$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/690bc8bd-c51a-307e-ab35-7d344ef81419.roa File: 690bc8bd-c51a-307e-ab35-7d344ef81419.roa (raw, json) Hash identifier: 8O8gYK2HRt0A4Tc8zyef9TswtMz9OJWQ1L6Mn0DBkSM= Subject key identifier: 4B:F0:FF:E6:53:F2:EF:D8:6A:AA:40:8C:6F:A2:12:1E:27:1F:48:89 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F03DF44599EDA275AC3240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/690bc8bd-c51a-307e-ab35-7d344ef81419.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 203 IP address blocks: 130.174.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:3d:f4:45:99:ed:a2:75:ac:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=ac7c72d8-fe28-4b9c-bc35-c2d0aef5878e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:85:3b:e1:d2:d3:e3:99:64:17:eb:ed:a8:ad: ee:52:6d:74:19:7a:3b:5d:00:f5:f5:97:86:3b:64: 38:8d:13:f4:f6:54:24:05:09:19:f5:8e:85:47:78: 40:85:c9:39:ff:7f:03:03:d1:30:7b:6e:cd:1c:4e: cf:ae:8c:51:58:92:cd:0e:fc:59:03:f2:8d:8c:ed: 47:b4:4f:37:69:5c:0d:d5:6b:15:71:b7:d5:69:5f: c5:4a:f8:67:a9:9b:06:80:4a:cc:2e:7d:ed:18:e1: 44:5e:ca:b2:cf:dd:62:5c:50:8d:a9:8d:6b:c4:f0: 1e:a4:c5:a2:e0:29:ed:76:e8:7b:03:4f:8f:b1:26: 8d:c5:ae:45:71:9c:89:ac:86:5b:a6:61:82:ce:8b: 5d:12:89:af:e8:6c:4b:95:1d:03:30:77:9e:c7:33: d8:2f:e5:94:90:fb:92:55:0f:d6:92:6c:a4:91:00: 19:c6:1b:75:39:1b:95:36:25:46:17:72:94:d1:9a: b4:d6:04:4a:87:a8:f0:9e:a8:89:4d:cb:0a:51:4c: eb:28:4f:e4:36:0b:d3:f2:5f:6a:d5:09:02:5b:ed: 75:ea:1f:c8:34:cb:65:66:93:f4:6a:3e:d3:ce:1f: b2:a0:12:18:64:ab:10:2a:b3:f5:28:92:29:f3:8c: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:F0:FF:E6:53:F2:EF:D8:6A:AA:40:8C:6F:A2:12:1E:27:1F:48:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/690bc8bd-c51a-307e-ab35-7d344ef81419.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:fb:dd:d5:9f:91:a3:e5:7c:d4:c7:f9:cb:00:b8:05:3b:34: 9b:47:01:4b:9b:f3:b7:9a:bf:f3:11:ce:74:7a:31:64:76:07: fb:98:cd:ab:10:9f:70:6f:51:20:89:1a:ba:b9:b4:8c:9d:04: dc:4d:0c:03:cc:e0:e5:07:48:d4:50:66:40:69:11:61:34:1d: 98:fc:dc:7c:6f:ff:aa:b8:ff:c2:ce:4d:c3:21:6b:4b:99:62: 13:6b:43:cd:12:f6:90:19:d8:c3:81:a3:ca:e6:8b:1b:d5:17: fe:09:28:2b:0a:24:c2:72:c4:c7:65:b3:bd:ac:f0:ce:fa:62: 06:b7:cd:f1:11:94:14:31:70:25:77:18:40:03:9a:bc:cd:8b: 35:76:82:61:95:f7:68:11:d8:ea:79:d2:a4:1a:e7:cd:6f:ec: 08:9e:8e:12:3b:11:33:47:f1:d0:59:43:47:cf:0f:57:23:cf: f2:ba:21:ba:1e:77:70:20:5a:dc:63:13:e3:69:1e:19:67:45: 20:1b:fd:fc:ae:89:52:6f:6c:80:36:a4:be:d8:de:06:ca:f3: 8e:d2:df:2f:70:78:86:5d:8d:5d:bc:60:74:2a:a1:59:61:49: 46:e7:ac:85:1d:5d:b5:e9:a6:0e:6c:9e:01:32:0e:75:e3:36: 33:74:7d:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8D30RZntonWsMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YWM3YzcyZDgtZmUyOC00YjljLWJjMzUtYzJkMGFlZjU4NzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YU74dLT45lkF+vtqK3uUm10GXo7XQD19ZeG O2Q4jRP09lQkBQkZ9Y6FR3hAhck5/38DA9Ewe27NHE7ProxRWJLNDvxZA/KNjO1H tE83aVwN1WsVcbfVaV/FSvhnqZsGgErMLn3tGOFEXsqyz91iXFCNqY1rxPAepMWi 4Cntduh7A0+PsSaNxa5FcZyJrIZbpmGCzotdEomv6GxLlR0DMHeexzPYL+WUkPuS VQ/WkmykkQAZxht1ORuVNiVGF3KU0Zq01gRKh6jwnqiJTcsKUUzrKE/kNgvT8l9q 1QkCW+116h/INMtlZpP0aj7Tzh+yoBIYZKsQKrP1KJIp84z3IQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvw/+ZT8u/YaqpAjG+iEh4nH0iJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNjkwYmM4YmQtYzUxYS0z MDdlLWFiMzUtN2QzNDRlZjgxNDE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABD73dWfkaPlfNTH+csAuAU7NJtHAUub87eav/MRznR6MWR2B/uYzasQ n3BvUSCJGrq5tIydBNxNDAPM4OUHSNRQZkBpEWE0HZj83Hxv/6q4/8LOTcMha0uZ YhNrQ80S9pAZ2MOBo8rmixvVF/4JKCsKJMJyxMdls72s8M76Yga3zfERlBQxcCV3 GEADmrzNizV2gmGV92gR2Op50qQa581v7AiejhI7ETNH8dBZQ0fPD1cjz/K6Iboe d3AgWtxjE+NpHhlnRSAb/fyuiVJvbIA2pL7Y3gbK847S3y9weIZdjV28YHQqoVlh SUbnrIUdXbXppg5sngEyDnXjNjN0fYI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:50 2025 by rpki-client