$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa File: 5782f257-baab-3d56-9344-fee735d00833.roa (raw, json) Hash identifier: Ui1KtAZvqf879l6WnRD1F2J3KDgf2wWzUD+Cx8Y18jQ= Subject key identifier: 41:14:31:4C:8F:6A:CC:21:C7:B3:D8:30:21:EB:C3:F7:5C:E4:7C:85 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F03BC10C239670AA404200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3356 IP address blocks: 130.174.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:3b:c1:0c:23:96:70:aa:40:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=e212fc5b-c1d5-46c0-98bb-b8643542bfe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:1d:26:2b:fa:0e:1a:be:2f:1b:90:b4:0a:f6: 2f:9e:66:e6:1c:0d:e7:d1:bb:ea:68:1e:f4:c1:6d: 5a:90:78:8d:bd:18:30:29:22:c9:91:e0:2c:96:b3: 80:01:fa:0b:ab:60:9c:ed:e7:e1:de:db:07:89:f5: 07:bc:05:26:33:84:31:76:e3:29:8d:9c:98:c7:b5: d7:c6:25:b7:da:28:32:fc:b2:29:d8:19:ec:0f:b7: ea:83:e1:2c:fa:bc:84:92:22:06:f4:8f:7c:c0:6f: 65:ec:c8:b2:26:ea:91:ad:38:fe:dd:be:3f:24:02: fd:af:e0:ac:c3:b1:65:cf:41:8a:c0:3f:21:04:fa: 35:32:d3:0e:34:75:45:dc:fa:72:b7:eb:c8:e9:7e: f5:37:e0:92:5d:74:ce:91:0f:28:7c:eb:f6:97:11: ef:fc:2d:ee:d2:26:6c:bb:98:4a:4c:2b:78:e0:e9: 27:07:d7:02:62:01:c7:b0:18:16:1e:06:6e:ec:56: fd:62:cb:58:18:71:b8:45:bb:4a:8f:8d:f6:15:82: 08:ad:52:2e:7c:15:b5:47:4e:05:d6:8c:92:f8:c4: b8:4b:60:8f:50:76:72:fc:22:b8:0a:e8:f9:e3:60: dc:d9:34:59:0d:19:16:0d:ff:1d:5e:a8:0a:58:d6: 9a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:14:31:4C:8F:6A:CC:21:C7:B3:D8:30:21:EB:C3:F7:5C:E4:7C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5782f257-baab-3d56-9344-fee735d00833.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7b:97:a3:48:91:0f:7a:6d:bd:36:61:f2:9d:6d:06:5a:bc: 20:d1:61:40:0e:eb:48:9d:b1:39:96:06:89:0a:00:f4:f3:3c: b9:a7:59:76:d1:e5:dc:ad:99:88:f6:95:cb:ad:b2:09:26:a5: 3d:f8:e1:c2:54:5d:9a:18:a7:1f:81:e4:54:cf:68:5f:ba:71: 2d:40:53:8c:7b:8c:b7:72:b6:5f:39:a2:d6:dc:88:67:3e:c5: 4d:cd:48:b4:ff:13:df:6e:74:23:6f:46:97:7b:26:75:42:2c: b8:ac:01:eb:db:b6:28:43:d2:18:ed:b9:7d:0c:e9:0b:a4:53: d1:ab:ff:9a:bc:a1:6e:1f:95:f3:e6:56:71:80:1d:e3:f4:89: 9f:14:44:c7:97:c1:7b:f7:10:19:d2:cf:a8:6d:9f:15:06:36: c8:82:cc:0a:1f:69:36:26:d2:8b:02:74:b0:35:37:d8:8c:a4: eb:a4:3b:41:dd:58:c0:40:b0:29:fa:2d:d1:bf:01:cd:64:ce: 28:e4:e5:4e:e5:65:35:34:b8:9b:20:08:ac:94:c2:a4:60:5e: ac:67:e9:94:45:50:8e:93:52:4d:79:f5:30:7c:fb:dc:2a:c2: a4:47:35:27:45:6b:df:cb:e7:56:ad:7c:2b:1f:de:4f:7d:79: 84:2f:aa:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DvBDCOWcKpAQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk ZTIxMmZjNWItYzFkNS00NmMwLTk4YmItYjg2NDM1NDJiZmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR0mK/oOGr4vG5C0CvYvnmbmHA3n0bvqaB70 wW1akHiNvRgwKSLJkeAslrOAAfoLq2Cc7efh3tsHifUHvAUmM4QxduMpjZyYx7XX xiW32igy/LIp2BnsD7fqg+Es+ryEkiIG9I98wG9l7MiyJuqRrTj+3b4/JAL9r+Cs w7Flz0GKwD8hBPo1MtMONHVF3Ppyt+vI6X71N+CSXXTOkQ8ofOv2lxHv/C3u0iZs u5hKTCt44OknB9cCYgHHsBgWHgZu7Fb9YstYGHG4RbtKj432FYIIrVIufBW1R04F 1oyS+MS4S2CPUHZy/CK4Cuj542Dc2TRZDRkWDf8dXqgKWNaa/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEUMUyPaswhx7PYMCHrw/dc5HyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTc4MmYyNTctYmFhYi0z ZDU2LTkzNDQtZmVlNzM1ZDAwODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB7l6NIkQ96bb02YfKdbQZavCDRYUAO60idsTmWBokKAPTzPLmnWXbR 5dytmYj2lcutsgkmpT344cJUXZoYpx+B5FTPaF+6cS1AU4x7jLdytl85otbciGc+ xU3NSLT/E99udCNvRpd7JnVCLLisAevbtihD0hjtuX0M6QukU9Gr/5q8oW4flfPm VnGAHeP0iZ8URMeXwXv3EBnSz6htnxUGNsiCzAofaTYm0osCdLA1N9iMpOukO0Hd WMBAsCn6LdG/Ac1kzijk5U7lZTU0uJsgCKyUwqRgXqxn6ZRFUI6TUk159TB8+9wq wqRHNSdFa9/L51atfCsf3k99eYQvqvM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:21 2025 by rpki-client