$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/da864d9f-b299-317e-9cb3-354615c062a3.roa File: da864d9f-b299-317e-9cb3-354615c062a3.roa (raw, json) Hash identifier: rmfXYKeTVtJUyUUrCUgkxCrOMhYEXGaHhczKgBU/PeY= Subject key identifier: 1C:C3:12:A5:C6:AE:DD:74:D3:D8:0A:AF:04:E9:15:9C:95:C1:5C:1C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848C6E631FFD2BA3FC51A962B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/da864d9f-b299-317e-9cb3-354615c062a3.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:31:ff:d2:ba:3f:c5:1a:96:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=e253da97-a0a2-40e0-8031-b63c6ccc9fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:b1:63:de:f6:b3:32:ea:02:a6:91:82:0e:12: a6:6e:fb:e7:55:05:fc:cd:32:4c:56:98:51:98:30: 77:5d:b8:42:3a:20:9c:be:3e:94:84:c0:7c:11:91: a6:d2:c8:5f:47:51:5b:cb:4a:17:26:73:2a:21:80: c0:81:20:2a:4a:b0:a3:2a:92:47:91:95:01:fe:df: 19:c0:40:1b:59:0f:8a:a0:ad:40:7a:62:ed:2d:6b: 95:58:ce:b8:9a:1e:3a:1b:97:65:b9:49:cd:95:7e: 0c:3f:71:be:37:74:5d:b8:b6:37:bd:cf:34:ec:4f: 07:23:6b:87:a3:33:cd:b2:12:f2:94:8f:6b:ed:e9: 12:88:b4:e6:d9:f2:91:4e:4d:a6:ed:98:2c:28:f0: 25:4b:20:9b:08:20:e3:dd:37:b3:2c:6f:ac:25:cc: a4:b2:20:ef:29:0a:55:ae:e6:72:65:b7:33:c3:8e: 74:f5:73:6a:eb:f8:f1:40:7d:0a:58:dc:31:00:a1: 60:09:c9:b2:42:75:c4:ae:52:5f:81:12:53:07:76: ad:06:2a:ad:1a:ee:a5:c0:34:be:02:79:6c:34:af: bb:83:eb:6a:38:f1:d5:68:18:e3:88:c3:c3:68:2e: aa:5b:5a:1f:14:34:6d:5e:bd:03:ad:69:ed:dd:24: 18:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:C3:12:A5:C6:AE:DD:74:D3:D8:0A:AF:04:E9:15:9C:95:C1:5C:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/da864d9f-b299-317e-9cb3-354615c062a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:7b:85:ec:81:2d:39:2c:cc:1c:b0:8e:2c:97:31:18:82:94: b9:d5:34:63:7a:aa:87:79:f9:3c:f1:d4:53:3f:19:b0:a8:be: 82:7e:17:7a:42:5b:31:9e:73:17:69:de:e9:c6:ed:3a:f2:bc: 6b:ee:4a:2d:af:9d:c3:05:4f:53:e6:aa:31:72:73:d5:74:67: 64:9e:56:64:96:0c:56:bc:99:e6:2d:07:f4:df:38:3e:e2:ec: 84:19:35:80:80:ee:d6:a1:60:5a:a8:dd:65:ca:63:b6:9c:68: 6d:e3:11:05:dd:d4:d7:53:ba:6b:74:07:76:05:fc:e0:5d:45: 86:ce:2e:af:2f:e9:2c:27:be:bd:00:ba:fd:80:67:04:e7:5b: e5:23:b8:77:5d:c7:44:58:35:6e:4e:67:f3:93:bf:e7:f6:32: 15:f8:b2:09:55:f5:df:34:56:bd:d4:0c:2d:14:9d:22:d2:17: 94:3c:8f:79:8a:ad:6d:d4:e5:20:4b:86:1f:ac:d6:38:86:d7: aa:e0:47:82:46:b0:f0:9f:e8:f1:5d:b8:e1:27:45:d3:c5:93: 33:b0:95:f2:6e:ca:57:8b:f1:6f:63:72:b7:7c:53:90:0d:43: cb:a0:4b:1d:08:2d:27:68:79:2f:c2:b7:be:e1:fe:62:e2:07: 90:df:a4:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5jH/0ro/xRqWK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZTI1M2RhOTctYTBhMi00MGUwLTgwMzEtYjYzYzZjY2M5ZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7Fj3vazMuoCppGCDhKmbvvnVQX8zTJMVphR mDB3XbhCOiCcvj6UhMB8EZGm0shfR1Fby0oXJnMqIYDAgSAqSrCjKpJHkZUB/t8Z wEAbWQ+KoK1AemLtLWuVWM64mh46G5dluUnNlX4MP3G+N3RduLY3vc807E8HI2uH ozPNshLylI9r7ekSiLTm2fKRTk2m7ZgsKPAlSyCbCCDj3TezLG+sJcyksiDvKQpV ruZyZbczw4509XNq6/jxQH0KWNwxAKFgCcmyQnXErlJfgRJTB3atBiqtGu6lwDS+ AnlsNK+7g+tqOPHVaBjjiMPDaC6qW1ofFDRtXr0DrWnt3SQYRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzDEqXGrt1009gKrwTpFZyVwVwcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGE4NjRkOWYtYjI5OS0z MTdlLTljYjMtMzU0NjE1YzA2MmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIV7heyBLTkszBywjiyXMRiClLnVNGN6qod5+Tzx1FM/GbCovoJ+F3pC WzGecxdp3unG7TryvGvuSi2vncMFT1PmqjFyc9V0Z2SeVmSWDFa8meYtB/TfOD7i 7IQZNYCA7tahYFqo3WXKY7acaG3jEQXd1NdTumt0B3YF/OBdRYbOLq8v6Swnvr0A uv2AZwTnW+UjuHddx0RYNW5OZ/OTv+f2MhX4sglV9d80Vr3UDC0UnSLSF5Q8j3mK rW3U5SBLhh+s1jiG16rgR4JGsPCf6PFduOEnRdPFkzOwlfJuyleL8W9jcrd8U5AN Q8ugSx0ILSdoeS/Ct77h/mLiB5DfpIM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:22 2025 by rpki-client