$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa File: b25229d3-4780-395b-a983-7680c9a0ca5d.roa (raw, json) Hash identifier: MD27A3kUrJ8hOvvUl/FbQs4durDkxtlQcTe5VAUjLLQ= Subject key identifier: DA:CD:48:A4:DE:E1:39:09:F7:D6:CE:A4:C3:28:29:BE:32:5F:12:79 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483E1AA8BB039A2A014317E0C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a8:bb:03:9a:2a:01:43:17:e0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=3e156654-783f-4082-9259-b236238838eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:21:ab:e6:88:ee:3b:62:38:05:80:16:2d:cd: c5:54:af:8f:9a:fa:25:d6:d3:45:42:4c:5f:39:6d: 28:58:b5:e8:45:08:17:91:01:a6:66:a5:cf:f1:b1: 52:6b:ae:92:3f:f8:13:5d:68:cb:ea:db:8b:d3:28: 5f:01:83:a0:13:4c:16:46:3c:35:b5:11:ea:71:bd: ac:ec:b0:5e:95:ac:a0:ab:23:2a:6c:91:6d:22:00: 2c:6b:a9:5d:c5:ff:2b:ee:48:c6:60:db:45:d2:90: 71:0e:00:72:74:f4:e2:1c:14:3d:4c:90:89:23:79: df:c4:a0:86:43:89:79:6b:a5:7d:46:0d:12:62:5a: 02:b5:c5:d0:89:0c:02:0e:2a:f2:59:82:9e:49:18: 45:7f:31:be:42:aa:50:16:8d:7d:52:c9:66:d3:83: 2e:d3:3b:bd:13:7d:7b:5a:cc:9f:45:e5:d9:08:d8: 9f:ca:7a:f7:20:b9:75:e5:21:87:49:5d:2e:d3:25: ea:a6:af:3b:97:4d:31:83:7d:44:e2:d5:85:ad:40: 2b:04:c1:b1:ae:37:05:d7:42:4b:45:19:09:e6:6d: 83:41:db:e4:c6:8a:58:ff:17:dd:5b:56:5b:f3:1e: 12:fb:b9:d9:68:4c:97:a0:24:72:78:e9:d9:62:5d: 39:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CD:48:A4:DE:E1:39:09:F7:D6:CE:A4:C3:28:29:BE:32:5F:12:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b25229d3-4780-395b-a983-7680c9a0ca5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:53:d9:fb:c1:4b:9d:14:cd:c7:a1:70:02:f1:40:b3:2a:64: ef:09:cf:b6:c0:2d:1c:62:ab:d2:ed:0b:02:6b:1c:bb:13:c7: 85:bc:90:86:eb:e6:0b:08:46:8d:4a:db:72:20:1b:b5:8c:c6: 4c:c9:33:be:b9:b8:e0:3b:00:87:88:09:dc:3a:36:ce:1a:db: d6:19:a3:26:53:c4:bc:5f:19:ca:13:f5:b2:be:52:09:3a:69: e7:10:02:48:dc:df:53:8c:1c:f7:aa:4f:b8:f8:6e:cb:93:86: 8b:1e:8a:2d:9d:7d:75:35:c8:91:93:23:a8:61:c9:46:af:cf: e7:ac:b4:75:c4:9e:02:a3:35:3f:cb:88:00:78:61:61:d7:ce: 39:e9:b0:98:0c:da:89:45:0f:0e:16:34:af:da:64:31:38:f7: c7:1a:71:9f:fa:20:e9:b3:d1:36:05:97:c0:79:95:9e:9e:b8: 18:94:ea:fb:16:4a:2d:81:dc:81:9d:12:62:ab:51:d5:14:72: 74:4d:64:f3:08:27:32:26:18:0d:11:41:c2:cd:4a:82:84:10: 74:f3:df:e1:5f:bc:cd:2b:e9:14:d4:10:56:9a:d5:7f:b6:0b: 54:89:03:a9:e2:61:d1:6e:a3:7f:2e:9a:9d:07:9e:07:06:86: 54:a6:33:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gqi7A5oqAUMX4MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk M2UxNTY2NTQtNzgzZi00MDgyLTkyNTktYjIzNjIzODgzOGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSGr5ojuO2I4BYAWLc3FVK+Pmvol1tNFQkxf OW0oWLXoRQgXkQGmZqXP8bFSa66SP/gTXWjL6tuL0yhfAYOgE0wWRjw1tRHqcb2s 7LBelaygqyMqbJFtIgAsa6ldxf8r7kjGYNtF0pBxDgBydPTiHBQ9TJCJI3nfxKCG Q4l5a6V9Rg0SYloCtcXQiQwCDiryWYKeSRhFfzG+QqpQFo19Uslm04Mu0zu9E317 WsyfReXZCNifynr3ILl15SGHSV0u0yXqpq87l00xg31E4tWFrUArBMGxrjcF10JL RRkJ5m2DQdvkxopY/xfdW1Zb8x4S+7nZaEyXoCRyeOnZYl05uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrNSKTe4TkJ99bOpMMoKb4yXxJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjI1MjI5ZDMtNDc4MC0z OTViLWE5ODMtNzY4MGM5YTBjYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFT2fvBS50UzcehcALxQLMqZO8Jz7bALRxiq9LtCwJrHLsTx4W8kIbr 5gsIRo1K23IgG7WMxkzJM765uOA7AIeICdw6Ns4a29YZoyZTxLxfGcoT9bK+Ugk6 aecQAkjc31OMHPeqT7j4bsuThoseii2dfXU1yJGTI6hhyUavz+estHXEngKjNT/L iAB4YWHXzjnpsJgM2olFDw4WNK/aZDE498cacZ/6IOmz0TYFl8B5lZ6euBiU6vsW Si2B3IGdEmKrUdUUcnRNZPMIJzImGA0RQcLNSoKEEHTz3+FfvM0r6RTUEFaa1X+2 C1SJA6niYdFuo38ump0HngcGhlSmMxU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:23 2025 by rpki-client