEgoeqh3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MDQyOTAxMDAyNVoXDTI0MDcyODAxMDAyNVowLzEtMCsGA1UEAxMk OGI1NTk1NjMtYzJlYy00NzYxLThkZTAtNDkyMTAxNDgyMTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQwi2VTf6c0GXFauXEvRbpbV5HPFNArS3U2O oRyepi4JiA9/v5Ng8xzBX0uvMPUyTsJYRrTYh2h/Y5dbuXIQkncTCWdlzfjc5uBS ryLB4dCXi8Y+z7HAcDTkZ14bQPewdQJf6ykX1jXhDMfa4e2ppWHCvr0HP8KXcQNq 2fDrwIhRv0yf6UUzklOTqaFGxgFA5Asjp3xUjqagTdGrKsiq/Xrb8RQGBPrv5OIb R96VHsKKdK4KEAuA4eEL1PZ92bcbdrYpTyFCAN6SiihLLgJUFiy2G+xiTAgZl6RP v0JWIPEMNy+YInKdZv/Yb5dnck3OcUSMW1vs7dxJXME9E0ZewwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMQD75DFGrziaM78YNMuf+X7zMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTBiZTc0NmQtM2FkZS0z MDhhLTg5MzUtOWNlNDU5MGQwY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxvLzd8dNsNu7kgLp0PeZYGttaApUyh1zBDUZVm3hdH57mAip+Ik1kC dMX6x8w+e/88EyOgvvI+9JPDjdrLOPLng9rP5wXxYDGDMjCFTe5OTVJlEIQlNgno DoXxk0H5FexVe/cwXgzd+MaBU4RQ/2GkpCqoTkyAetgH6qTdcZvcIUsXRN5dn7Sl srSu4/mTBPW4vICu1faukKANSpumi1dphIJyMkpa7fdXMzYL6khTna0md8yaIgpW FJ8ZWKe1UFpQ+7mIz4oHnLcLpsYo5Cfn0sMWvdR3Pbk32HqhJ2IjRX+CAsA7cIdr nSEevZSGD0AcekIQxyiHxwYLM1NmZTM= -----END CERTIFICATE-----Generated at Mon May 6 02:03:00 2024 by rpki-client on console-fra.rpki-client.org