$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa File: 45903c34-be56-3f79-af14-28700a3b4f0b.roa (raw, json) Hash identifier: sIZOORbNG3lxei/tjPX0TFvVWzzkP2HLnpU1JnmQIjU= Subject key identifier: F8:04:07:5E:52:56:34:01:3E:CF:A4:6C:0F:DC:0A:81:99:92:AE:9C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F036A57CF39C52C6B3B180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3360 IP address blocks: 130.174.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:36:a5:7c:f3:9c:52:c6:b3:b1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=1ce79ba9-9306-439e-8ef3-95bae5c93890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:bc:24:d7:1a:f6:b9:c5:57:0a:c0:f6:37:c2: 58:44:3d:c2:5e:0e:0a:b9:ca:88:f7:16:8e:83:1f: a5:5b:7c:6a:f5:06:14:1c:f5:12:06:72:3f:56:73: 8a:8d:15:22:ba:10:39:b6:04:01:91:18:89:ed:c0: 42:5d:54:82:2b:47:7a:1f:94:01:27:c8:32:61:98: bd:39:a6:c9:be:ff:e8:02:25:69:d3:58:8e:c8:b0: 28:04:eb:85:84:4b:99:9c:04:6e:4f:c8:46:9d:84: 57:54:f2:09:30:aa:c2:6f:3c:ac:bd:61:40:93:1e: 4a:eb:fe:ee:65:be:f8:c7:68:9e:c6:dc:9f:80:eb: 97:ca:64:e3:be:db:a1:6c:f8:1a:98:be:95:82:83: 01:12:02:ab:72:ec:fb:d7:f6:bc:5f:40:61:1a:17: c1:63:ec:68:82:b5:46:33:c9:f9:3c:f6:7f:d1:dc: 58:83:47:98:ce:17:bc:66:bb:01:0c:f1:7e:10:76: 2c:a4:48:f7:35:e0:14:40:c8:da:5e:97:ed:15:f5: 91:57:02:82:61:eb:55:8a:df:33:3c:a4:ec:85:f1: 4f:c9:b2:12:00:9e:cd:ae:81:87:a6:df:9a:b6:d0: a3:e9:23:1a:83:09:51:52:b2:51:8e:ea:65:d0:d2: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:04:07:5E:52:56:34:01:3E:CF:A4:6C:0F:DC:0A:81:99:92:AE:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:02:af:26:c1:b8:fc:2b:ae:b7:1c:22:e2:ca:dd:20:55:b8: c6:85:0a:37:c9:d8:be:a2:d3:c4:75:5d:32:80:c7:e1:e8:bf: ec:93:a5:01:64:50:90:b8:77:7a:52:af:b4:e0:8c:47:8e:2e: f9:68:76:ee:45:a8:bc:ce:c0:15:07:04:b3:45:dd:57:e7:b8: ea:c3:7d:2c:99:a9:ca:d6:74:f9:4f:6a:07:4a:7e:d2:1b:41: c4:28:43:82:5d:5a:9d:6c:b0:cf:99:ae:cb:73:bb:71:55:9f: 9d:ea:f0:c3:e5:75:19:ab:0d:54:f7:ea:f6:e4:c0:55:ea:03: b9:b8:13:40:4d:b9:55:b6:8b:9c:0f:d7:42:58:8a:59:06:62: 67:c8:26:68:e2:e0:fc:25:ff:11:55:c3:61:1b:6d:03:e9:1a: 7c:50:c9:02:65:67:68:4f:8b:91:05:a9:7e:7d:f6:14:e9:f9: 8d:23:93:f3:98:14:e5:bb:32:92:fb:50:8e:92:1c:c7:c5:1e: 73:89:a9:aa:6b:7e:23:37:95:86:22:9b:e6:07:dc:f4:75:4d: 43:1b:c2:93:ee:46:7b:b1:42:6e:60:2c:24:1e:52:53:d3:0f: ee:13:b2:0b:07:73:66:33:ef:a6:49:7a:6e:37:0a:4a:40:cd: f8:b1:87:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DalfPOcUsazsYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MWNlNzliYTktOTMwNi00MzllLThlZjMtOTViYWU1YzkzODkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrwk1xr2ucVXCsD2N8JYRD3CXg4KucqI9xaO gx+lW3xq9QYUHPUSBnI/VnOKjRUiuhA5tgQBkRiJ7cBCXVSCK0d6H5QBJ8gyYZi9 OabJvv/oAiVp01iOyLAoBOuFhEuZnARuT8hGnYRXVPIJMKrCbzysvWFAkx5K6/7u Zb74x2iextyfgOuXymTjvtuhbPgamL6VgoMBEgKrcuz71/a8X0BhGhfBY+xogrVG M8n5PPZ/0dxYg0eYzhe8ZrsBDPF+EHYspEj3NeAUQMjaXpftFfWRVwKCYetVit8z PKTshfFPybISAJ7NroGHpt+attCj6SMagwlRUrJRjupl0NIysQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPgEB15SVjQBPs+kbA/cCoGZkq6cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDU5MDNjMzQtYmU1Ni0z Zjc5LWFmMTQtMjg3MDBhM2I0ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwCrybBuPwrrrccIuLK3SBVuMaFCjfJ2L6i08R1XTKAx+Hov+yTpQFk UJC4d3pSr7TgjEeOLvlodu5FqLzOwBUHBLNF3VfnuOrDfSyZqcrWdPlPagdKftIb QcQoQ4JdWp1ssM+Zrstzu3FVn53q8MPldRmrDVT36vbkwFXqA7m4E0BNuVW2i5wP 10JYilkGYmfIJmji4Pwl/xFVw2EbbQPpGnxQyQJlZ2hPi5EFqX599hTp+Y0jk/OY FOW7MpL7UI6SHMfFHnOJqaprfiM3lYYim+YH3PR1TUMbwpPuRnuxQm5gLCQeUlPT D+4TsgsHc2Yz76ZJem43CkpAzfixh1s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:24 2025 by rpki-client