$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa File: ba55a1e4-2d79-3695-8442-96a538b35f02.roa (raw, json) Hash identifier: 43TtYu3T1Ox7fTCm/7ur+/Bu83ewxacMC8Wl8YJIl80= Subject key identifier: 97:19:21:5E:69:AE:4E:CE:C7:04:EF:D0:50:60:96:42:DB:5D:D4:C0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFB1F2A1FBB5D101F21C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 8987 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fb:1f:2a:1f:bb:5d:10:1f:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=3f7deab2-cb6b-4e43-b33e-4a7c3c9da076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:f7:5e:c3:c6:ae:0a:53:fd:3c:48:a9:05: 06:6a:1a:d4:ee:f3:10:66:e7:51:5c:c7:b7:2b:b7: 44:76:51:73:53:97:ce:5a:4b:fa:5e:0d:eb:c0:d2: 72:79:42:b5:ab:d6:bc:b7:18:3f:13:5a:45:60:e9: 6c:16:de:a3:c8:65:b9:5b:4b:72:8d:97:37:62:fd: e5:1f:bc:15:0d:ca:fc:49:cb:d2:cc:99:96:4a:a5: 61:8c:03:41:fb:76:7f:69:6e:c4:22:c1:e2:ab:3c: 1b:ac:62:c2:d9:42:21:1e:ad:bc:f7:d5:1c:ae:3a: 71:c0:c0:a3:ce:7d:7b:e2:98:1c:c8:e4:b7:90:95: 8d:af:39:93:f1:5e:53:87:1c:95:32:b2:d8:40:0d: be:7b:af:60:ba:50:03:b0:64:5e:55:bb:c4:c6:07: ff:1d:39:b2:c8:3e:3b:c0:d0:e2:cf:2b:0d:96:a5: 0d:dd:2e:1d:64:cd:80:2e:35:95:32:35:f9:d2:bb: a0:3a:ed:79:ec:20:84:58:1f:43:ac:59:42:df:de: 8d:0a:b7:81:8b:ca:83:f9:3d:a3:82:cd:33:3d:10: f9:93:47:b1:28:4a:49:01:19:e0:2d:3a:7b:a3:97: 21:d1:31:d1:0d:b6:da:41:af:2a:d7:c5:e5:0a:e4: 17:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:19:21:5E:69:AE:4E:CE:C7:04:EF:D0:50:60:96:42:DB:5D:D4:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:22:37:b6:f4:84:6f:26:9a:ed:6a:73:5f:b8:8b:1a:89:3d: 6c:c8:bb:67:1f:dd:0a:9b:f3:d6:8f:8a:bf:fe:a5:18:3d:cf: 60:e2:57:7f:cb:99:83:0e:4a:c8:0d:4f:f3:49:58:23:c0:b1: 7d:60:0c:ff:35:ea:d6:18:76:6c:93:ad:3f:7f:41:81:33:29: e9:41:4e:ea:cf:06:12:67:75:87:b4:f8:f8:ae:f7:d4:5e:a0: 40:4f:6e:39:44:8e:d0:60:c6:77:66:5f:b0:7d:b9:9c:38:c3: 4b:19:6f:9e:a1:e9:39:1d:91:5a:f3:fa:72:68:db:37:c0:d0: a5:6b:49:c5:4b:af:9f:d0:8f:da:ee:5f:fa:54:12:e4:8e:12: b8:22:9a:ee:cf:98:d9:cd:27:02:d1:74:a3:f2:ba:b8:a0:17: e7:28:0a:9e:1e:7f:24:0b:f7:c0:fa:2c:7c:44:4c:0b:81:a3: e1:a1:b9:86:83:d6:6e:f2:62:6a:d5:d3:c2:39:22:77:2b:04: 37:2a:0a:32:6d:ea:01:04:0a:c0:a3:db:12:95:dc:f0:3d:c0: 28:04:10:e4:c1:93:2e:0f:c6:06:ae:74:67:08:d5:bb:bc:d8: 99:4f:85:80:31:2b:f8:e4:6c:ca:75:cd:6f:46:c0:03:8f:a5: 54:54:4f:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/sfKh+7XRAfIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk M2Y3ZGVhYjItY2I2Yi00ZTQzLWIzM2UtNGE3YzNjOWRhMDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbL3XsPGrgpT/TxIqQUGahrU7vMQZudRXMe3 K7dEdlFzU5fOWkv6Xg3rwNJyeUK1q9a8txg/E1pFYOlsFt6jyGW5W0tyjZc3Yv3l H7wVDcr8ScvSzJmWSqVhjANB+3Z/aW7EIsHiqzwbrGLC2UIhHq2899UcrjpxwMCj zn174pgcyOS3kJWNrzmT8V5ThxyVMrLYQA2+e69gulADsGReVbvExgf/HTmyyD47 wNDizysNlqUN3S4dZM2ALjWVMjX50rugOu157CCEWB9DrFlC396NCreBi8qD+T2j gs0zPRD5k0exKEpJARngLTp7o5ch0THRDbbaQa8q18XlCuQXJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcZIV5prk7OxwTv0FBglkLbXdTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmE1NWExZTQtMmQ3OS0z Njk1LTg0NDItOTZhNTM4YjM1ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4iN7b0hG8mmu1qc1+4ixqJPWzIu2cf3Qqb89aPir/+pRg9z2DiV3/L mYMOSsgNT/NJWCPAsX1gDP816tYYdmyTrT9/QYEzKelBTurPBhJndYe0+Piu99Re oEBPbjlEjtBgxndmX7B9uZw4w0sZb56h6TkdkVrz+nJo2zfA0KVrScVLr5/Qj9ru X/pUEuSOErgimu7PmNnNJwLRdKPyurigF+coCp4efyQL98D6LHxETAuBo+GhuYaD 1m7yYmrV08I5IncrBDcqCjJt6gEECsCj2xKV3PA9wCgEEOTBky4PxgaudGcI1bu8 2JlPhYAxK/jkbMp1zW9GwAOPpVRUT0M= -----END CERTIFICATE-----Generated at Sun Feb 16 05:16:34 2025 by rpki-client