$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa File: 4853b05d-283a-3a7a-8089-1c972ae20611.roa (raw, json) Hash identifier: p8aX1F8HC7CByfNqcX/+J7FsbT+G1sK2nyyzFCPsr/4= Subject key identifier: 60:76:25:20:BA:0C:CA:F8:21:AB:1A:07:D2:B1:88:80:8B:7B:09:F0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848D0ABA6A8FDDCBB177306EC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 3360 IP address blocks: 130.174.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:a6:a8:fd:dc:bb:17:73:06:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=a67b9942-c807-47ee-8c62-a2582b58a843 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d5:77:9e:92:2e:17:66:a3:75:37:06:41:e5: fd:b2:80:e2:7a:8e:44:bc:36:c2:6e:69:98:d1:31: 02:4f:df:b9:46:67:36:e9:89:03:20:2b:2e:e7:9c: b7:50:b7:fd:88:ca:60:61:c6:b6:b8:6c:75:e5:72: d6:49:20:17:aa:ae:2e:02:c3:f5:3a:32:e3:4f:e0: 83:0b:8e:90:95:26:89:b2:55:48:c1:73:9b:e8:08: aa:00:0e:ed:57:07:49:cb:e3:c9:99:26:c5:6a:d7: ba:07:51:11:8c:70:1f:d1:8f:ff:0c:55:e0:a2:ac: 5a:a6:15:a6:3b:75:16:2d:0e:a3:d2:37:d3:8c:b9: 94:e7:84:68:b3:61:32:64:5f:12:38:4d:4f:b0:d4: 6f:ec:d1:6e:0d:dc:e8:e4:9e:de:ce:9a:68:c2:77: e1:39:63:85:ed:22:23:97:a2:4c:25:54:08:a3:55: 39:73:23:a0:fe:46:ea:77:c3:9f:e2:70:ca:77:56: 75:88:7f:0d:2b:68:9a:a7:19:e5:fa:d4:22:91:c2: df:29:80:91:2f:6f:cc:cd:46:47:dc:2c:dc:0e:05: 05:ae:03:23:c2:62:d7:2a:e4:7f:5e:b1:16:dd:2b: 25:ee:54:62:a5:05:fd:7b:69:51:c3:f2:e6:dc:7f: ad:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:76:25:20:BA:0C:CA:F8:21:AB:1A:07:D2:B1:88:80:8B:7B:09:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4853b05d-283a-3a7a-8089-1c972ae20611.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b8:f3:cb:c2:df:43:cf:fc:d9:01:a6:e5:21:b3:eb:52:12: 3f:c9:94:70:83:4b:15:63:62:e1:75:e1:cf:bb:a8:e6:b6:5d: 14:d2:e1:d1:32:e2:ad:e8:6d:35:ac:c1:b0:ec:1d:82:f9:e5: 62:45:ce:b4:e2:52:15:2a:6b:9d:bd:11:45:1f:a4:e9:cf:2b: 54:1d:23:3d:cf:20:17:e9:ea:66:c2:7b:9c:3a:b2:93:86:c6: 79:a6:0c:a1:06:81:db:e8:2d:28:e0:6e:ee:6b:ea:41:df:04: c1:36:5a:44:52:8a:0a:70:59:5b:2b:1e:6a:70:9d:44:e8:fc: 14:e4:42:ea:0a:19:fc:7b:ca:66:ff:eb:76:d4:37:87:b5:9c: f6:ef:e9:fc:a3:df:68:fc:01:62:74:d8:20:6c:fe:fe:fe:1a: 2b:cb:de:6c:32:94:0d:06:e8:d3:98:88:bb:db:20:cd:6d:c8: 89:b3:4a:6b:1c:6b:ad:5a:0f:c1:9d:ac:a7:be:a8:48:91:a2: de:23:a1:75:4b:b4:f3:fc:59:cc:24:29:59:29:ea:77:5f:76: 33:e3:08:46:56:be:8f:7f:37:1d:6a:de:40:af:a8:cc:3b:1b: 01:be:d4:b4:3b:fd:4a:c7:6e:2d:f0:78:da:b2:cb:db:63:c0: 16:54:09:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq6ao/dy7F3MG7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YTY3Yjk5NDItYzgwNy00N2VlLThjNjItYTI1ODJiNThhODQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtV3npIuF2ajdTcGQeX9soDieo5EvDbCbmmY 0TECT9+5Rmc26YkDICsu55y3ULf9iMpgYca2uGx15XLWSSAXqq4uAsP1OjLjT+CD C46QlSaJslVIwXOb6AiqAA7tVwdJy+PJmSbFate6B1ERjHAf0Y//DFXgoqxaphWm O3UWLQ6j0jfTjLmU54Ros2EyZF8SOE1PsNRv7NFuDdzo5J7ezppownfhOWOF7SIj l6JMJVQIo1U5cyOg/kbqd8Of4nDKd1Z1iH8NK2iapxnl+tQikcLfKYCRL2/MzUZH 3CzcDgUFrgMjwmLXKuR/XrEW3Ssl7lRipQX9e2lRw/Lm3H+t4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGB2JSC6DMr4IasaB9KxiICLewnwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDg1M2IwNWQtMjgzYS0z YTdhLTgwODktMWM5NzJhZTIwNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2488vC30PP/NkBpuUhs+tSEj/JlHCDSxVjYuF14c+7qOa2XRTS4dEy 4q3obTWswbDsHYL55WJFzrTiUhUqa529EUUfpOnPK1QdIz3PIBfp6mbCe5w6spOG xnmmDKEGgdvoLSjgbu5r6kHfBME2WkRSigpwWVsrHmpwnUTo/BTkQuoKGfx7ymb/ 63bUN4e1nPbv6fyj32j8AWJ02CBs/v7+GivL3mwylA0G6NOYiLvbIM1tyImzSmsc a61aD8GdrKe+qEiRot4joXVLtPP8WcwkKVkp6ndfdjPjCEZWvo9/Nx1q3kCvqMw7 GwG+1LQ7/UrHbi3weNqyy9tjwBZUCXk= -----END CERTIFICATE-----Generated at Sat Apr 5 21:54:45 2025 by rpki-client