$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa File: 5af3f919-f57e-33a2-9b2b-392746a4669f.roa (raw, json) Hash identifier: GvBkOMXBevq5N/AkVxacqo8F+dJDMSUEtsZnnOAWQRg= Subject key identifier: A2:31:7E:67:CC:A8:CD:DB:ED:39:D1:F6:7E:03:E4:B5:33:AA:22:67 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BBB094E1A9F3F086B980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bb:b0:94:e1:a9:f3:f0:86:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1e8cb1e3-45ba-4f2c-8a37-7d1e5943fb38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:f2:47:e6:12:f5:73:ef:8a:5c:2d:92:c2:92: 6d:8e:6f:73:8d:3c:b3:e6:95:5a:a3:56:77:e1:5d: dc:74:73:62:12:fd:f0:99:99:2c:da:ec:6e:8c:81: 61:31:71:76:b6:50:9e:0a:7c:30:64:2d:5a:c9:fa: 10:83:3e:6d:58:5c:78:76:d4:78:5a:0b:9f:55:0e: 44:75:20:30:0d:72:cf:22:32:e0:13:d9:5b:b3:12: ed:02:54:5b:19:e3:10:ae:14:34:cf:ce:e8:64:ed: 22:06:1b:78:fe:a2:f5:cc:47:a3:59:87:bb:17:d4: b6:67:9a:da:2c:d7:a3:28:66:78:e1:b5:e6:ae:44: 01:5e:39:d5:81:b7:94:18:83:84:1c:fe:26:13:4d: 93:65:9a:08:6e:ed:8d:97:60:c0:0b:f7:e8:ac:12: 7d:2f:b7:a9:d1:e4:60:64:f8:db:fb:9b:53:24:e7: be:dc:1b:43:cb:fb:a0:2a:2a:75:f7:bd:35:eb:89: cf:ab:0b:3a:c5:53:c5:4e:41:70:d9:9b:11:3c:45: 0c:5d:40:23:be:92:d2:a0:a3:fa:a3:a7:59:85:5a: 41:0e:a8:dd:0e:bc:fe:88:fb:97:13:2c:7e:03:20: 17:a3:c2:ba:cf:00:70:bb:d0:59:0b:65:93:8d:14: f0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:31:7E:67:CC:A8:CD:DB:ED:39:D1:F6:7E:03:E4:B5:33:AA:22:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5af3f919-f57e-33a2-9b2b-392746a4669f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:2d:ab:03:d6:d9:b4:c5:c4:1c:ec:71:a7:1b:2d:b9:ea:0f: a7:89:ea:c8:e4:ac:8a:39:d0:7a:f7:36:d8:81:3f:0e:52:a8: 13:2f:ea:27:23:e6:f4:9d:77:14:e6:23:90:e8:26:b3:ad:ee: 47:1f:b3:61:a6:32:39:1c:c8:b0:3a:bd:ff:a9:29:30:71:6d: e5:df:f0:36:d1:06:dc:af:1f:af:91:56:95:f4:53:f9:84:7b: 63:05:84:d5:4a:8e:f2:31:eb:31:3f:fd:55:e6:78:0a:e0:64: 48:93:8d:66:d6:ce:9d:7c:3d:63:93:cb:50:c2:0c:4e:cd:08: 4e:5b:fd:76:9b:a8:9e:0e:e1:3f:5c:7c:a4:94:b7:e9:33:51: 16:84:4d:c9:85:5d:7f:b6:a3:31:4c:42:4f:f4:58:9e:ab:6a: ff:e1:35:56:5d:1d:5a:ca:17:a5:cb:87:a4:89:60:d0:b9:11: fb:8e:ff:5d:39:61:76:38:45:cb:f1:59:fa:1e:6a:17:21:9a: 26:a9:3c:e0:67:25:ca:87:1a:b4:e4:85:1a:25:3f:c8:0e:6f: 3b:a0:21:48:90:31:f0:50:e5:e8:94:c7:37:19:58:6f:e7:2e: eb:67:30:f1:27:2b:1b:7e:ca:22:95:44:a4:4b:45:41:e8:d1: 0c:53:67:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRruwlOGp8/CGuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWU4Y2IxZTMtNDViYS00ZjJjLThhMzctN2QxZTU5NDNmYjM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfJH5hL1c++KXC2SwpJtjm9zjTyz5pVao1Z3 4V3cdHNiEv3wmZks2uxujIFhMXF2tlCeCnwwZC1ayfoQgz5tWFx4dtR4WgufVQ5E dSAwDXLPIjLgE9lbsxLtAlRbGeMQrhQ0z87oZO0iBht4/qL1zEejWYe7F9S2Z5ra LNejKGZ44bXmrkQBXjnVgbeUGIOEHP4mE02TZZoIbu2Nl2DAC/forBJ9L7ep0eRg ZPjb+5tTJOe+3BtDy/ugKip1970164nPqws6xVPFTkFw2ZsRPEUMXUAjvpLSoKP6 o6dZhVpBDqjdDrz+iPuXEyx+AyAXo8K6zwBwu9BZC2WTjRTwsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIxfmfMqM3b7TnR9n4D5LUzqiJnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWFmM2Y5MTktZjU3ZS0z M2EyLTliMmItMzkyNzQ2YTQ2NjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEotqwPW2bTFxBzscacbLbnqD6eJ6sjkrIo50Hr3NtiBPw5SqBMv6icj 5vSddxTmI5DoJrOt7kcfs2GmMjkcyLA6vf+pKTBxbeXf8DbRBtyvH6+RVpX0U/mE e2MFhNVKjvIx6zE//VXmeArgZEiTjWbWzp18PWOTy1DCDE7NCE5b/XabqJ4O4T9c fKSUt+kzURaETcmFXX+2ozFMQk/0WJ6rav/hNVZdHVrKF6XLh6SJYNC5EfuO/105 YXY4RcvxWfoeahchmiapPOBnJcqHGrTkhRolP8gObzugIUiQMfBQ5eiUxzcZWG/n LutnMPEnKxt+yiKVRKRLRUHo0QxTZ9c= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:37 2025 by rpki-client