$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4505168-2850-3830-a3c7-a49b624c8b6f.roa File: c4505168-2850-3830-a3c7-a49b624c8b6f.roa (raw, json) Hash identifier: sEftRletlxSzQzWX1Joe+rDOP10eHurusdu+a089oVI= Subject key identifier: 75:7D:9D:B5:78:4C:8A:D4:8A:95:91:22:D8:CD:15:DA:3F:34:6C:2E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483B4FFADAD89324D32785F920 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4505168-2850-3830-a3c7-a49b624c8b6f.roa Signing time: Tue 17 Dec 2024 02:00:38 +0000 ROA not before: Tue 17 Dec 2024 02:00:38 +0000 ROA not after: Mon 17 Mar 2025 01:00:38 +0000 asID: 8987 IP address blocks: 130.137.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3b:4f:fa:da:d8:93:24:d3:27:85:f9:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 17 02:00:38 2024 GMT Not After : Mar 17 01:00:38 2025 GMT Subject: CN=44d3c7c4-0dc5-4e52-96d0-6829c29ea8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:6d:1c:12:9f:ac:16:4f:7c:fa:09:60:27: d0:8c:94:dc:14:d8:9e:95:e3:e8:c2:50:a3:19:4f: 26:d4:5f:3c:c1:e9:c8:12:43:1c:99:35:4b:74:fa: 0e:eb:24:5b:6b:b0:40:26:16:32:e5:fb:56:8d:c4: 42:df:13:7e:80:c5:a7:cf:12:81:be:a2:fb:0b:08: 14:94:a5:32:09:70:5e:74:7a:07:89:7c:03:5d:74: 64:e9:7c:26:77:b9:8b:9f:15:c1:14:b3:2c:c0:97: 92:1d:98:6f:6d:68:f6:99:6e:b0:ab:96:27:57:5d: c0:ca:8d:94:83:c2:5a:d6:e7:4d:b1:67:21:74:20: 8a:0d:5e:92:e4:d3:13:4e:3b:e7:23:11:91:54:b7: 8d:7d:58:fc:71:0d:42:1d:8e:5e:43:1d:c9:36:3a: eb:a4:6b:bd:00:87:b3:48:9a:43:50:3a:49:16:73: 72:9d:d2:c5:1d:22:30:42:2f:de:ef:6b:08:d5:f5: c7:8e:fc:5d:52:77:95:f2:2b:d2:64:f2:8c:09:2f: e2:3b:f3:71:77:0a:c8:56:f1:31:d9:2f:37:5d:b2: 25:ee:bf:d2:75:99:6b:2d:42:d6:2f:b1:57:3f:0c: af:1f:9d:4e:1e:1c:87:02:de:19:e8:d7:60:d5:c6: 49:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:9D:B5:78:4C:8A:D4:8A:95:91:22:D8:CD:15:DA:3F:34:6C:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c4505168-2850-3830-a3c7-a49b624c8b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:fb:85:41:59:8f:2d:e8:21:92:57:a8:d5:e9:58:ec:d4:65: f5:c0:df:3c:84:37:cc:72:43:65:61:3a:c5:95:1f:f9:09:eb: bc:49:91:04:cf:5d:02:86:d5:7e:04:6a:c2:c2:c9:4d:8a:9c: 4b:3a:6b:e9:c3:31:21:40:3b:82:0d:d9:ed:b0:65:46:6c:a1: 79:cb:16:5e:94:04:0c:02:ab:8a:49:26:a7:2e:97:17:82:73: fe:3f:b9:45:86:9f:ff:f5:60:84:f9:9f:72:5b:62:08:02:3a: cf:02:35:0a:03:42:1d:86:8d:72:fa:97:25:9b:3a:0b:28:e5: 76:ab:ad:f0:31:e9:a8:ed:c7:28:1e:13:91:5b:82:47:81:56: f0:02:12:8c:ff:16:b2:6e:60:21:40:1d:d3:4f:27:ca:66:0e: d4:28:78:0d:45:44:66:e8:e3:ba:9a:ae:5d:0f:9f:b9:70:d8: e5:86:a5:24:ed:d9:04:99:c5:d6:23:5c:84:79:15:38:79:36: 8f:8b:fe:c1:dc:4a:e7:6a:87:92:df:5e:00:69:47:a4:8b:ae: f5:f1:28:54:3d:0c:61:50:d8:e9:aa:7b:2d:75:7c:04:8b:6d: 0b:a9:58:39:34:45:e7:aa:93:54:36:7a:ce:cc:60:13:2b:95: 72:7e:1e:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg7T/ra2JMk0yeF+SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNzAyMDAzOFoXDTI1MDMxNzAxMDAzOFowLzEtMCsGA1UEAxMk NDRkM2M3YzQtMGRjNS00ZTUyLTk2ZDAtNjgyOWMyOWVhOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp1tHBKfrBZPfPoJYCfQjJTcFNielePowlCj GU8m1F88wenIEkMcmTVLdPoO6yRba7BAJhYy5ftWjcRC3xN+gMWnzxKBvqL7CwgU lKUyCXBedHoHiXwDXXRk6Xwmd7mLnxXBFLMswJeSHZhvbWj2mW6wq5YnV13Ayo2U g8Ja1udNsWchdCCKDV6S5NMTTjvnIxGRVLeNfVj8cQ1CHY5eQx3JNjrrpGu9AIez SJpDUDpJFnNyndLFHSIwQi/e72sI1fXHjvxdUneV8ivSZPKMCS/iO/NxdwrIVvEx 2S83XbIl7r/SdZlrLULWL7FXPwyvH51OHhyHAt4Z6Ndg1cZJBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHV9nbV4TIrUipWRItjNFdo/NGwuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYzQ1MDUxNjgtMjg1MC0z ODMwLWEzYzctYTQ5YjYyNGM4YjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr7hUFZjy3oIZJXqNXpWOzUZfXA3zyEN8xyQ2VhOsWVH/kJ67xJkQTP XQKG1X4EasLCyU2KnEs6a+nDMSFAO4IN2e2wZUZsoXnLFl6UBAwCq4pJJqculxeC c/4/uUWGn//1YIT5n3JbYggCOs8CNQoDQh2GjXL6lyWbOgso5XarrfAx6ajtxyge E5FbgkeBVvACEoz/FrJuYCFAHdNPJ8pmDtQoeA1FRGbo47qarl0Pn7lw2OWGpSTt 2QSZxdYjXIR5FTh5No+L/sHcSudqh5LfXgBpR6SLrvXxKFQ9DGFQ2Omqey11fASL bQupWDk0Reeqk1Q2es7MYBMrlXJ+HgY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:38:53 2025 by rpki-client