$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa File: ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa (raw, json) Hash identifier: yC9C8U3gsdcXZwJIZVCoyQUzFQwlHSx8XsVJXkjuav4= Subject key identifier: 63:EA:82:C3:36:CE:30:72:0F:56:12:C1:C9:9B:67:3C:86:F3:E2:56 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858482BF54AFAB03E23E418831AC8 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa Signing time: Wed 11 Dec 2024 14:00:52 +0000 ROA not before: Wed 11 Dec 2024 14:00:52 +0000 ROA not after: Tue 11 Mar 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2b:f5:4a:fa:b0:3e:23:e4:18:83:1a:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 11 14:00:52 2024 GMT Not After : Mar 11 13:00:52 2025 GMT Subject: CN=3706cda3-1498-45a2-843c-80d6b0421ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:2c:24:ef:0c:f6:b3:be:d5:28:04:4a:2f: 6b:a3:af:51:bf:41:31:eb:2c:70:91:f8:d5:74:b1: 00:a2:fa:64:3e:93:dd:df:cf:6f:1d:81:9e:af:00: 7c:ec:2c:1d:90:a1:95:ec:22:c7:fd:e9:ca:a8:89: d1:c3:3e:16:9c:c6:49:ab:96:90:1b:86:04:fb:2e: cb:23:65:20:8c:02:44:76:13:51:85:ec:a9:b7:e2: 36:74:cf:4b:0f:4d:14:66:d5:60:69:e2:7c:3e:1b: 62:b7:ab:25:07:d8:59:40:0b:0b:cd:60:ce:f9:19: e3:13:1d:b3:bb:60:02:34:8b:c8:7e:b5:a6:4c:ac: 9d:96:7e:a4:b1:51:3b:7c:aa:c9:39:68:2e:fd:f9: 53:b0:55:19:e9:a4:02:07:41:e2:44:b9:6d:f6:2e: 80:e5:fe:9b:ec:3b:bc:1b:f1:e9:0c:8c:27:20:16: e9:d3:58:5a:66:f2:03:49:46:6b:fa:f5:d7:dd:77: 9c:21:6b:01:d3:01:ee:60:5d:1c:53:c6:e1:0d:36: 88:82:c3:bd:14:0d:23:3b:85:51:66:36:bd:80:f8: d1:84:c3:64:f7:76:c7:31:e7:cb:2d:e2:13:bb:5d: 5d:ff:5a:6f:8e:ce:60:d8:f2:e9:25:f0:86:bc:4e: aa:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:EA:82:C3:36:CE:30:72:0F:56:12:C1:C9:9B:67:3C:86:F3:E2:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ed8f6bf0-2344-3e44-ab2d-11031f350c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:15:45:34:38:0b:79:0a:37:a4:45:27:70:1a:53:da:e1:4b: 52:9e:68:8f:20:6d:98:7f:62:b2:c7:5c:a9:a6:52:3e:f3:70: bf:4c:f2:37:4a:e7:3e:12:12:ec:47:a9:e7:f7:0e:4f:c1:8b: 6f:a6:fd:f7:8e:c5:31:5b:9e:96:6d:d2:ca:3a:0c:58:da:3a: ce:fa:36:15:6e:ff:4f:f2:bf:d7:01:1f:c8:87:cb:57:8b:53: 5b:26:7e:02:51:e1:b8:6a:9c:ff:4b:03:dc:ef:ea:83:9d:ff: 79:fe:ff:7e:18:d0:d5:58:4a:bd:d0:04:64:a9:4e:d3:f2:88: 22:4b:59:70:24:91:1f:38:08:53:45:63:86:87:4c:65:6a:2b: f2:61:68:ea:37:83:de:24:a8:7a:af:04:97:e8:1d:ad:05:a0: 14:e5:7e:8b:b3:39:3d:7f:36:56:36:b7:de:dd:36:6c:f1:5b: 5b:65:4d:ad:9c:4f:07:a8:5b:43:c9:b2:51:e7:72:a7:52:60: 7e:81:60:e6:61:ba:f8:07:78:a3:83:e4:33:e4:d1:6f:d5:0d: c9:52:c4:d0:5c:a2:93:2d:8c:79:df:44:4f:1f:a8:6a:94:26: c1:65:b8:62:fe:89:d2:be:9e:44:f0:51:d8:7f:d2:a9:b1:ec: 9f:c6:05:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgr9Ur6sD4j5BiDGsgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk MzcwNmNkYTMtMTQ5OC00NWEyLTg0M2MtODBkNmIwNDIxZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRUsJO8M9rO+1SgESi9ro69Rv0Ex6yxwkfjV dLEAovpkPpPd389vHYGerwB87CwdkKGV7CLH/enKqInRwz4WnMZJq5aQG4YE+y7L I2UgjAJEdhNRheypt+I2dM9LD00UZtVgaeJ8Phtit6slB9hZQAsLzWDO+RnjEx2z u2ACNIvIfrWmTKydln6ksVE7fKrJOWgu/flTsFUZ6aQCB0HiRLlt9i6A5f6b7Du8 G/HpDIwnIBbp01haZvIDSUZr+vXX3XecIWsB0wHuYF0cU8bhDTaIgsO9FA0jO4VR Zja9gPjRhMNk93bHMefLLeITu11d/1pvjs5g2PLpJfCGvE6qQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPqgsM2zjByD1YSwcmbZzyG8+JWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWQ4ZjZiZjAtMjM0NC0z ZTQ0LWFiMmQtMTEwMzFmMzUwYzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4VRTQ4C3kKN6RFJ3AaU9rhS1KeaI8gbZh/YrLHXKmmUj7zcL9M8jdK 5z4SEuxHqef3Dk/Bi2+m/feOxTFbnpZt0so6DFjaOs76NhVu/0/yv9cBH8iHy1eL U1smfgJR4bhqnP9LA9zv6oOd/3n+/34Y0NVYSr3QBGSpTtPyiCJLWXAkkR84CFNF Y4aHTGVqK/JhaOo3g94kqHqvBJfoHa0FoBTlfouzOT1/NlY2t97dNmzxW1tlTa2c TweoW0PJslHncqdSYH6BYOZhuvgHeKOD5DPk0W/VDclSxNBcopMtjHnfRE8fqGqU JsFluGL+idK+nkTwUdh/0qmx7J/GBbI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:44 2025 by rpki-client