$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa File: 16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa (raw, json) Hash identifier: 1lwETqCXKYgKyiE2b3fqJD7xR2QSxQJuND2eFru31UI= Subject key identifier: 8D:2B:87:19:0F:6F:70:87:B5:D9:27:FC:F0:04:A8:8B:3B:5D:61:14 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F03AF6D6A59774A904A200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3360 IP address blocks: 130.174.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:3a:f6:d6:a5:97:74:a9:04:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=9aa6906d-dd82-4400-90c5-6bc20a064c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:91:75:1b:83:a0:8e:a3:fd:6a:d6:79:f6:81: 26:02:71:02:34:87:a5:11:ae:2a:71:fb:05:a4:9c: 70:f5:52:f0:f8:9b:ad:3f:6d:23:bf:55:ed:d8:21: fb:b7:91:1c:d0:ce:36:62:82:95:8f:03:b5:74:ce: de:ae:b3:b5:b9:e8:33:36:df:18:4e:db:81:80:aa: 6b:e3:85:c8:cf:61:56:a5:89:6d:db:a6:f5:1d:0e: 30:f2:96:a3:59:a6:31:6f:2b:a6:45:97:6f:fe:7d: 07:e8:87:4c:ab:13:2f:60:5b:c4:58:17:02:db:07: 1a:37:a3:88:5d:7b:51:d3:12:fc:25:25:92:99:7f: 73:69:a5:0d:1d:3a:9d:f1:fe:56:b8:38:a5:c2:2d: 36:73:b2:3f:7b:b5:e1:4f:6c:5e:24:7f:35:d0:5d: 75:dd:4e:9c:a4:2c:90:b6:5f:91:86:aa:62:0b:9e: 66:c8:19:f6:aa:89:75:7a:5d:be:e2:97:9a:4b:09: 28:50:29:d1:d1:94:0a:29:e8:5c:57:e5:d4:80:3c: 04:42:49:06:84:1f:18:8b:80:db:4d:d1:72:8d:e2: ef:ad:08:71:87:68:57:a4:e2:9a:a6:b1:ac:1a:2f: 5d:0c:54:f4:7b:cb:83:4e:77:05:53:90:23:48:2b: 95:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:2B:87:19:0F:6F:70:87:B5:D9:27:FC:F0:04:A8:8B:3B:5D:61:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/16b838e9-f9a4-30e6-8ccd-8420e2eddcd8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:6c:11:b9:53:bc:2a:51:f9:61:17:0e:12:dd:05:28:a2:0e: 39:69:06:be:2f:77:25:65:10:ed:39:f9:77:3e:6a:ed:d2:63: dc:d0:52:ca:95:f2:1f:62:8a:ff:da:b4:32:d3:3a:63:85:29: 44:8e:ec:03:68:c9:a4:ec:1c:e3:51:bb:f0:3e:8b:e5:e1:36: a2:8a:4d:64:ab:0d:54:ac:a0:10:be:2d:48:d8:a3:5e:c0:78: c4:23:d6:28:d0:3c:3a:fd:53:9e:49:90:2c:02:f9:99:86:2d: b9:ca:72:b6:88:37:11:41:09:2c:2d:ff:83:bf:78:31:44:c4: 87:fd:ad:d6:90:5a:cf:50:dd:97:fc:bc:b5:d4:22:fe:78:96: b9:c0:56:bb:e3:63:05:35:5b:15:5a:91:8d:58:2b:77:6a:95: 7c:31:ba:98:95:d9:12:00:be:18:b9:33:cb:df:79:1d:b7:95: 82:fe:b2:f7:12:a1:ee:db:92:20:c4:ca:b4:6f:72:9d:f7:b4: 69:1e:23:bd:30:57:67:11:cb:a0:24:47:a4:d4:c5:2f:b6:c6: a8:04:f9:e0:bd:91:10:8f:d3:0a:c3:be:25:25:7d:92:fb:9f: 67:22:23:36:ca:f2:e1:d6:c6:7c:a6:66:fc:cb:a6:6e:8b:d9: b6:16:2c:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8Dr21qWXdKkEogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk OWFhNjkwNmQtZGQ4Mi00NDAwLTkwYzUtNmJjMjBhMDY0YzhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5F1G4OgjqP9atZ59oEmAnECNIelEa4qcfsF pJxw9VLw+JutP20jv1Xt2CH7t5Ec0M42YoKVjwO1dM7errO1uegzNt8YTtuBgKpr 44XIz2FWpYlt26b1HQ4w8pajWaYxbyumRZdv/n0H6IdMqxMvYFvEWBcC2wcaN6OI XXtR0xL8JSWSmX9zaaUNHTqd8f5WuDilwi02c7I/e7XhT2xeJH810F113U6cpCyQ tl+RhqpiC55myBn2qol1el2+4peaSwkoUCnR0ZQKKehcV+XUgDwEQkkGhB8Yi4Db TdFyjeLvrQhxh2hXpOKaprGsGi9dDFT0e8uDTncFU5AjSCuViQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0rhxkPb3CHtdkn/PAEqIs7XWEUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTZiODM4ZTktZjlhNC0z MGU2LThjY2QtODQyMGUyZWRkY2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZsEblTvCpR+WEXDhLdBSiiDjlpBr4vdyVlEO05+Xc+au3SY9zQUsqV 8h9iiv/atDLTOmOFKUSO7ANoyaTsHONRu/A+i+XhNqKKTWSrDVSsoBC+LUjYo17A eMQj1ijQPDr9U55JkCwC+ZmGLbnKcraINxFBCSwt/4O/eDFExIf9rdaQWs9Q3Zf8 vLXUIv54lrnAVrvjYwU1WxVakY1YK3dqlXwxupiV2RIAvhi5M8vfeR23lYL+svcS oe7bkiDEyrRvcp33tGkeI70wV2cRy6AkR6TUxS+2xqgE+eC9kRCP0wrDviUlfZL7 n2ciIzbK8uHWxnymZvzLpm6L2bYWLDY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:09 2025 by rpki-client