$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa File: b8891b9b-22d6-354f-9592-c7a2be892635.roa (raw, json) Hash identifier: JqUYnBWgbLUPrnpL15W5U8jH5hNTsAYZCRDm285tEls= Subject key identifier: 76:01:9E:FA:47:9E:EF:4C:59:92:CD:B4:8F:3B:B9:AA:4F:6A:B7:22 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584569885974F5A861CBB2953A80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa Signing time: Tue 02 Apr 2024 13:00:37 +0000 ROA not before: Tue 02 Apr 2024 13:00:37 +0000 ROA not after: Mon 01 Jul 2024 13:00:37 +0000 asID: 16509 IP address blocks: 130.137.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:69:88:59:74:f5:a8:61:cb:b2:95:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 2 13:00:37 2024 GMT Not After : Jul 1 13:00:37 2024 GMT Subject: CN=d6c885e1-577e-46d6-a407-9e7f29eff511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:26:e7:e8:ce:55:b0:35:b9:11:8c:45:01:ac: 73:b6:21:bc:ca:74:16:eb:0d:c5:54:31:5a:64:1a: c1:98:b7:84:03:b4:a8:e2:4b:7b:14:c1:63:e9:1d: b1:6b:45:b0:f7:59:17:6b:9b:a5:c1:51:79:aa:c0: 7e:db:79:7e:ab:64:10:c6:67:24:7d:c4:20:81:4c: c7:57:ad:b3:bd:8f:06:e4:20:c0:32:b6:18:33:9c: 76:7b:fd:19:b0:04:34:73:5c:6a:eb:7c:88:ad:ff: 91:3c:bd:20:79:70:c7:a4:f7:c6:03:7b:bb:7f:55: f0:fb:0c:b3:9d:ed:6c:b9:5c:27:5e:7e:a8:26:a0: b7:1d:f3:19:4f:ca:e7:c8:6c:f0:35:e3:b4:b4:f9: fa:73:e8:01:87:82:05:bc:24:77:26:9d:be:26:d1: 0e:b3:73:e3:da:3d:5a:86:4b:ec:75:35:9a:f8:06: d2:63:2b:e0:a0:36:f8:ca:50:4b:77:21:a2:bd:6a: aa:dd:75:05:67:07:86:8c:5e:a9:07:72:5c:0e:be: 5b:6b:8f:2c:33:40:6f:64:5a:b2:19:b2:f5:7c:84: 86:a4:d6:10:f7:71:f9:56:67:1a:63:4d:d0:b7:f3: 00:f1:4f:16:ff:a6:ac:16:f0:c5:cd:1e:ce:d3:5b: 0d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:01:9E:FA:47:9E:EF:4C:59:92:CD:B4:8F:3B:B9:AA:4F:6A:B7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:45:52:81:9d:d9:28:0b:32:12:80:30:65:9e:18:ec:c5:a8: 71:5d:2e:2c:e3:d4:10:12:6d:a5:31:5c:37:7d:99:0e:84:41: 1f:2d:48:0e:a0:0a:01:02:36:3e:b3:89:82:42:b0:05:3a:b1: e9:ee:d7:39:5b:3e:78:6e:ad:35:7e:16:f8:eb:0c:c4:65:8e: 77:80:6a:8d:14:af:6d:58:46:a5:55:91:13:17:f6:1b:35:51: f0:bc:b2:82:16:4f:6d:9b:4f:76:85:a8:4c:3f:0c:6a:a2:e9: 17:48:86:ca:6d:f8:8c:58:d8:2d:3d:7a:b4:23:7c:e0:7c:bc: 93:86:f9:e6:c4:c7:64:3c:ad:fa:0c:e2:a7:13:d2:c8:91:ff: b2:4c:e6:fe:d5:42:fe:c2:b6:03:03:c5:f8:9f:b0:d5:04:75: 17:1a:6c:e6:c1:21:0b:12:c6:de:be:87:31:ca:2a:f0:a8:94: c0:09:ec:7a:aa:1e:bb:e8:46:8b:01:04:a9:b9:bb:d2:b9:25: d7:f0:41:23:99:b4:42:88:4c:15:be:59:0c:d4:7a:e6:90:bd: 89:d4:de:3a:d1:c0:96:f1:24:ad:be:ae:21:81:41:7a:4f:34: 68:f7:f2:a9:ab:bd:ca:6b:4f:9d:ca:1e:fe:36:d0:ae:94:ab: ee:e8:68:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVpiFl09ahhy7KVOoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MDQwMjEzMDAzN1oXDTI0MDcwMTEzMDAzN1owLzEtMCsGA1UEAxMk ZDZjODg1ZTEtNTc3ZS00NmQ2LWE0MDctOWU3ZjI5ZWZmNTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCbn6M5VsDW5EYxFAaxztiG8ynQW6w3FVDFa ZBrBmLeEA7So4kt7FMFj6R2xa0Ww91kXa5ulwVF5qsB+23l+q2QQxmckfcQggUzH V62zvY8G5CDAMrYYM5x2e/0ZsAQ0c1xq63yIrf+RPL0geXDHpPfGA3u7f1Xw+wyz ne1suVwnXn6oJqC3HfMZT8rnyGzwNeO0tPn6c+gBh4IFvCR3Jp2+JtEOs3Pj2j1a hkvsdTWa+AbSYyvgoDb4ylBLdyGivWqq3XUFZweGjF6pB3JcDr5ba48sM0BvZFqy GbL1fISGpNYQ93H5VmcaY03Qt/MA8U8W/6asFvDFzR7O01sNqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYBnvpHnu9MWZLNtI87uapParciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg4OTFiOWItMjJkNi0z NTRmLTk1OTItYzdhMmJlODkyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJFUoGd2SgLMhKAMGWeGOzFqHFdLizj1BASbaUxXDd9mQ6EQR8tSA6g CgECNj6ziYJCsAU6senu1zlbPnhurTV+FvjrDMRljneAao0Ur21YRqVVkRMX9hs1 UfC8soIWT22bT3aFqEw/DGqi6RdIhspt+IxY2C09erQjfOB8vJOG+ebEx2Q8rfoM 4qcT0siR/7JM5v7VQv7CtgMDxfifsNUEdRcabObBIQsSxt6+hzHKKvColMAJ7Hqq HrvoRosBBKm5u9K5JdfwQSOZtEKITBW+WQzUeuaQvYnU3jrRwJbxJK2+riGBQXpP NGj38qmrvcprT53KHv420K6Uq+7oaBo= -----END CERTIFICATE-----Generated at Thu May 2 15:00:07 2024 by rpki-client on console-fra.rpki-client.org