$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa File: 14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa (raw, json) Hash identifier: n6icY9hSvTnH/GRT6QH7W254Rdvc0/9kyxmSb12lN6M= Subject key identifier: FE:77:53:C8:F2:A5:C1:EA:CB:F8:6B:73:EB:37:E5:37:6F:1B:41:BF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584834556FA6F7B9349B3BE02480 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 203 IP address blocks: 130.174.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:6f:a6:f7:b9:34:9b:3b:e0:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=003ad18e-3ad4-4304-ab22-36e06bff0d11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7b:a8:8f:a9:5c:fe:2d:14:9e:bd:d5:c2:cd: a0:29:0d:50:5d:7a:31:26:7f:32:4a:03:f0:a1:98: f4:8e:ec:af:26:27:00:8e:17:10:10:b9:61:74:a6: 60:2b:ff:44:74:b1:4f:ba:01:c0:c7:ed:2b:6b:7e: 74:91:01:33:e1:51:57:4e:a9:f7:01:86:5c:64:b9: f8:bd:8c:a2:06:aa:4a:31:6f:4f:c8:4c:8f:52:f2: a1:04:83:9f:2a:4a:b5:a0:45:b7:b3:60:ae:a6:b2: e1:3d:6a:4f:05:76:7c:90:61:16:dd:b1:7e:e8:61: f9:ce:fe:4c:bf:cd:4f:ff:bb:e0:80:cb:a4:72:71: 2e:79:99:dc:c0:28:02:4f:7a:64:e2:eb:d9:72:8f: 5f:5a:97:ed:e5:a6:f4:7e:36:fa:84:21:26:d5:ae: 10:39:0e:46:83:b6:9c:a9:c5:34:c8:7d:d2:9e:84: 1e:1e:d3:a0:b1:8e:98:6a:73:e6:01:cf:54:1d:f2: 35:81:1b:f3:45:5a:40:32:1f:32:24:b7:60:3c:f6: ad:e6:ea:7b:83:40:fb:26:8d:66:23:93:61:f2:44: 0c:71:a4:9c:76:0f:d4:fe:0d:59:56:7b:2a:fc:a2: 2b:de:7a:c3:e4:b9:c5:36:e3:1d:99:7b:f7:ac:a1: 3e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:77:53:C8:F2:A5:C1:EA:CB:F8:6B:73:EB:37:E5:37:6F:1B:41:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/14e7f844-fb6e-3392-a7db-9b28e7499a6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3c:13:ec:4d:cb:ee:8d:c5:af:9f:48:24:80:49:13:da:6e: 8c:85:57:f6:ab:1c:77:89:bb:f8:87:d3:24:ba:da:bd:c6:b1: aa:5b:f9:ad:c7:f9:b8:d3:a9:7b:9e:fc:a9:07:b8:5a:dc:52: f3:f9:df:72:8d:7a:a7:c4:56:72:24:36:88:77:d3:5a:e0:49: 8a:da:1e:77:61:4c:64:69:71:98:4d:45:e1:dc:7d:22:6e:60: 31:14:4f:ab:2d:ec:57:7f:14:dd:89:c7:bc:c0:61:ef:a6:da: 2f:94:4c:2f:54:14:59:49:f0:fe:14:15:72:61:b1:44:41:b1: f2:75:42:e7:df:bf:34:8c:4e:c3:f4:22:c7:dd:85:20:a7:42: 7f:d6:26:ac:e3:c6:69:8c:7a:07:f3:6c:d3:17:ba:ab:e7:3c: 3c:81:bf:0c:bc:5b:c1:20:63:67:a7:12:6f:cf:10:31:ce:d3: e1:eb:34:e0:27:6c:49:ca:47:67:00:cc:47:fc:5c:84:b7:f5: 83:a5:af:41:4b:d7:9f:e8:96:d2:f7:7a:83:c0:0b:39:39:d6: a2:33:4c:31:c8:f8:71:9b:30:a7:db:c4:72:ef:cc:28:d2:86: 92:fd:f0:b7:4e:e2:1a:da:e5:88:9b:f5:a4:9b:57:30:9b:10: 48:19:f9:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VW+m97k0mzvgJIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDAzYWQxOGUtM2FkNC00MzA0LWFiMjItMzZlMDZiZmYwZDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnuoj6lc/i0Unr3Vws2gKQ1QXXoxJn8ySgPw oZj0juyvJicAjhcQELlhdKZgK/9EdLFPugHAx+0ra350kQEz4VFXTqn3AYZcZLn4 vYyiBqpKMW9PyEyPUvKhBIOfKkq1oEW3s2CuprLhPWpPBXZ8kGEW3bF+6GH5zv5M v81P/7vggMukcnEueZncwCgCT3pk4uvZco9fWpft5ab0fjb6hCEm1a4QOQ5Gg7ac qcU0yH3SnoQeHtOgsY6YanPmAc9UHfI1gRvzRVpAMh8yJLdgPPat5up7g0D7Jo1m I5Nh8kQMcaScdg/U/g1ZVnsq/KIr3nrD5LnFNuMdmXv3rKE+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP53U8jypcHqy/hrc+s35TdvG0G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTRlN2Y4NDQtZmI2ZS0z MzkyLWE3ZGItOWIyOGU3NDk5YTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg8E+xNy+6Nxa+fSCSASRPaboyFV/arHHeJu/iH0yS62r3Gsapb+a3H +bjTqXue/KkHuFrcUvP533KNeqfEVnIkNoh301rgSYraHndhTGRpcZhNReHcfSJu YDEUT6st7Fd/FN2Jx7zAYe+m2i+UTC9UFFlJ8P4UFXJhsURBsfJ1QuffvzSMTsP0 IsfdhSCnQn/WJqzjxmmMegfzbNMXuqvnPDyBvwy8W8EgY2enEm/PEDHO0+HrNOAn bEnKR2cAzEf8XIS39YOlr0FL15/oltL3eoPACzk51qIzTDHI+HGbMKfbxHLvzCjS hpL98LdO4hra5Yib9aSbVzCbEEgZ+Rs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:46 2025 by rpki-client