$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a8fc9116-6ffb-3130-b427-4ce7606b0d76.roa File: a8fc9116-6ffb-3130-b427-4ce7606b0d76.roa (raw, json) Hash identifier: gzN+s/KdmUcIt9pZ6V6mmaRaKdSuAWi/k0fcEsBDcig= Subject key identifier: 10:E8:14:A0:97:B9:43:1E:DF:3D:43:AC:0B:87:87:63:1B:4B:21:85 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848B8F0D180FEC97C781F538140 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a8fc9116-6ffb-3130-b427-4ce7606b0d76.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 21664 IP address blocks: 130.137.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d1:80:fe:c9:7c:78:1f:53:81:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=9b4990db-d5c4-4901-b589-f3f0b43b2446 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bd:18:70:48:59:04:b8:ac:32:3c:6e:d1:d2: 1e:59:f6:45:58:8f:01:d5:b0:d7:ea:7c:d1:7e:65: 36:3c:a5:48:95:30:de:da:af:50:61:e2:88:a6:5a: c7:f7:89:15:26:cf:b8:1f:99:80:82:b6:7a:76:5a: aa:6e:1d:62:23:50:c6:46:12:a8:5b:d8:0a:e0:a0: 21:7b:43:fe:a1:e4:19:48:d0:cf:a5:60:17:5c:e3: 2c:81:48:72:75:02:a2:aa:f0:d6:ff:d4:8d:99:9e: 87:e9:8b:80:fd:e0:59:a4:25:16:e8:54:f9:70:89: 72:99:08:d6:75:b9:17:50:33:08:01:2f:4b:4b:f4: a9:03:a3:30:dd:a7:23:50:72:c9:bf:5c:ba:1f:a1: 47:ee:de:8c:19:0c:3a:b8:00:a6:01:2c:f7:d1:ad: b5:26:28:cb:25:ab:a4:32:96:5f:6d:39:2d:cf:1d: c2:fe:ac:f7:27:35:e9:ff:ce:57:57:99:b0:dc:e5: 88:28:5a:38:db:7c:c8:48:33:3a:aa:c3:89:e2:2a: a8:ef:b5:e0:aa:f9:e1:b3:4e:a4:68:6e:3c:8f:a6: b4:b6:36:f0:60:ef:a6:3d:3a:7c:c3:ce:08:38:f3: 25:92:e5:89:1d:f3:e0:6f:e8:c6:83:2c:6c:30:ea: 17:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E8:14:A0:97:B9:43:1E:DF:3D:43:AC:0B:87:87:63:1B:4B:21:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a8fc9116-6ffb-3130-b427-4ce7606b0d76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:64:1b:56:07:6c:97:65:fc:1e:75:75:62:81:27:9d:96:90: f9:06:be:58:cc:ae:51:74:a7:fb:d4:b2:c4:33:a8:93:2f:2b: a1:5c:80:0a:a3:15:30:be:2c:f9:35:05:2e:3f:23:c5:b2:39: 3d:d2:7e:0c:cf:be:fc:07:23:4c:c8:85:af:07:90:1d:9a:7c: 18:1b:e6:1a:c0:b0:d6:bd:6b:b5:70:43:cb:a1:3b:a2:58:2b: 94:d0:e0:b5:43:ec:08:a0:87:8d:c6:8d:b4:a8:5f:58:cf:bf: b3:33:a2:c8:d0:aa:0e:8d:18:86:7b:63:85:e0:d1:9a:58:19: e3:82:a2:19:5c:54:53:45:34:a2:3c:6e:44:d7:c7:c9:83:88: 84:ab:4c:31:49:71:9f:46:b4:cf:53:e6:65:d0:ba:99:16:94: d4:68:7a:d7:3f:80:5b:4f:40:15:3b:1b:1b:8f:a3:0c:dd:01: 5a:c9:e6:9e:d7:e9:c8:e1:ad:57:45:23:9f:f7:b7:e1:a0:97: 57:2a:4b:92:a2:51:54:75:5b:a7:88:55:da:f1:05:2b:20:fb: cb:8f:51:b1:3a:36:11:2e:ce:bf:1b:bc:d8:f2:0a:80:1e:9f: d1:13:ff:e2:f0:65:f9:be:96:e9:30:4d:fd:37:df:bc:62:28: ce:d1:02:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NGA/sl8eB9TgUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk OWI0OTkwZGItZDVjNC00OTAxLWI1ODktZjNmMGI0M2IyNDQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv70YcEhZBLisMjxu0dIeWfZFWI8B1bDX6nzR fmU2PKVIlTDe2q9QYeKIplrH94kVJs+4H5mAgrZ6dlqqbh1iI1DGRhKoW9gK4KAh e0P+oeQZSNDPpWAXXOMsgUhydQKiqvDW/9SNmZ6H6YuA/eBZpCUW6FT5cIlymQjW dbkXUDMIAS9LS/SpA6Mw3acjUHLJv1y6H6FH7t6MGQw6uACmASz30a21JijLJauk MpZfbTktzx3C/qz3JzXp/85XV5mw3OWIKFo423zISDM6qsOJ4iqo77Xgqvnhs06k aG48j6a0tjbwYO+mPTp8w84IOPMlkuWJHfPgb+jGgyxsMOoXEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDoFKCXuUMe3z1DrAuHh2MbSyGFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYThmYzkxMTYtNmZmYi0z MTMwLWI0MjctNGNlNzYwNmIwZDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFkG1YHbJdl/B51dWKBJ52WkPkGvljMrlF0p/vUssQzqJMvK6FcgAqj FTC+LPk1BS4/I8WyOT3SfgzPvvwHI0zIha8HkB2afBgb5hrAsNa9a7VwQ8uhO6JY K5TQ4LVD7Aigh43GjbSoX1jPv7MzosjQqg6NGIZ7Y4Xg0ZpYGeOCohlcVFNFNKI8 bkTXx8mDiISrTDFJcZ9GtM9T5mXQupkWlNRoetc/gFtPQBU7GxuPowzdAVrJ5p7X 6cjhrVdFI5/3t+Ggl1cqS5KiUVR1W6eIVdrxBSsg+8uPUbE6NhEuzr8bvNjyCoAe n9ET/+LwZfm+lukwTf0337xiKM7RAjw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:57 2025 by rpki-client