$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa File: 3a14a4fb-67a7-3a3e-8054-6165db358899.roa (raw, json) Hash identifier: XkrTueuG2/hJoZ9NVhDYcTNeP8wlGPcwXBUfhLX6gds= Subject key identifier: 74:88:E2:99:2A:C9:C0:0B:0B:33:08:F7:9F:ED:44:AA:44:E2:19:3A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584596335D5270C53DF789FB0A40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa Signing time: Thu 18 Apr 2024 13:00:33 +0000 ROA not before: Thu 18 Apr 2024 13:00:33 +0000 ROA not after: Wed 17 Jul 2024 13:00:33 +0000 asID: 202 IP address blocks: 130.174.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:96:33:5d:52:70:c5:3d:f7:89:fb:0a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 18 13:00:33 2024 GMT Not After : Jul 17 13:00:33 2024 GMT Subject: CN=7d6d2bea-3fc7-47dd-ad5c-c4897990b216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ec:65:92:d5:ca:c7:65:c9:b9:0d:9a:de:00: 7f:24:de:dd:6b:27:3c:22:fd:dc:b5:66:dd:33:08: 84:55:5c:97:c2:b0:b0:e3:a4:75:33:7e:0e:a4:fe: fe:9a:ef:d5:6f:14:15:53:c6:02:41:e3:40:48:9e: e8:11:bd:2b:60:93:cd:3c:e0:dd:ae:0b:64:bb:10: 2b:4c:b3:2f:c9:37:94:12:f2:9a:ac:35:c7:74:23: dc:4e:f3:1f:27:01:5d:ef:4b:58:a6:99:fa:0b:fe: 88:33:03:15:9c:b9:a5:4b:e4:20:fd:9a:b3:dc:18: 42:8e:3d:57:77:a1:56:5b:ca:a8:e6:1a:42:f0:18: 71:ac:a3:fd:1f:67:f2:0e:1d:be:b2:d4:f8:e1:36: 16:ee:2c:80:4e:f3:19:9d:90:95:5f:11:a2:28:96: 13:08:7b:5f:fd:cd:2b:cd:ba:92:24:10:ee:a4:9e: a8:03:f5:eb:27:e7:2c:0e:da:85:e8:9a:a5:bd:da: 96:00:41:00:98:27:d1:d3:a3:df:7d:f2:bb:42:98: d8:f6:e8:ae:fd:eb:8b:73:a7:d9:2a:fc:1a:1e:04: fc:c2:60:d6:19:6c:74:94:48:c0:0f:f9:c8:53:2e: 56:dc:ad:48:89:59:41:ef:58:38:68:ba:66:b7:dd: 6d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:88:E2:99:2A:C9:C0:0B:0B:33:08:F7:9F:ED:44:AA:44:E2:19:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3a14a4fb-67a7-3a3e-8054-6165db358899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:45:b5:16:fd:47:7a:5e:63:47:f5:86:04:f3:6c:6f:3c:26: 6f:ce:94:f1:fc:f5:f0:83:bd:72:dc:e3:d9:48:ec:32:7b:3c: 9b:11:1c:71:1a:ea:7d:b6:8b:1a:88:2a:1b:79:ad:d2:20:31: 81:2b:07:ba:98:f7:80:cf:13:03:ed:2a:88:1c:7e:3e:05:60: 4d:7a:12:3c:66:b9:de:4a:66:4f:be:b6:c9:a7:a4:95:4f:74: 16:9c:ec:69:41:47:ef:ea:59:2b:10:84:19:29:6b:ca:85:ec: 00:0e:c4:ac:c3:0d:0d:8f:df:e1:be:ab:d5:d9:71:08:9c:ac: 6e:bd:db:86:6d:ad:84:29:e1:60:6b:31:85:88:c8:49:b6:63: 71:fb:6b:66:ee:b5:e9:26:08:70:73:5c:e6:aa:a2:90:c1:be: 25:86:50:e0:55:a7:0b:fb:26:b4:1c:d3:77:7c:6f:36:fc:a5: 04:90:4d:09:98:1e:c8:1b:40:c3:cd:05:48:c7:85:3b:d5:aa: 1c:a3:5a:05:82:a8:04:40:9f:e4:82:48:86:07:5d:eb:58:d4: 71:d5:5d:f3:3b:42:e9:3e:a1:9b:94:ca:85:2d:eb:f3:4d:c3: a1:ef:c3:d7:0b:8f:b5:37:13:e9:17:5f:27:0e:d9:d9:9f:55: 3f:53:5e:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEWWM11ScMU994n7CkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MDQxODEzMDAzM1oXDTI0MDcxNzEzMDAzM1owLzEtMCsGA1UEAxMk N2Q2ZDJiZWEtM2ZjNy00N2RkLWFkNWMtYzQ4OTc5OTBiMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOxlktXKx2XJuQ2a3gB/JN7dayc8Iv3ctWbd MwiEVVyXwrCw46R1M34OpP7+mu/VbxQVU8YCQeNASJ7oEb0rYJPNPODdrgtkuxAr TLMvyTeUEvKarDXHdCPcTvMfJwFd70tYppn6C/6IMwMVnLmlS+Qg/Zqz3BhCjj1X d6FWW8qo5hpC8BhxrKP9H2fyDh2+stT44TYW7iyATvMZnZCVXxGiKJYTCHtf/c0r zbqSJBDupJ6oA/XrJ+csDtqF6JqlvdqWAEEAmCfR06PfffK7QpjY9uiu/euLc6fZ KvwaHgT8wmDWGWx0lEjAD/nIUy5W3K1IiVlB71g4aLpmt91tHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSI4pkqycALCzMI95/tRKpE4hk6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2ExNGE0ZmItNjdhNy0z YTNlLTgwNTQtNjE2NWRiMzU4ODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFFtRb9R3peY0f1hgTzbG88Jm/OlPH89fCDvXLc49lI7DJ7PJsRHHEa 6n22ixqIKht5rdIgMYErB7qY94DPEwPtKogcfj4FYE16Ejxmud5KZk++tsmnpJVP dBac7GlBR+/qWSsQhBkpa8qF7AAOxKzDDQ2P3+G+q9XZcQicrG6924ZtrYQp4WBr MYWIyEm2Y3H7a2butekmCHBzXOaqopDBviWGUOBVpwv7JrQc03d8bzb8pQSQTQmY HsgbQMPNBUjHhTvVqhyjWgWCqARAn+SCSIYHXetY1HHVXfM7Quk+oZuUyoUt6/NN w6Hvw9cLj7U3E+kXXycO2dmfVT9TXuI= -----END CERTIFICATE-----Generated at Sun May 26 17:06:27 2024 by rpki-client on console-fra.rpki-client.org