$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa File: a3d77e1c-257b-3469-b300-a7bde94c1679.roa (raw, json) Hash identifier: 021RMoVfq+Ct71pOeZihC0yJlTlpoZO0WMSWyyEGDws= Subject key identifier: 20:2F:C8:45:DA:EB:54:06:FA:8B:54:8A:8D:19:BF:D6:6F:30:BF:E7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFDD36838BC38F19B7810 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 14618 IP address blocks: 130.137.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fd:d3:68:38:bc:38:f1:9b:78:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=3a071ebb-8689-4747-806a-d1a45c0e4d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:c9:02:1f:95:10:de:71:47:0d:f7:43:74:fa: 8e:cf:4f:c0:ca:a7:fb:53:33:50:f7:70:8c:38:83: ba:de:1a:ab:3e:9a:7d:93:93:fd:16:40:4a:e5:24: c4:7c:db:14:eb:51:c0:d4:f7:09:93:c8:e6:9a:59: 66:ca:e1:36:b3:56:ea:e3:02:10:ee:48:20:c0:16: f3:5a:ba:5a:46:94:e6:2a:b6:fe:40:6e:4f:65:df: 3d:9d:af:01:9f:9c:80:9d:c7:3f:37:9c:17:b0:bb: 89:47:f5:44:f0:d2:a4:90:87:bb:1a:06:14:69:a4: d1:dd:d9:21:6a:9b:67:39:d2:63:bb:1c:c3:b9:57: 65:ea:e2:fc:df:ac:6b:6f:41:33:73:54:45:98:6b: 05:d5:20:42:76:fc:fa:40:96:65:ed:e2:f0:80:1b: c9:55:c7:5f:19:9b:4d:66:4a:73:16:2f:cd:dd:b9: 1c:0a:2d:c8:27:83:f5:a0:e3:fb:09:4b:64:ee:40: a4:8c:53:92:26:4d:d9:08:14:8b:43:4a:04:76:fa: 3a:d4:45:10:ba:62:8a:56:e5:50:3d:22:b4:e8:fc: ab:07:72:b1:4b:8a:12:54:35:d2:55:82:87:3a:7a: 86:0c:c5:76:e0:31:d3:b3:76:d3:38:22:b0:33:ae: 3b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:2F:C8:45:DA:EB:54:06:FA:8B:54:8A:8D:19:BF:D6:6F:30:BF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5e:69:36:78:d5:54:ab:bd:04:d3:e8:74:69:8a:06:ba:a7: 42:21:e5:00:a4:24:4d:74:d8:0f:5d:de:e3:e8:16:57:fa:0c: 37:de:7e:bc:9c:9f:ea:3d:66:f0:c5:b7:f7:46:36:a6:57:c0: 98:90:18:bb:43:47:65:92:7b:2a:3a:75:2e:50:a4:87:cb:33: 9e:49:e6:d9:da:24:a3:07:da:1a:94:7c:46:e9:3f:b6:b3:f7: 3d:01:8c:da:18:86:18:fd:30:42:b3:66:73:a1:41:6e:f1:12: 26:49:84:c4:49:26:16:d2:76:59:bc:62:f2:03:ef:be:ea:68: 11:9d:20:07:bf:00:02:4e:75:2e:47:12:74:30:82:1b:ca:04: f5:9e:81:ad:2a:83:bc:5c:0e:5f:9c:5f:e9:95:e4:4c:0f:6c: af:50:2d:e2:0a:56:36:08:20:f5:5c:dd:82:95:6a:32:bc:90: a1:ee:2d:60:9c:fd:42:1c:68:f9:85:97:d4:1c:bf:19:c3:23: bd:2e:84:12:13:d2:ac:33:c1:0e:df:13:13:eb:cf:ce:07:d3: 4e:7a:dc:28:05:fc:8d:25:f4:a7:09:16:3b:a6:35:65:c3:e2: 77:07:53:ae:88:7a:e6:4a:fe:e6:44:47:69:81:da:4f:6d:d9: ce:26:dc:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/3TaDi8OPGbeBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk M2EwNzFlYmItODY4OS00NzQ3LTgwNmEtZDFhNDVjMGU0ZDEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ckCH5UQ3nFHDfdDdPqOz0/Ayqf7UzNQ93CM OIO63hqrPpp9k5P9FkBK5STEfNsU61HA1PcJk8jmmllmyuE2s1bq4wIQ7kggwBbz WrpaRpTmKrb+QG5PZd89na8Bn5yAncc/N5wXsLuJR/VE8NKkkIe7GgYUaaTR3dkh aptnOdJjuxzDuVdl6uL836xrb0Ezc1RFmGsF1SBCdvz6QJZl7eLwgBvJVcdfGZtN ZkpzFi/N3bkcCi3IJ4P1oOP7CUtk7kCkjFOSJk3ZCBSLQ0oEdvo61EUQumKKVuVQ PSK06PyrB3KxS4oSVDXSVYKHOnqGDMV24DHTs3bTOCKwM6471wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAvyEXa61QG+otUio0Zv9ZvML/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTNkNzdlMWMtMjU3Yi0z NDY5LWIzMDAtYTdiZGU5NGMxNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNeaTZ41VSrvQTT6HRpiga6p0Ih5QCkJE102A9d3uPoFlf6DDfefryc n+o9ZvDFt/dGNqZXwJiQGLtDR2WSeyo6dS5QpIfLM55J5tnaJKMH2hqUfEbpP7az 9z0BjNoYhhj9MEKzZnOhQW7xEiZJhMRJJhbSdlm8YvID777qaBGdIAe/AAJOdS5H EnQwghvKBPWega0qg7xcDl+cX+mV5EwPbK9QLeIKVjYIIPVc3YKVajK8kKHuLWCc /UIcaPmFl9QcvxnDI70uhBIT0qwzwQ7fExPrz84H00563CgF/I0l9KcJFjumNWXD 4ncHU66IeuZK/uZER2mB2k9t2c4m3Pg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:43 2025 by rpki-client