$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa File: efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa (raw, json) Hash identifier: FN+u/s+UUqNBBhjT1DpVZufEY498mBfz4BM3tRzsX60= Subject key identifier: 79:5B:F8:1C:91:2A:F4:C6:CF:E1:89:BA:E0:CA:9F:E9:39:09:D3:69 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584834555EA5576101C6AAE3E4A0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:5e:a5:57:61:01:c6:aa:e3:e4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=20fe6e9d-026e-4208-85e3-6799d7d68992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:cc:a8:75:06:79:f2:64:25:d5:b2:49:9a:82: 3b:88:c9:46:60:7f:dc:63:4b:3a:52:a0:91:be:56: 1d:ae:ad:97:40:c4:f0:ae:c5:f5:7c:44:9b:5d:00: 4a:4c:15:07:18:c6:f3:fe:07:d1:81:e4:a4:4d:3c: 2b:d9:b9:73:f0:ea:4d:44:9b:71:ef:23:35:d8:b8: 84:2f:f4:e0:83:ca:d8:e0:b5:5a:64:53:de:ab:fe: 47:d3:11:22:db:fa:a4:b7:02:cf:1f:b9:26:d9:41: 7e:3b:fb:40:20:1a:c4:07:6c:b4:11:ce:cc:c4:67: 8e:1b:9d:c5:41:5e:68:7a:55:8e:51:ae:5a:ba:5e: 9d:2a:c7:03:67:35:13:a8:4e:23:57:c3:96:49:19: d4:10:59:d4:0c:d6:77:e5:c4:2b:4f:2b:57:55:b8: 49:ce:53:9d:0f:fb:a5:1f:ea:09:37:f0:15:a8:20: 41:d7:dc:74:35:1d:ca:20:76:16:98:cd:99:d1:ae: 38:66:30:53:86:9a:23:37:a8:71:6f:43:bc:d4:b1: 0b:54:93:3d:9d:ec:0b:6c:25:42:8b:68:6c:db:cf: 94:58:24:8e:0d:40:2f:a1:bc:e9:ed:46:c7:77:18: 61:b2:fe:a6:08:8e:66:1e:da:29:00:fd:4a:d2:0d: 8f:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5B:F8:1C:91:2A:F4:C6:CF:E1:89:BA:E0:CA:9F:E9:39:09:D3:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/efb0b9fa-f7ca-3fc3-9780-3b4225cdc896.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:dc:1b:a6:14:32:0f:54:da:73:ff:76:c4:72:1c:bc:ed:7e: 8f:43:6f:7c:54:34:f9:d7:c1:0e:1d:5e:1b:a4:e5:bf:d8:b9: a5:34:92:20:71:02:dd:64:95:14:f0:b3:d5:90:ad:4a:7e:d8: a3:63:5f:51:7c:5a:58:0d:e0:ef:5b:5c:3b:6f:13:c7:c1:24: 32:47:ec:a7:e7:18:71:64:69:4e:39:26:2c:45:a0:b9:8e:08: a5:c2:b1:41:e8:28:61:7c:bc:e0:0d:f6:1b:1f:98:cf:00:dc: 76:26:85:78:10:db:99:4e:3b:02:1d:bf:86:79:bf:da:ab:75: a9:ee:16:c8:64:ca:dc:4f:33:a3:14:2a:e6:08:04:4e:2e:84: ef:48:b4:17:1f:8e:22:d3:96:a6:ad:af:6c:79:b7:a2:3c:18: a8:e8:53:0f:7e:97:45:e9:af:b9:a4:0f:26:01:07:4a:05:5a: 81:ad:44:47:b8:af:e8:d7:5f:bd:81:7a:a9:74:08:67:5b:cc: 66:b1:e8:80:8b:22:3c:04:6a:c7:fa:55:81:86:c0:bd:24:32: 62:4e:a2:9a:35:c9:4c:3d:48:d4:11:09:a9:b3:0c:8e:75:6e: 9c:70:72:31:9a:45:ee:90:2a:b0:da:27:b8:17:d8:06:08:67: 37:6f:34:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VV6lV2EBxqrj5KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjBmZTZlOWQtMDI2ZS00MjA4LTg1ZTMtNjc5OWQ3ZDY4OTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsyodQZ58mQl1bJJmoI7iMlGYH/cY0s6UqCR vlYdrq2XQMTwrsX1fESbXQBKTBUHGMbz/gfRgeSkTTwr2blz8OpNRJtx7yM12LiE L/Tgg8rY4LVaZFPeq/5H0xEi2/qktwLPH7km2UF+O/tAIBrEB2y0Ec7MxGeOG53F QV5oelWOUa5aul6dKscDZzUTqE4jV8OWSRnUEFnUDNZ35cQrTytXVbhJzlOdD/ul H+oJN/AVqCBB19x0NR3KIHYWmM2Z0a44ZjBThpojN6hxb0O81LELVJM9newLbCVC i2hs28+UWCSODUAvobzp7UbHdxhhsv6mCI5mHtopAP1K0g2PqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlb+ByRKvTGz+GJuuDKn+k5CdNpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWZiMGI5ZmEtZjdjYS0z ZmMzLTk3ODAtM2I0MjI1Y2RjODk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETcG6YUMg9U2nP/dsRyHLztfo9Db3xUNPnXwQ4dXhuk5b/YuaU0kiBx At1klRTws9WQrUp+2KNjX1F8WlgN4O9bXDtvE8fBJDJH7KfnGHFkaU45JixFoLmO CKXCsUHoKGF8vOAN9hsfmM8A3HYmhXgQ25lOOwIdv4Z5v9qrdanuFshkytxPM6MU KuYIBE4uhO9ItBcfjiLTlqatr2x5t6I8GKjoUw9+l0Xpr7mkDyYBB0oFWoGtREe4 r+jXX72Beql0CGdbzGax6ICLIjwEasf6VYGGwL0kMmJOopo1yUw9SNQRCamzDI51 bpxwcjGaRe6QKrDaJ7gX2AYIZzdvNKg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:02 2025 by rpki-client