$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa File: cc265216-2867-31f5-9a02-dab2253b6477.roa (raw, json) Hash identifier: SvcO6PYE9EcC34loND1b+5ugVO0+WW2ZyCv4FVVa5CQ= Subject key identifier: 46:13:91:F8:37:06:CE:FB:1D:14:3B:6E:25:68:05:78:2D:9B:26:BE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848090FB3A6EB5101B43057F080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa Signing time: Fri 29 Nov 2024 02:00:39 +0000 ROA not before: Fri 29 Nov 2024 02:00:39 +0000 ROA not after: Thu 27 Feb 2025 02:00:39 +0000 asID: 14618 IP address blocks: 130.137.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:09:0f:b3:a6:eb:51:01:b4:30:57:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Nov 29 02:00:39 2024 GMT Not After : Feb 27 02:00:39 2025 GMT Subject: CN=2d2e1ff2-7481-4ac9-8948-3baffb8d5b78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1b:70:78:b9:04:6d:11:fe:85:59:c6:ef:13: a0:57:88:19:57:c8:c3:b8:09:39:9c:ea:50:6f:89: 1c:10:59:47:6b:3a:52:f5:1c:06:13:3a:79:22:80: 1d:f6:b3:63:be:12:2f:9b:c8:4e:db:69:23:9d:65: db:b9:f7:50:0f:1a:8a:79:ef:d0:c4:6e:5e:3a:e7: fd:09:de:b3:74:b2:b1:44:2a:42:9d:cc:6c:95:38: ce:39:ed:67:5b:da:60:e4:5a:d2:97:a8:ed:f5:45: a9:11:3d:64:c9:2e:75:2d:49:f3:50:95:ff:23:cf: 1b:a4:89:65:84:94:79:08:81:f3:7d:75:d3:e8:55: 62:39:69:10:79:8b:10:c0:d4:a8:4c:82:70:20:7b: a1:f0:d4:4a:97:36:10:e3:f7:58:d8:a2:6d:25:1a: 78:50:b2:6b:ff:f3:6e:51:67:ca:5c:16:99:65:3b: 8a:f4:f0:9b:0e:b0:91:93:ab:30:27:e6:b4:f1:2f: a6:47:04:90:8a:e5:8d:cb:c9:5a:86:4e:a2:cf:9c: a4:ec:c3:16:bf:91:a4:01:04:69:b8:b6:48:31:6c: e6:c7:d7:13:87:12:9b:4a:e0:b4:aa:ba:b6:c9:26: c2:56:72:a4:32:0a:43:0b:f8:70:f8:58:f2:ef:ba: 20:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:13:91:F8:37:06:CE:FB:1D:14:3B:6E:25:68:05:78:2D:9B:26:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:0a:0c:4b:05:1d:0d:29:e0:e0:99:d8:fc:8f:72:ec:6c:3c: fa:59:fb:38:37:c5:2f:a1:06:81:cd:ed:2d:78:20:27:1c:96: b3:ef:45:fe:d5:07:36:1a:84:54:ec:d5:95:4f:16:22:af:6c: 0c:2c:ee:21:32:f2:4b:2c:53:87:57:ed:87:49:4f:26:b3:e9: 78:f5:df:c3:6b:46:35:e8:df:52:f2:60:0c:7c:7e:c8:b8:87: c8:b2:f7:1e:43:cd:de:45:01:a8:82:ae:86:5f:c8:6c:ce:ba: 7c:f7:30:e5:51:f9:49:53:16:57:ce:f8:20:04:85:fa:45:cf: 37:5a:98:c3:6f:d9:a9:23:3f:11:52:7f:23:1a:cb:7f:cb:8f: 01:eb:76:73:82:52:6f:cc:b2:65:6d:ef:1c:22:f3:03:ba:20: 9d:53:a3:af:de:5a:e2:9c:23:80:57:8f:ba:8f:72:13:e4:92: 03:3d:27:14:00:6a:6f:72:bf:4d:5f:fb:a4:32:6c:28:da:fd: cd:a5:53:d4:11:c0:d7:28:d5:e6:ee:6c:3c:9e:6d:4d:c5:ee: 63:82:26:24:13:22:e1:fa:11:0f:7b:4f:f3:2f:55:ca:0e:06: bf:17:3a:1b:03:dd:ec:d8:01:f3:40:5e:ae:69:9c:1d:0a:45: f0:7c:30:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgJD7Om61EBtDBX8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTEyOTAyMDAzOVoXDTI1MDIyNzAyMDAzOVowLzEtMCsGA1UEAxMk MmQyZTFmZjItNzQ4MS00YWM5LTg5NDgtM2JhZmZiOGQ1Yjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxtweLkEbRH+hVnG7xOgV4gZV8jDuAk5nOpQ b4kcEFlHazpS9RwGEzp5IoAd9rNjvhIvm8hO22kjnWXbufdQDxqKee/QxG5eOuf9 Cd6zdLKxRCpCncxslTjOOe1nW9pg5FrSl6jt9UWpET1kyS51LUnzUJX/I88bpIll hJR5CIHzfXXT6FViOWkQeYsQwNSoTIJwIHuh8NRKlzYQ4/dY2KJtJRp4ULJr//Nu UWfKXBaZZTuK9PCbDrCRk6swJ+a08S+mRwSQiuWNy8lahk6iz5yk7MMWv5GkAQRp uLZIMWzmx9cThxKbSuC0qrq2ySbCVnKkMgpDC/hw+Fjy77ogWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYTkfg3Bs77HRQ7biVoBXgtmya+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2MyNjUyMTYtMjg2Ny0z MWY1LTlhMDItZGFiMjI1M2I2NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAKDEsFHQ0p4OCZ2PyPcuxsPPpZ+zg3xS+hBoHN7S14ICcclrPvRf7V BzYahFTs1ZVPFiKvbAws7iEy8kssU4dX7YdJTyaz6Xj138NrRjXo31LyYAx8fsi4 h8iy9x5Dzd5FAaiCroZfyGzOunz3MOVR+UlTFlfO+CAEhfpFzzdamMNv2akjPxFS fyMay3/LjwHrdnOCUm/MsmVt7xwi8wO6IJ1To6/eWuKcI4BXj7qPchPkkgM9JxQA am9yv01f+6QybCja/c2lU9QRwNco1ebubDyebU3F7mOCJiQTIuH6EQ97T/MvVcoO Br8XOhsD3ezYAfNAXq5pnB0KRfB8MEk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:32 2025 by rpki-client