$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5c52f4c6-13b9-3ecb-99b0-4e82c50ece93.roa File: 5c52f4c6-13b9-3ecb-99b0-4e82c50ece93.roa (raw, json) Hash identifier: QzVjqdV2Bb1T2GA4BIIclDqzoZMfIQa+7ABb+hNlh98= Subject key identifier: 70:F5:E2:A7:57:71:DD:76:22:43:E0:FD:B9:DA:F6:A4:9F:B6:4D:04 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC21E0E53795D76D03BE00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5c52f4c6-13b9-3ecb-99b0-4e82c50ece93.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 130.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:21:e0:e5:37:95:d7:6d:03:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=954a0c5a-4261-45ca-a9c5-f02a4d2646ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1c:2c:ea:8a:e9:a1:3d:c7:58:1c:f6:e2:43: 2b:a7:e4:d8:96:d1:ac:4b:76:4a:32:2a:80:b8:20: 9d:5b:8d:e0:85:ff:23:76:6e:42:33:80:d5:a2:78: e7:1d:c4:54:9a:85:49:d6:68:75:9d:6a:ca:5f:f5: 66:56:5b:12:bc:cc:71:f5:25:52:e3:04:11:a0:c2: 4b:1b:c8:e2:65:45:f5:54:bf:ff:93:88:44:e6:cb: cb:70:de:f1:40:b5:a6:55:45:f5:3e:ab:42:08:e8: 1e:74:26:59:08:58:5d:06:27:85:0f:23:f6:d4:dc: fd:05:8e:a9:82:1d:9f:93:ee:f4:85:f4:f7:82:17: f6:52:e1:ff:4b:b6:8b:80:08:a1:1c:5e:2b:96:a4: 29:94:62:ff:8f:e8:85:44:5c:c3:c4:6a:92:05:be: a7:5b:d4:7f:dc:0c:d5:a4:e4:37:f5:b1:43:13:80: ba:26:eb:88:78:8d:3a:cc:c9:a5:92:af:41:05:20: 5c:35:4c:6c:eb:a1:41:05:02:b4:95:a4:74:c5:1a: c4:37:ea:44:cd:84:67:0b:81:f5:6d:83:a2:42:94: d9:76:98:e8:ef:09:fe:23:62:a4:a8:df:53:8d:72: 16:e9:45:3a:7c:e4:2d:c1:5e:9a:b1:68:dd:b7:ed: 52:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F5:E2:A7:57:71:DD:76:22:43:E0:FD:B9:DA:F6:A4:9F:B6:4D:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5c52f4c6-13b9-3ecb-99b0-4e82c50ece93.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:4f:4a:8b:c9:bc:ff:36:71:db:20:70:83:13:12:e0:96:e6: 1d:1f:05:bc:9c:ca:d9:cd:70:0c:92:0a:a2:26:1e:0f:fd:a5: 69:f5:e1:47:04:a6:74:31:15:26:b1:c7:66:6e:a0:08:ea:d6: c7:4e:43:77:87:48:c6:7f:21:e7:f3:df:d5:18:1c:f0:67:e9: 02:1c:20:18:e2:1c:a5:67:38:a9:2d:0a:ab:2b:bf:ad:f1:39: d8:09:8c:34:c4:43:11:f9:15:79:fc:09:8b:83:c5:48:a4:7c: d1:95:cc:74:7f:0c:b5:b3:11:be:fb:c8:8d:cb:d0:68:35:e8: a5:f4:a1:6b:a2:ec:4a:6c:0a:7f:a4:6e:e3:16:7b:00:60:84: 97:b3:2c:3e:05:a0:cb:65:c5:e1:d8:72:39:00:25:cd:7d:c5: e2:73:5d:78:a9:e4:8a:ab:ab:75:c7:3f:4a:1c:64:de:fa:d3: c4:ce:1e:4d:86:15:c7:87:e6:89:46:75:77:5e:5b:3f:d2:db: eb:2d:80:27:51:dc:f3:00:d8:be:57:18:ee:84:2a:80:07:4f: 1e:94:b7:a8:65:46:9a:f2:5f:e0:4a:fa:aa:f9:7b:cd:43:07: f7:69:e6:4e:61:b1:22:00:ed:22:45:0d:7b:5b:54:46:0e:dd: 24:57:13:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCHg5TeV120DvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OTU0YTBjNWEtNDI2MS00NWNhLWE5YzUtZjAyYTRkMjY0NmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxws6orpoT3HWBz24kMrp+TYltGsS3ZKMiqA uCCdW43ghf8jdm5CM4DVonjnHcRUmoVJ1mh1nWrKX/VmVlsSvMxx9SVS4wQRoMJL G8jiZUX1VL//k4hE5svLcN7xQLWmVUX1PqtCCOgedCZZCFhdBieFDyP21Nz9BY6p gh2fk+70hfT3ghf2UuH/S7aLgAihHF4rlqQplGL/j+iFRFzDxGqSBb6nW9R/3AzV pOQ39bFDE4C6JuuIeI06zMmlkq9BBSBcNUxs66FBBQK0laR0xRrEN+pEzYRnC4H1 bYOiQpTZdpjo7wn+I2KkqN9TjXIW6UU6fOQtwV6asWjdt+1SAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHD14qdXcd12IkPg/bna9qSftk0EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWM1MmY0YzYtMTNiOS0z ZWNiLTk5YjAtNGU4MmM1MGVjZTkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxPSovJvP82cdsgcIMTEuCW5h0fBbycytnNcAySCqImHg/9pWn14UcE pnQxFSaxx2ZuoAjq1sdOQ3eHSMZ/Iefz39UYHPBn6QIcIBjiHKVnOKktCqsrv63x OdgJjDTEQxH5FXn8CYuDxUikfNGVzHR/DLWzEb77yI3L0Gg16KX0oWui7EpsCn+k buMWewBghJezLD4FoMtlxeHYcjkAJc19xeJzXXip5Iqrq3XHP0ocZN7608TOHk2G FceH5olGdXdeWz/S2+stgCdR3PMA2L5XGO6EKoAHTx6Ut6hlRpryX+BK+qr5e81D B/dp5k5hsSIA7SJFDXtbVEYO3SRXE3Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:23 2025 by rpki-client