$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa File: 33f95527-3969-306a-a2c5-4693ebe9dd54.roa (raw, json) Hash identifier: 12eRaXrJhzJ++r63vkWOSSmNcBjVbSEEknXTrsmIEZY= Subject key identifier: 23:3C:87:D1:4A:58:FB:C1:77:D1:7F:A0:D0:2E:52:85:B3:2E:0A:FB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B295886F78506C237C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b2:95:88:6f:78:50:6c:23:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1a683309-a301-45f9-9ed8-9af889486d84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:69:19:3e:f7:e6:a9:43:ca:42:66:3d:5e: ed:4f:cf:49:de:44:c5:77:9f:ce:e5:a8:0e:e2:76: 9c:a2:ba:8e:db:25:11:54:85:90:e8:92:93:2f:df: 42:a0:7a:b5:37:69:65:89:49:78:0e:d1:df:b9:26: 90:33:e8:1f:5c:78:75:d5:a1:88:a4:f9:aa:f4:83: b1:d8:76:34:fa:74:64:fa:15:ba:78:1b:99:eb:77: cb:80:40:e0:1c:35:6d:66:7d:d9:2b:f8:e2:95:c7: d3:19:ed:2d:57:af:50:97:46:9e:c4:1c:89:fe:a5: 30:5c:2d:54:90:69:04:1f:02:0c:cc:ca:8c:9c:c7: 00:0b:6b:8e:db:1a:e5:07:e4:bb:42:a6:1c:d0:4d: bc:63:81:2f:4b:27:36:93:69:8a:84:e3:ec:ca:1d: 5d:0d:9d:ef:76:ce:0b:1d:0d:8b:54:73:96:d8:3c: cb:47:09:be:23:9f:e4:f9:6f:ae:88:74:b1:06:29: 12:01:34:79:4d:9f:45:a8:36:5e:91:11:44:84:62: 92:c2:d5:7e:9c:be:18:7e:e9:0b:94:8b:96:aa:6e: 55:b2:2d:0b:47:f0:5a:b0:c2:1a:0a:c8:8b:da:99: a6:71:ed:2f:a7:4b:27:47:64:0b:4c:32:f3:4c:85: c0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3C:87:D1:4A:58:FB:C1:77:D1:7F:A0:D0:2E:52:85:B3:2E:0A:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/33f95527-3969-306a-a2c5-4693ebe9dd54.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0b:62:94:23:92:9b:22:40:65:c8:84:d0:f1:7b:39:8a:55: c4:16:7c:61:e8:43:db:5f:80:1e:57:73:1c:1c:f5:d4:8b:f3: 2e:93:ba:2c:43:b2:d1:df:a6:68:69:dc:14:f0:1e:fc:cd:c0: b0:88:c9:a4:f2:15:49:e2:98:2a:9a:15:f3:9e:34:5a:72:c2: e7:18:a1:7e:3f:ef:5d:5d:e2:89:e8:f2:98:1f:f6:93:47:84: 32:ea:3b:62:08:cc:d4:8e:d6:1f:d2:36:aa:e5:43:c7:be:15: 6f:05:75:ea:69:a0:f6:1f:f3:82:a8:5b:87:6b:46:46:8b:78: 11:a5:85:cf:3b:a9:0b:ae:ea:75:10:2d:ce:2e:bc:52:f1:16: 16:48:3c:7b:7a:00:6b:2c:81:df:0f:04:7f:ff:d2:14:c2:3e: 73:e8:0d:cf:74:c9:72:d3:97:78:54:c5:c6:e9:54:1d:38:18: 8f:aa:ec:8f:00:e3:ca:61:43:88:ee:25:e2:87:a0:4f:c3:db: af:aa:3a:5d:29:d6:1f:ac:58:37:cb:c0:78:42:fd:b9:21:63: c3:f4:a6:3c:36:d6:88:a9:77:9d:08:a9:e0:a6:20:55:86:c2: e0:5e:a2:3d:c8:63:ed:40:96:d9:b1:51:df:31:cf:a0:91:3c: a2:4d:74:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrKViG94UGwjfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWE2ODMzMDktYTMwMS00NWY5LTllZDgtOWFmODg5NDg2ZDg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7hpGT735qlDykJmPV7tT89J3kTFd5/O5agO 4nacorqO2yURVIWQ6JKTL99CoHq1N2lliUl4DtHfuSaQM+gfXHh11aGIpPmq9IOx 2HY0+nRk+hW6eBuZ63fLgEDgHDVtZn3ZK/jilcfTGe0tV69Ql0aexByJ/qUwXC1U kGkEHwIMzMqMnMcAC2uO2xrlB+S7QqYc0E28Y4EvSyc2k2mKhOPsyh1dDZ3vds4L HQ2LVHOW2DzLRwm+I5/k+W+uiHSxBikSATR5TZ9FqDZekRFEhGKSwtV+nL4YfukL lIuWqm5Vsi0LR/BasMIaCsiL2pmmce0vp0snR2QLTDLzTIXAIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM8h9FKWPvBd9F/oNAuUoWzLgr7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzNmOTU1MjctMzk2OS0z MDZhLWEyYzUtNDY5M2ViZTlkZDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEALYpQjkpsiQGXIhNDxezmKVcQWfGHoQ9tfgB5Xcxwc9dSL8y6TuixD stHfpmhp3BTwHvzNwLCIyaTyFUnimCqaFfOeNFpywucYoX4/711d4ono8pgf9pNH hDLqO2IIzNSO1h/SNqrlQ8e+FW8FdeppoPYf84KoW4drRkaLeBGlhc87qQuu6nUQ Lc4uvFLxFhZIPHt6AGssgd8PBH//0hTCPnPoDc90yXLTl3hUxcbpVB04GI+q7I8A 48phQ4juJeKHoE/D26+qOl0p1h+sWDfLwHhC/bkhY8P0pjw21oipd50IqeCmIFWG wuBeoj3IY+1AltmxUd8xz6CRPKJNdI4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:03:31 2025 by rpki-client