$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa File: 38d06ae0-9690-34fa-a93a-db5e0debc30a.roa (raw, json) Hash identifier: 3tslI/apAlsxpnrT4uzOiZjR7pCYIF78OEKrDAhEyvg= Subject key identifier: D9:31:1F:2B:4D:B1:7C:11:B3:9E:D2:59:1E:3E:D3:3A:E0:D6:27:13 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BF4BBF9D1C43987BC460 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3356 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bf:4b:bf:9d:1c:43:98:7b:c4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bfa55166-7210-4e08-b28d-44cfc093cde3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:2e:59:02:be:78:14:ce:67:16:1f:3c:8b: ec:8e:ce:c2:30:55:dd:f2:a1:b0:5c:7e:d2:11:be: dc:79:90:89:38:34:1d:15:f4:aa:05:2a:a9:68:77: f0:17:47:04:f3:78:92:a5:2d:9d:de:d6:d4:8c:38: 2d:1b:a4:9d:fc:d7:25:36:4c:c2:3e:b8:e4:41:b4: f5:cb:51:cd:9b:a6:fa:63:f2:84:89:21:4b:12:94: 0b:ef:d1:44:91:0a:0a:a3:df:97:4a:43:b9:83:a5: e9:d0:07:52:66:3c:5e:3f:74:38:6b:b2:f8:fb:4b: 55:88:07:bc:a5:2a:c6:67:92:36:e4:1d:c6:d9:6b: e8:2e:4c:4e:9c:f6:83:44:74:71:43:e6:54:0f:6e: e9:3b:5a:56:97:a6:db:d2:45:f6:5c:d2:93:67:83: 39:a3:19:bc:0a:a8:33:b8:92:ac:3e:23:e5:e1:b7: 5b:68:c4:80:db:55:91:06:0e:64:54:42:f8:a4:38: 26:c8:02:23:a6:c1:bb:da:3b:db:be:ef:2d:09:5a: d0:c7:f5:18:91:63:eb:e7:ad:6b:79:98:e2:e3:39: 79:8c:83:a0:8b:62:3a:0b:38:90:e9:95:61:db:dc: 3e:22:31:43:40:c7:de:67:6a:1f:c3:4b:e0:74:83: cd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:31:1F:2B:4D:B1:7C:11:B3:9E:D2:59:1E:3E:D3:3A:E0:D6:27:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/38d06ae0-9690-34fa-a93a-db5e0debc30a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:83:46:a8:e0:17:6e:be:41:7d:7f:6f:dc:83:48:0e:65:c8: b3:60:98:0f:ed:bf:82:8d:9d:bc:d6:a7:fd:ac:c7:25:fb:f7: 2a:8b:3e:5e:75:e3:86:51:19:0a:5c:24:3e:a5:9b:e3:ba:b8: 0b:d4:f4:d2:44:fc:72:ea:cb:d3:58:54:aa:a7:4c:fc:6d:de: 85:97:9c:27:13:9d:3c:0b:d1:d6:08:ff:c1:fe:08:ba:09:1e: 66:14:fa:fd:af:dd:60:45:36:58:f8:80:52:8d:d4:ec:4a:26: 22:03:b3:6a:e5:a5:6a:5e:a0:38:69:13:41:14:a2:a3:04:69: 0b:8a:33:f4:2d:da:91:85:81:0c:a0:3a:60:17:f4:44:23:25: 89:6e:e0:79:23:17:2e:54:00:b1:37:91:f6:06:bb:dc:a4:c7: fe:be:6a:dd:7b:38:55:61:fa:e2:c8:fd:ec:81:ef:8c:cc:83: 1f:e2:f3:97:6d:31:8d:f8:d8:44:56:e0:c5:a1:70:cc:f1:f2: b6:9f:95:6f:2a:5a:66:d1:1d:3f:ea:51:96:04:28:19:23:5c: ca:22:87:34:7d:70:6b:37:16:23:37:47:c6:de:e3:49:a5:78: 60:53:f2:1d:37:6f:3a:2f:1a:ba:43:8d:1f:84:02:18:52:b4: ba:7e:f0:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr9Lv50cQ5h7xGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmZhNTUxNjYtNzIxMC00ZTA4LWIyOGQtNDRjZmMwOTNjZGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/ouWQK+eBTOZxYfPIvsjs7CMFXd8qGwXH7S Eb7ceZCJODQdFfSqBSqpaHfwF0cE83iSpS2d3tbUjDgtG6Sd/NclNkzCPrjkQbT1 y1HNm6b6Y/KEiSFLEpQL79FEkQoKo9+XSkO5g6Xp0AdSZjxeP3Q4a7L4+0tViAe8 pSrGZ5I25B3G2WvoLkxOnPaDRHRxQ+ZUD27pO1pWl6bb0kX2XNKTZ4M5oxm8Cqgz uJKsPiPl4bdbaMSA21WRBg5kVEL4pDgmyAIjpsG72jvbvu8tCVrQx/UYkWPr561r eZji4zl5jIOgi2I6CziQ6ZVh29w+IjFDQMfeZ2ofw0vgdIPNQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNkxHytNsXwRs57SWR4+0zrg1icTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzhkMDZhZTAtOTY5MC0z NGZhLWE5M2EtZGI1ZTBkZWJjMzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqDRqjgF26+QX1/b9yDSA5lyLNgmA/tv4KNnbzWp/2sxyX79yqLPl51 44ZRGQpcJD6lm+O6uAvU9NJE/HLqy9NYVKqnTPxt3oWXnCcTnTwL0dYI/8H+CLoJ HmYU+v2v3WBFNlj4gFKN1OxKJiIDs2rlpWpeoDhpE0EUoqMEaQuKM/Qt2pGFgQyg OmAX9EQjJYlu4HkjFy5UALE3kfYGu9ykx/6+at17OFVh+uLI/eyB74zMgx/i85dt MY342ERW4MWhcMzx8raflW8qWmbRHT/qUZYEKBkjXMoihzR9cGs3FiM3R8be40ml eGBT8h03bzovGrpDjR+EAhhStLp+8HY= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:38 2025 by rpki-client