$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa File: af81503f-94d7-3c4a-82d3-477d600d79fc.roa (raw, json) Hash identifier: WNTldvxHPiFHn9K7iIm4SmSh9dFxqrpV6P9xT6g40xI= Subject key identifier: 75:3C:24:4C:E3:8C:10:0D:B4:5F:BF:1A:C2:34:26:B5:18:49:04:EE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE8B21A399EB4C9DF9B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e8:b2:1a:39:9e:b4:c9:df:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=d1852c03-f9ef-47ff-968c-597a719a5ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:61:20:61:a9:b3:dc:5c:05:95:21:f8:42:d0: cf:40:17:b4:6b:f9:b8:14:04:d9:35:ff:5d:eb:42: 0d:f7:f8:07:3e:65:9e:45:7d:26:f2:00:02:5f:1c: 1f:1b:ad:c6:d7:d7:45:34:e0:cf:ad:2f:53:1f:89: ec:03:86:cf:18:ab:3a:b6:39:65:7c:43:78:01:4e: d8:ec:ac:9f:82:08:93:ff:b5:9b:be:3b:3f:89:65: bd:f0:f1:11:31:75:0c:06:5c:57:c0:5c:e5:0b:14: 88:42:ad:87:fe:e9:1f:5a:0b:b0:10:84:1c:13:0d: 2f:0d:df:1e:ea:54:f0:56:09:d2:4a:f6:3b:65:42: 70:e9:63:72:fc:61:da:54:3a:ab:a6:0a:de:6d:8a: d0:e2:63:d9:21:4c:d2:63:46:40:25:64:c5:35:1e: 39:0d:03:fe:07:d2:c4:11:b1:a2:5a:b3:8a:da:d9: 9e:ff:01:ea:2a:85:05:47:e2:cc:96:33:7d:ce:5f: af:16:a9:50:dc:b8:d1:4a:65:98:f9:31:4c:85:9a: 02:4f:fe:2d:3c:65:36:c1:b1:82:e0:fd:05:df:36: 81:e3:f1:a1:38:3d:ff:73:50:c4:f4:40:6d:a8:81: 23:ec:9c:5b:dc:e8:f7:4e:54:c7:35:bb:56:61:3d: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3C:24:4C:E3:8C:10:0D:B4:5F:BF:1A:C2:34:26:B5:18:49:04:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:39:cb:3b:43:d9:d1:d7:3a:76:44:e1:f5:c4:ae:06:29:2b: 07:8e:c6:da:3a:8d:5a:12:78:a9:1b:c7:51:c1:35:53:ea:8e: 09:bd:7d:68:4a:e9:19:7b:6a:db:23:2d:ae:d9:e9:f0:8b:6a: 2f:a9:c7:0e:c5:6d:9b:c3:fd:0c:e2:47:63:95:57:ca:81:86: 2f:03:9b:92:79:ed:f6:af:ef:4a:76:8a:9c:77:ed:9f:90:92: 43:da:82:2a:15:9d:80:0c:45:5c:34:b0:d2:61:73:8e:9f:05: 12:58:09:2a:7d:cb:bc:18:35:af:70:91:14:85:bb:dc:c8:0f: 29:12:88:b3:9c:ce:71:83:98:aa:15:07:28:d6:68:27:15:3f: e4:86:b7:1a:82:34:f5:01:0e:72:15:de:82:a4:4c:d4:40:ac: 24:27:2e:3a:ac:93:30:59:27:c7:25:82:e2:57:14:f4:80:1b: 51:7c:30:f9:43:ec:46:f4:0b:86:07:d1:24:5f:cb:dc:a7:b7: 30:ba:80:fe:20:3d:b9:2a:9f:d5:0e:dc:49:7b:da:12:fa:b0: a9:22:8e:66:63:c1:9c:41:f2:15:43:d4:c7:89:1c:0b:52:c5: de:74:6c:11:ca:e9:60:94:14:f3:f1:8c:ab:16:f2:90:9d:90: 49:2f:5b:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuiyGjmetMnfmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDE4NTJjMDMtZjllZi00N2ZmLTk2OGMtNTk3YTcxOWE1Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGEgYamz3FwFlSH4QtDPQBe0a/m4FATZNf9d 60IN9/gHPmWeRX0m8gACXxwfG63G19dFNODPrS9TH4nsA4bPGKs6tjllfEN4AU7Y 7KyfggiT/7Wbvjs/iWW98PERMXUMBlxXwFzlCxSIQq2H/ukfWguwEIQcEw0vDd8e 6lTwVgnSSvY7ZUJw6WNy/GHaVDqrpgrebYrQ4mPZIUzSY0ZAJWTFNR45DQP+B9LE EbGiWrOK2tme/wHqKoUFR+LMljN9zl+vFqlQ3LjRSmWY+TFMhZoCT/4tPGU2wbGC 4P0F3zaB4/GhOD3/c1DE9EBtqIEj7Jxb3Oj3TlTHNbtWYT0X3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHU8JEzjjBANtF+/GsI0JrUYSQTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWY4MTUwM2YtOTRkNy0z YzRhLTgyZDMtNDc3ZDYwMGQ3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF85yztD2dHXOnZE4fXErgYpKweOxto6jVoSeKkbx1HBNVPqjgm9fWhK 6Rl7atsjLa7Z6fCLai+pxw7FbZvD/QziR2OVV8qBhi8Dm5J57fav70p2ipx37Z+Q kkPagioVnYAMRVw0sNJhc46fBRJYCSp9y7wYNa9wkRSFu9zIDykSiLOcznGDmKoV ByjWaCcVP+SGtxqCNPUBDnIV3oKkTNRArCQnLjqskzBZJ8clguJXFPSAG1F8MPlD 7Eb0C4YH0SRfy9yntzC6gP4gPbkqn9UO3El72hL6sKkijmZjwZxB8hVD1MeJHAtS xd50bBHK6WCUFPPxjKsW8pCdkEkvWwE= -----END CERTIFICATE-----Generated at Fri Mar 14 08:38:19 2025 by rpki-client