$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa File: d2e1e774-2ccf-3205-9b81-7802d296718c.roa (raw, json) Hash identifier: Fm6TVWiK1U08sjAMDYCWvrO+iVojerV+yIx0LgXxXWU= Subject key identifier: 77:39:60:3F:9B:0A:92:09:ED:0C:7C:6E:49:7B:D5:68:BE:CF:77:24 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858483E1AAE640ED22C3A7DEAF940 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:ae:64:0e:d2:2c:3a:7d:ea:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=8b4420f2-89f2-40f2-8fc4-2790f76f36fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:5f:d4:89:f4:08:7d:05:b7:ca:e2:b8:bf:86: f2:99:aa:c4:5f:4e:6d:0a:06:af:00:d0:b6:67:8d: 6b:a1:38:8b:1d:6b:67:a8:ab:0c:59:b5:f5:49:9e: a7:ea:93:7e:06:e5:b8:46:7b:fe:28:af:d1:6d:c5: 98:a2:16:51:64:62:77:45:9e:35:22:20:d8:86:e4: 20:e5:49:6d:ba:e7:07:36:a1:6d:70:92:55:e2:25: 91:3b:03:29:2c:0e:f2:f1:a4:e4:ae:e3:01:33:91: fc:67:e0:51:73:38:78:38:5b:1d:6e:c4:a6:ce:57: 81:c0:3e:99:a6:ff:6a:9a:26:22:37:5c:2b:43:bb: 30:b6:75:61:37:2e:5b:d0:0e:8d:63:6c:93:39:d2: 6e:96:3c:91:a9:44:a5:92:7b:0b:18:d8:ed:a5:e6: b9:48:1b:95:8a:5a:68:2a:2b:75:d3:09:1e:9f:c8: 98:61:90:52:b3:50:71:f8:a4:ca:56:33:25:17:20: 2b:90:b6:ef:f6:46:86:9b:07:67:23:1f:28:45:ca: e9:81:59:85:c5:31:59:3a:f7:42:35:52:ca:4d:0b: 52:ff:9f:9c:0d:8e:ab:1b:f1:7a:d2:5f:fa:cb:36: ae:2e:95:62:89:9e:76:9c:8d:ca:93:10:52:ac:5c: bb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:39:60:3F:9B:0A:92:09:ED:0C:7C:6E:49:7B:D5:68:BE:CF:77:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d2e1e774-2ccf-3205-9b81-7802d296718c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:79:00:f4:53:00:b3:6a:c3:6e:85:a6:00:c8:b0:ca:f1:03: 9d:0c:a0:2a:40:a4:07:ba:ca:52:7e:97:6a:f7:dc:0b:00:33: eb:d0:88:22:a7:7e:15:88:55:dd:18:7d:df:90:81:5e:45:73: b6:54:eb:66:51:dd:c6:fd:f6:fc:70:e5:05:e7:d9:d5:52:31: 46:c3:da:83:b6:34:ff:5c:a3:c5:91:f2:9d:05:3c:16:f0:ab: 5b:54:27:85:6e:38:5c:66:2e:95:80:50:dd:18:5f:9e:7e:fd: 0c:a0:2c:5e:4e:d5:7c:aa:11:38:ed:e5:dc:91:f0:09:d5:5a: d5:4f:43:b1:b1:93:39:51:d9:ba:a7:0f:31:9a:5c:17:e1:64: f2:62:5e:18:63:09:ee:83:2f:02:4a:3b:a4:c0:fe:08:11:fe: a7:e5:88:82:5a:f6:59:3b:c7:6b:61:e0:9c:2e:c3:fd:d6:b7: dc:66:9a:65:d2:37:19:87:36:5b:e6:fa:7f:4c:d1:cd:6d:36: c3:3e:9a:ee:d9:77:13:98:92:f8:f6:02:e9:ae:f1:1e:22:b3: 54:84:5d:89:13:76:37:c2:66:04:4f:11:a2:4b:2a:af:0b:84: 69:43:a0:15:80:86:37:f5:a6:bd:19:d4:b0:23:16:da:16:9c: fd:22:f2:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gq5kDtIsOn3q+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk OGI0NDIwZjItODlmMi00MGYyLThmYzQtMjc5MGY3NmYzNmZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1/UifQIfQW3yuK4v4bymarEX05tCgavANC2 Z41roTiLHWtnqKsMWbX1SZ6n6pN+BuW4Rnv+KK/RbcWYohZRZGJ3RZ41IiDYhuQg 5UltuucHNqFtcJJV4iWROwMpLA7y8aTkruMBM5H8Z+BRczh4OFsdbsSmzleBwD6Z pv9qmiYiN1wrQ7swtnVhNy5b0A6NY2yTOdJuljyRqUSlknsLGNjtpea5SBuVilpo Kit10wken8iYYZBSs1Bx+KTKVjMlFyArkLbv9kaGmwdnIx8oRcrpgVmFxTFZOvdC NVLKTQtS/5+cDY6rG/F60l/6yzauLpViiZ52nI3KkxBSrFy7SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHc5YD+bCpIJ7Qx8bkl71Wi+z3ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDJlMWU3NzQtMmNjZi0z MjA1LTliODEtNzgwMmQyOTY3MThjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGh5APRTALNqw26FpgDIsMrxA50MoCpApAe6ylJ+l2r33AsAM+vQiCKn fhWIVd0Yfd+QgV5Fc7ZU62ZR3cb99vxw5QXn2dVSMUbD2oO2NP9co8WR8p0FPBbw q1tUJ4VuOFxmLpWAUN0YX55+/QygLF5O1XyqETjt5dyR8AnVWtVPQ7GxkzlR2bqn DzGaXBfhZPJiXhhjCe6DLwJKO6TA/ggR/qfliIJa9lk7x2th4Jwuw/3Wt9xmmmXS NxmHNlvm+n9M0c1tNsM+mu7ZdxOYkvj2Aumu8R4is1SEXYkTdjfCZgRPEaJLKq8L hGlDoBWAhjf1pr0Z1LAjFtoWnP0i8qg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:09 2025 by rpki-client