$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa File: 14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa (raw, json) Hash identifier: cSzPyn2HbDC8LN8Brd7P5dV7CgGDhlxQ6W0Ep66okBU= Subject key identifier: 1B:D7:A0:90:E8:99:0C:E7:72:DF:1F:68:53:4B:55:73:64:E9:6B:FE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC265B7018499EC62B1700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 130.174.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:26:5b:70:18:49:9e:c6:2b:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=593e9e96-a030-464d-83dc-a90bcf743863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8c:93:21:3a:8f:a9:4c:e5:d2:a8:0a:fa:bb: a9:02:c5:9f:81:65:b6:78:e4:12:10:cb:27:1b:9a: aa:39:46:86:29:2d:f0:32:bb:4d:04:b4:85:a6:07: 21:b8:e9:22:0f:f3:e5:39:a4:7a:9c:08:e1:24:c9: 20:6a:e9:a5:0b:35:a5:b4:4f:00:d6:9e:5c:a3:c3: e2:8b:71:61:e8:5c:0b:1a:db:e8:72:1b:c6:e5:41: 9e:b1:e5:d6:d9:d8:79:cb:ca:6c:0c:6d:67:3c:aa: f2:77:21:2b:d1:f1:eb:15:ae:d1:6c:09:fa:61:53: fb:e4:92:68:cb:3c:e1:14:21:20:c9:95:da:a9:fb: 9d:bc:d6:03:40:1a:23:5e:cc:44:6c:17:b1:bd:a4: e7:15:40:5b:cd:eb:4f:a1:ee:2a:20:45:f8:e9:12: d6:07:10:5b:d1:91:b3:20:22:88:ca:4e:10:39:b5: 62:b0:96:a8:3f:0c:e8:93:d8:d4:d4:b4:4b:90:d1: b3:fd:ea:71:be:f7:c2:b9:6f:10:01:34:11:5d:e7: 7d:73:1e:0a:35:98:eb:fd:9e:f1:cd:52:37:ea:c0: c9:d5:8a:4c:f6:d3:8e:ca:e2:c2:1f:6d:68:a5:6c: 75:5f:ac:e5:2c:5f:49:8c:63:a6:e5:47:18:5b:24: 96:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:D7:A0:90:E8:99:0C:E7:72:DF:1F:68:53:4B:55:73:64:E9:6B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:fc:2e:12:66:5d:ac:de:5b:ff:5f:73:23:35:d2:ce:0c:1f: e1:8c:40:30:e2:e4:97:23:e5:f9:c7:26:d9:6a:0b:6c:dd:4b: a5:cd:65:b4:61:76:98:72:4d:8d:96:51:ae:ad:6b:20:29:59: fa:45:bb:98:0b:ad:01:bc:31:86:f3:12:af:3e:45:d9:21:a0: 8c:e1:ed:e7:97:20:ca:fd:2b:98:bb:ad:c8:2d:75:ec:c9:6b: 8e:dd:e3:42:04:03:d7:fc:8b:cb:fa:50:d3:f4:80:4f:41:0b: a7:75:e6:64:52:5c:6c:1f:15:40:e4:e8:b4:4d:cc:b7:98:8e: 5f:05:98:de:fa:bb:72:3f:0e:ac:4a:f1:a7:bb:28:bc:f4:3a: a5:3a:ba:ea:5d:0b:dd:57:8a:93:a3:e6:e2:fa:d8:00:3a:d1: 70:a1:80:df:a6:f0:a4:15:48:8e:37:21:26:4d:94:f6:b0:d7: f5:c7:1b:f0:75:b5:45:40:f1:d4:47:4b:7d:f0:ff:1e:fa:e0: 1b:72:c4:a9:38:cb:c8:ce:6e:e2:9e:84:d5:90:48:c1:c3:a2: c3:e6:33:8a:cc:e5:0b:dd:6a:2e:92:11:0d:82:54:a8:c4:84: 96:fb:59:ae:32:56:1e:88:fe:2e:dd:78:8c:28:70:88:0a:a9: 22:2e:be:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCZbcBhJnsYrFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NTkzZTllOTYtYTAzMC00NjRkLTgzZGMtYTkwYmNmNzQzODYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioyTITqPqUzl0qgK+rupAsWfgWW2eOQSEMsn G5qqOUaGKS3wMrtNBLSFpgchuOkiD/PlOaR6nAjhJMkgaumlCzWltE8A1p5co8Pi i3Fh6FwLGtvochvG5UGeseXW2dh5y8psDG1nPKrydyEr0fHrFa7RbAn6YVP75JJo yzzhFCEgyZXaqfudvNYDQBojXsxEbBexvaTnFUBbzetPoe4qIEX46RLWBxBb0ZGz ICKIyk4QObVisJaoPwzok9jU1LRLkNGz/epxvvfCuW8QATQRXed9cx4KNZjr/Z7x zVI36sDJ1YpM9tOOyuLCH21opWx1X6zlLF9JjGOm5UcYWySWEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvXoJDomQznct8faFNLVXNk6Wv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTRlN2Y4NDQtZmI2ZS0z MzkyLWE3ZGItOWIyOGU3NDk5YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI38LhJmXazeW/9fcyM10s4MH+GMQDDi5Jcj5fnHJtlqC2zdS6XNZbRh dphyTY2WUa6tayApWfpFu5gLrQG8MYbzEq8+RdkhoIzh7eeXIMr9K5i7rcgtdezJ a47d40IEA9f8i8v6UNP0gE9BC6d15mRSXGwfFUDk6LRNzLeYjl8FmN76u3I/DqxK 8ae7KLz0OqU6uupdC91XipOj5uL62AA60XChgN+m8KQVSI43ISZNlPaw1/XHG/B1 tUVA8dRHS33w/x764BtyxKk4y8jObuKehNWQSMHDosPmM4rM5Qvdai6SEQ2CVKjE hJb7Wa4yVh6I/i7deIwocIgKqSIuvm8= -----END CERTIFICATE-----Generated at Fri Mar 14 13:50:47 2025 by rpki-client