$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa File: ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa (raw, json) Hash identifier: HABsJXJwEu3yyHLfZo46O+xXk0E2y4toG4jNa2MeD+M= Subject key identifier: 65:B1:9E:88:F0:05:D2:8E:8E:49:25:E4:08:E5:6E:82:C8:DE:5A:09 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848530AE898A7EB2D34BD7BDE80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa Signing time: Wed 25 Dec 2024 14:00:52 +0000 ROA not before: Wed 25 Dec 2024 14:00:52 +0000 ROA not after: Tue 25 Mar 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:53:0a:e8:98:a7:eb:2d:34:bd:7b:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 25 14:00:52 2024 GMT Not After : Mar 25 13:00:52 2025 GMT Subject: CN=7ddf1293-dd20-4f24-a989-b6b1311269b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e5:7a:22:8c:13:f8:e9:9e:52:76:14:91:af: 1e:f0:65:bd:20:fb:f5:5c:61:ea:15:e3:95:71:b2: 43:1a:bd:03:05:2b:7f:08:48:ba:b5:56:79:72:ad: 37:92:71:b0:aa:91:b1:08:06:62:48:e3:ef:99:71: 20:c4:ba:a6:61:46:cb:b3:a6:ca:e8:d1:19:cb:9f: a5:4c:51:60:4a:93:48:bd:68:cb:fa:00:07:fb:a0: 0e:c0:1b:c1:f1:94:ba:0c:33:21:2f:c3:ed:ec:36: 2b:0a:4f:e9:9e:f8:e5:40:50:9e:50:4b:26:21:79: 98:1f:ac:be:85:97:2e:d3:45:55:c0:54:2d:12:27: 8d:b3:2d:f6:dc:e7:2f:87:74:26:93:fb:bb:bb:01: c4:51:52:df:00:ec:5e:33:ed:b2:77:62:ef:31:81: 79:66:53:f4:e7:f4:b8:4f:f7:8c:c4:6e:9a:1b:d9: 1f:c4:39:e0:94:2c:3f:e1:24:62:d1:1c:e9:38:e7: 68:77:21:01:c8:56:2a:cc:fc:39:b4:bc:62:f8:54: 1d:90:d1:96:fc:63:f1:2d:cb:3e:85:5b:04:0f:08: 0f:8e:fe:43:8e:52:1e:c2:be:81:86:72:1e:be:fa: c3:7e:d4:a9:16:eb:69:c7:71:9e:ca:0a:4e:ff:03: 46:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:9E:88:F0:05:D2:8E:8E:49:25:E4:08:E5:6E:82:C8:DE:5A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e7:d9:8f:e4:ba:6c:b2:d4:5d:14:e3:0e:53:b5:14:a9:63: 30:09:72:2c:a6:fd:2e:69:ee:7a:62:cc:87:c9:6e:02:58:bb: a2:71:a9:bd:ac:ae:8e:b1:48:7a:de:f0:e0:fe:ec:f6:da:83: 3f:53:4c:05:f5:46:f4:f7:fd:9f:ae:85:81:f8:dc:4c:7b:99: 95:5f:ae:95:db:14:ca:7d:0b:97:48:31:d5:92:e8:0f:ab:a1: da:82:d8:13:03:64:6b:51:c8:11:66:e5:d9:02:bf:67:22:8a: bf:d2:86:8f:6f:09:7d:db:9a:21:07:d4:84:c8:a0:58:c5:a4: 7d:de:3a:c6:f8:fe:8c:5e:e8:3b:05:10:9b:fc:e6:61:70:d1: 60:4f:93:69:eb:ef:8b:8c:9e:95:36:85:b6:45:02:88:83:2f: 49:c6:79:26:03:3f:57:43:7e:ca:79:68:67:0b:ae:f1:9b:ac: 40:dc:c9:86:b2:53:bc:17:5d:dd:92:af:8f:65:8b:ba:1b:f4: 32:d7:c4:19:aa:69:c8:c0:ce:ee:22:42:a2:cb:da:a1:12:38: bb:79:be:52:28:05:db:a8:2e:c6:d4:21:e9:74:77:d0:2e:a0: 69:d4:8d:d7:ba:20:f4:2b:7b:e5:23:10:f1:66:68:23:e8:41: 5e:44:00:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCuiYp+stNL173oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2RkZjEyOTMtZGQyMC00ZjI0LWE5ODktYjZiMTMxMTI2OWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eV6IowT+OmeUnYUka8e8GW9IPv1XGHqFeOV cbJDGr0DBSt/CEi6tVZ5cq03knGwqpGxCAZiSOPvmXEgxLqmYUbLs6bK6NEZy5+l TFFgSpNIvWjL+gAH+6AOwBvB8ZS6DDMhL8Pt7DYrCk/pnvjlQFCeUEsmIXmYH6y+ hZcu00VVwFQtEieNsy323Ocvh3Qmk/u7uwHEUVLfAOxeM+2yd2LvMYF5ZlP05/S4 T/eMxG6aG9kfxDnglCw/4SRi0RzpOOdodyEByFYqzPw5tLxi+FQdkNGW/GPxLcs+ hVsEDwgPjv5DjlIewr6BhnIevvrDftSpFutpx3GeygpO/wNG/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWxnojwBdKOjkkl5AjlboLI3loJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWNiMzllNmQtODk2Ni0z M2YzLWFlNDEtYmI2MjMyMDcyYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLn2Y/kumyy1F0U4w5TtRSpYzAJciym/S5p7npizIfJbgJYu6Jxqb2s ro6xSHre8OD+7Pbagz9TTAX1RvT3/Z+uhYH43Ex7mZVfrpXbFMp9C5dIMdWS6A+r odqC2BMDZGtRyBFm5dkCv2ciir/Sho9vCX3bmiEH1ITIoFjFpH3eOsb4/oxe6DsF EJv85mFw0WBPk2nr74uMnpU2hbZFAoiDL0nGeSYDP1dDfsp5aGcLrvGbrEDcyYay U7wXXd2Sr49li7ob9DLXxBmqacjAzu4iQqLL2qESOLt5vlIoBduoLsbUIel0d9Au oGnUjde6IPQre+UjEPFmaCPoQV5EAEI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:45 2025 by rpki-client