$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa File: 28025e21-3943-3e2b-973d-489d5dab5dc0.roa (raw, json) Hash identifier: NQdaMnZFZ6dU81YcHKxH4cUDk+h4ms3Nbu1wqYqd6VI= Subject key identifier: F8:D8:6C:F0:F8:CE:43:4C:2C:08:BE:F4:F8:0C:34:D5:30:8A:7D:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC28BF72565EA6E37DB040 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 130.174.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:28:bf:72:56:5e:a6:e3:7d:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=2ad40cee-b861-4316-92fb-0a57ce944e04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4d:27:8d:14:37:28:63:80:b2:cd:65:33:24: ce:80:34:18:02:a7:02:77:7d:44:9c:5a:86:9e:7b: 56:9d:4b:9f:ed:05:3d:34:62:19:d8:bb:06:1c:77: 87:2e:3d:da:ff:de:03:fb:9e:40:01:2f:66:e2:1c: d2:6d:9e:bf:39:3a:4e:1d:46:ef:ce:0b:92:19:6a: 28:02:bc:2f:cb:61:7d:a6:22:2d:00:ca:be:b0:4d: ab:20:86:00:89:2a:de:cf:44:82:ab:ae:11:42:05: 98:76:89:e7:d4:e3:13:de:c0:43:b6:eb:6e:4e:f2: d5:14:73:50:90:44:8e:05:f1:36:d7:c6:61:7b:a1: 3d:48:b6:20:a5:31:e0:a9:16:8f:cc:70:50:8b:06: 8b:d8:b0:7c:fd:d4:ac:d0:82:25:4a:c9:6e:2f:69: 36:8d:4a:02:a5:d0:1e:68:5c:89:53:45:38:de:a0: 8b:dc:e2:e9:f4:dd:66:a8:95:00:b0:40:4a:fa:10: 9e:c7:50:e6:0a:e9:76:4f:ff:b3:9e:b9:cb:90:c2: a2:ff:01:e8:a8:af:3e:b5:59:63:7b:5d:30:9d:35: cb:1f:a1:c2:9e:ce:d6:07:aa:94:dd:ae:ae:79:5d: 94:4f:e7:99:63:a3:c2:9d:80:47:87:22:85:2d:dd: f3:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D8:6C:F0:F8:CE:43:4C:2C:08:BE:F4:F8:0C:34:D5:30:8A:7D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/28025e21-3943-3e2b-973d-489d5dab5dc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:59:e9:8a:59:48:57:a1:f0:a7:d1:01:23:76:2f:69:b3:92: e9:9b:1a:4b:3c:46:c7:a3:54:be:b6:4e:a7:31:d4:10:08:bb: 99:f0:38:50:4b:c0:9a:37:49:d9:57:a2:48:8d:6f:85:58:b2: da:02:da:a6:76:64:d5:d1:fe:d8:fb:8b:63:02:15:f6:f9:f7: 15:3d:75:16:2d:57:7f:9d:05:4a:ea:d4:98:f9:f7:e1:d1:3e: bd:84:a3:8c:90:77:63:d5:f3:04:f5:8a:b2:37:43:ef:8b:56: 1d:4f:91:b8:5d:17:71:b4:6a:ea:62:00:65:cf:95:a4:9c:94: d4:6e:30:4c:22:b9:df:bd:9c:c9:a4:c1:b4:32:cc:dc:f8:92: f2:df:30:bb:a5:b6:fd:df:4f:73:94:80:19:fa:80:09:6c:e2: 65:4d:3e:7e:f7:c5:da:1c:76:2d:f7:87:8c:05:bd:27:ef:ba: 1d:11:33:5e:b8:c4:75:c8:96:70:79:57:64:6f:ca:4c:23:e4: c1:26:a7:8e:84:03:b8:3c:6c:b0:3e:cf:4f:66:d3:28:b2:58: ec:6f:bc:85:ef:e0:e1:36:05:a0:bd:bc:ca:97:86:81:9f:9d: d9:5a:0e:22:b5:6c:bc:7b:79:04:e4:6f:b8:57:f2:c8:f0:07: c2:e1:31:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCi/clZepuN9sEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmFkNDBjZWUtYjg2MS00MzE2LTkyZmItMGE1N2NlOTQ0ZTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg00njRQ3KGOAss1lMyTOgDQYAqcCd31EnFqG nntWnUuf7QU9NGIZ2LsGHHeHLj3a/94D+55AAS9m4hzSbZ6/OTpOHUbvzguSGWoo Arwvy2F9piItAMq+sE2rIIYAiSrez0SCq64RQgWYdonn1OMT3sBDtutuTvLVFHNQ kESOBfE218Zhe6E9SLYgpTHgqRaPzHBQiwaL2LB8/dSs0IIlSsluL2k2jUoCpdAe aFyJU0U43qCL3OLp9N1mqJUAsEBK+hCex1DmCul2T/+znrnLkMKi/wHoqK8+tVlj e10wnTXLH6HCns7WB6qU3a6ueV2UT+eZY6PCnYBHhyKFLd3zhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjYbPD4zkNMLAi+9PgMNNUwin1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjgwMjVlMjEtMzk0My0z ZTJiLTk3M2QtNDg5ZDVkYWI1ZGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJRZ6YpZSFeh8KfRASN2L2mzkumbGks8RsejVL62Tqcx1BAIu5nwOFBL wJo3SdlXokiNb4VYstoC2qZ2ZNXR/tj7i2MCFfb59xU9dRYtV3+dBUrq1Jj59+HR Pr2Eo4yQd2PV8wT1irI3Q++LVh1PkbhdF3G0aupiAGXPlaSclNRuMEwiud+9nMmk wbQyzNz4kvLfMLultv3fT3OUgBn6gAls4mVNPn73xdocdi33h4wFvSfvuh0RM164 xHXIlnB5V2Rvykwj5MEmp46EA7g8bLA+z09m0yiyWOxvvIXv4OE2BaC9vMqXhoGf ndlaDiK1bLx7eQTkb7hX8sjwB8LhMdc= -----END CERTIFICATE-----Generated at Sat Apr 5 13:17:42 2025 by rpki-client