$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3230411a-2bf7-346e-82c7-5e3a8bebcb1a.roa File: 3230411a-2bf7-346e-82c7-5e3a8bebcb1a.roa (raw, json) Hash identifier: 5j3HLs87fuU8tyWIALurbRN2hI0eiSISSmh/QmFFVyk= Subject key identifier: 33:3E:D9:C5:65:4F:A6:EB:52:C3:26:93:85:3D:47:E7:A2:A1:DF:6A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858459368CAD28D8C9EFC748A4B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3230411a-2bf7-346e-82c7-5e3a8bebcb1a.roa Signing time: Wed 17 Apr 2024 13:00:34 +0000 ROA not before: Wed 17 Apr 2024 13:00:34 +0000 ROA not after: Tue 16 Jul 2024 13:00:34 +0000 asID: 3356 IP address blocks: 130.174.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:93:68:ca:d2:8d:8c:9e:fc:74:8a:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 17 13:00:34 2024 GMT Not After : Jul 16 13:00:34 2024 GMT Subject: CN=340fd7bc-8b1c-45b4-9dd6-0177fb149e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:f4:1d:9d:39:d3:ef:b1:52:00:19:12:5c: e7:0c:87:01:d9:65:4a:74:74:47:c3:81:f9:48:be: c9:77:6c:fb:63:76:86:3e:0b:33:95:ab:d0:3f:36: 80:f4:eb:61:88:cc:28:64:33:62:26:d4:19:b8:b2: d7:cb:b3:25:6f:15:f0:92:e4:17:5d:a3:3f:b8:cd: 80:05:38:6e:bf:a9:b3:01:d3:9d:87:e8:6e:1f:ad: 40:82:42:c8:09:07:65:78:75:a1:39:f5:7a:74:64: 9c:5a:0c:22:9e:7f:7e:6f:9c:01:59:b3:cb:06:7c: ca:d8:da:35:83:79:a1:3e:ca:91:17:4a:a0:b2:c9: 87:8c:bc:b5:ec:c2:a9:ea:75:bf:1e:40:01:b8:da: e2:3c:31:c1:65:fb:19:09:86:54:1f:37:04:b9:7a: 7f:8b:e0:f1:40:51:97:42:7d:61:db:25:9c:b1:55: f7:bc:79:47:0c:49:7e:03:41:40:22:8c:4a:b3:6f: 80:2e:1a:fc:4a:a4:ea:d2:2f:c0:e0:67:1c:cf:3d: 32:a5:ee:b0:94:80:e3:d2:4b:16:dd:89:98:3f:cc: 21:c5:64:14:22:9c:6d:8d:2d:28:c0:73:15:1e:98: a2:0d:bf:b0:34:07:f8:f9:e8:09:df:e1:e2:15:05: c8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3E:D9:C5:65:4F:A6:EB:52:C3:26:93:85:3D:47:E7:A2:A1:DF:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3230411a-2bf7-346e-82c7-5e3a8bebcb1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:03:14:60:5f:e0:30:90:4f:4d:9e:e7:0e:31:fa:e5:d5:6b: 86:df:e2:ae:8f:c2:a7:12:a5:3e:88:5d:87:9c:9a:ad:51:fb: cc:d8:d1:4d:4c:c7:b2:99:c7:cf:38:6e:bb:be:4a:c7:72:73: 60:08:d6:25:3d:0d:0e:c0:32:11:76:12:8c:4f:db:a5:71:81: 5d:5d:9f:cd:78:07:c3:e5:79:15:6d:6f:3b:6c:e2:bd:c7:6d: ae:a1:89:35:23:c6:c4:e1:01:9c:fb:22:28:b9:e9:70:9c:1d: fa:bf:db:b8:0b:8d:99:e2:d6:ac:28:c8:82:d3:57:c7:85:77: f1:95:9a:7d:38:23:6e:f6:38:6a:ff:c6:fb:50:76:cb:b0:a9: fa:5c:0c:82:b9:5c:67:7e:41:98:a0:39:44:ba:e7:6b:ed:8c: 1a:79:17:e7:66:17:06:4f:45:57:be:b6:4f:d5:6f:3b:fc:64: fd:4a:b7:21:d6:07:91:03:d2:51:7d:c8:83:5d:c4:76:e7:97: 9d:ef:a4:60:db:06:c6:a7:37:5b:e7:c6:05:75:34:2d:7d:2d: 24:b5:ea:08:ff:c9:64:1c:ad:0b:19:10:f4:fd:3b:ad:0c:aa: ea:29:a9:1b:62:bf:5b:f9:d3:52:68:0c:36:5c:77:7b:08:13: 6d:34:8b:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWTaMrSjYye/HSKS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDQxNzEzMDAzNFoXDTI0MDcxNjEzMDAzNFowLzEtMCsGA1UEAxMk MzQwZmQ3YmMtOGIxYy00NWI0LTlkZDYtMDE3N2ZiMTQ5ZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsn0HZ050++xUgAZElznDIcB2WVKdHRHw4H5 SL7Jd2z7Y3aGPgszlavQPzaA9OthiMwoZDNiJtQZuLLXy7MlbxXwkuQXXaM/uM2A BThuv6mzAdOdh+huH61AgkLICQdleHWhOfV6dGScWgwinn9+b5wBWbPLBnzK2No1 g3mhPsqRF0qgssmHjLy17MKp6nW/HkABuNriPDHBZfsZCYZUHzcEuXp/i+DxQFGX Qn1h2yWcsVX3vHlHDEl+A0FAIoxKs2+ALhr8SqTq0i/A4Gcczz0ype6wlIDj0ksW 3YmYP8whxWQUIpxtjS0owHMVHpiiDb+wNAf4+egJ3+HiFQXIZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM+2cVlT6brUsMmk4U9R+eiod9qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzIzMDQxMWEtMmJmNy0z NDZlLTgyYzctNWUzYThiZWJjYjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQDFGBf4DCQT02e5w4x+uXVa4bf4q6PwqcSpT6IXYecmq1R+8zY0U1M x7KZx884bru+Ssdyc2AI1iU9DQ7AMhF2EoxP26VxgV1dn814B8PleRVtbzts4r3H ba6hiTUjxsThAZz7Iii56XCcHfq/27gLjZni1qwoyILTV8eFd/GVmn04I272OGr/ xvtQdsuwqfpcDIK5XGd+QZigOUS652vtjBp5F+dmFwZPRVe+tk/Vbzv8ZP1KtyHW B5ED0lF9yINdxHbnl53vpGDbBsanN1vnxgV1NC19LSS16gj/yWQcrQsZEPT9O60M quopqRtiv1v501JoDDZcd3sIE200i+E= -----END CERTIFICATE-----Generated at Thu May 2 14:57:42 2024 by rpki-client on console-fra.rpki-client.org