$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/66dc42c1-e6dd-34c3-a8b2-7f8a7ac284e1.roa File: 66dc42c1-e6dd-34c3-a8b2-7f8a7ac284e1.roa (raw, json) Hash identifier: 8qL9uP9EzxTuEK6VQN5GUKqJkDswvJRUwBHGOEc7nsE= Subject key identifier: 5B:A3:57:62:69:45:39:23:CF:97:4F:D9:FA:FC:9F:BB:1C:52:FD:FF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B334641360E7F5FA5E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/66dc42c1-e6dd-34c3-a8b2-7f8a7ac284e1.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 130.174.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b3:34:64:13:60:e7:f5:fa:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=9ef71cf7-fc96-4247-82c7-e725b6ba6805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fe:24:22:8c:39:84:1c:c9:d0:a0:6c:17:67: 43:ed:fd:85:c6:4a:d3:9b:da:79:dc:67:ad:88:b8: 63:66:27:4d:1a:b6:83:94:91:bd:71:e9:f4:eb:3e: ff:3e:58:da:f7:62:32:54:27:d8:c0:27:b1:3e:30: 59:02:fb:9c:24:e8:6e:ce:54:c9:2a:bc:d5:09:46: 25:f7:1e:91:11:e1:f7:56:7d:18:33:5d:9a:26:f2: 02:af:ef:3c:0d:0b:0c:7f:86:b8:dd:d4:93:e7:01: ad:78:68:e6:45:28:0b:09:ac:f1:7e:dc:cd:2c:fa: 2c:81:2c:00:91:11:ae:c7:4f:a9:da:8f:a5:5e:94: f5:3f:19:ce:06:2d:1b:6e:15:4f:99:c6:d2:51:43: c1:71:1a:52:3a:30:e1:8a:b7:15:04:db:46:69:35: 7b:ac:22:84:df:e3:ae:d5:15:f3:07:01:3f:24:24: 06:f2:fd:a4:bd:4c:2e:6a:98:25:be:53:c3:76:07: e4:c6:61:63:3f:a3:ee:11:77:2c:c5:21:b8:01:46: d9:e2:69:f1:cf:25:c6:7b:8a:a4:db:a9:6b:01:21: 7c:ff:8a:88:63:1d:a3:31:12:0c:9c:bd:58:e1:c2: 1a:84:3e:a1:b7:59:1f:7d:4a:88:2b:03:7a:d3:02: 41:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:A3:57:62:69:45:39:23:CF:97:4F:D9:FA:FC:9F:BB:1C:52:FD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/66dc42c1-e6dd-34c3-a8b2-7f8a7ac284e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b5:18:ed:33:3d:8a:09:ea:9a:3f:24:8b:d2:8d:5a:83:7a: d2:f5:5d:55:c1:cc:4f:0c:fe:2d:a7:32:fd:3a:6f:fa:dc:b8: af:b6:a2:8c:ef:c0:4a:6b:5c:cd:5a:cc:33:b6:ef:9d:0f:52: 5c:81:af:6b:68:a2:a8:55:56:5d:e2:a5:fe:82:f1:8a:28:00: 17:7e:95:f6:44:15:06:1d:a3:1d:22:e0:34:fe:fe:e2:19:2f: 75:01:86:55:eb:12:a9:94:ef:f1:65:14:56:fe:9c:9b:b8:76: be:a4:32:20:55:63:f1:5c:54:48:7e:63:35:e7:f9:09:2d:b8: b8:0b:88:1d:e7:57:c6:75:94:18:f2:ab:36:7d:26:2c:c9:5c: 15:ae:e3:11:6d:55:06:ed:84:6b:92:d3:47:06:98:63:c8:94: 51:be:bb:4b:44:f9:3a:64:d7:96:3e:06:b4:e9:9e:3b:82:d0: 4c:68:63:f3:4a:fc:5f:9d:c7:a8:55:a1:19:6d:89:c2:9e:c6: 4f:b6:2b:f7:82:99:06:86:4c:62:4e:df:43:6c:44:2c:c8:e6: 67:4d:a1:3b:dc:85:d8:ab:06:aa:d8:c5:7c:37:99:c9:e0:88: 1a:03:fc:de:08:53:bd:e5:72:52:00:6f:51:2a:85:c1:9b:7d: 1f:d9:ae:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrM0ZBNg5/X6XoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OWVmNzFjZjctZmM5Ni00MjQ3LTgyYzctZTcyNWI2YmE2ODA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/4kIow5hBzJ0KBsF2dD7f2FxkrTm9p53Get iLhjZidNGraDlJG9cen06z7/Plja92IyVCfYwCexPjBZAvucJOhuzlTJKrzVCUYl 9x6REeH3Vn0YM12aJvICr+88DQsMf4a43dST5wGteGjmRSgLCazxftzNLPosgSwA kRGux0+p2o+lXpT1PxnOBi0bbhVPmcbSUUPBcRpSOjDhircVBNtGaTV7rCKE3+Ou 1RXzBwE/JCQG8v2kvUwuapglvlPDdgfkxmFjP6PuEXcsxSG4AUbZ4mnxzyXGe4qk 26lrASF8/4qIYx2jMRIMnL1Y4cIahD6ht1kffUqIKwN60wJBqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFujV2JpRTkjz5dP2fr8n7scUv3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjZkYzQyYzEtZTZkZC0z NGMzLWE4YjItN2Y4YTdhYzI4NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa1GO0zPYoJ6po/JIvSjVqDetL1XVXBzE8M/i2nMv06b/rcuK+2oozv wEprXM1azDO2750PUlyBr2tooqhVVl3ipf6C8YooABd+lfZEFQYdox0i4DT+/uIZ L3UBhlXrEqmU7/FlFFb+nJu4dr6kMiBVY/FcVEh+YzXn+QktuLgLiB3nV8Z1lBjy qzZ9JizJXBWu4xFtVQbthGuS00cGmGPIlFG+u0tE+Tpk15Y+BrTpnjuC0ExoY/NK /F+dx6hVoRlticKexk+2K/eCmQaGTGJO30NsRCzI5mdNoTvchdirBqrYxXw3mcng iBoD/N4IU73lclIAb1EqhcGbfR/Zrpc= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:18 2025 by rpki-client