$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa File: 85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa (raw, json) Hash identifier: 6kwxLR33APCBnkADZtOwh5a4eC07ZMpQEKdd+cp/goY= Subject key identifier: A1:9F:7D:17:A1:E6:66:B8:88:06:49:11:CD:A1:09:3E:28:CB:9A:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C2EE08A1BC82771D8A00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 130.174.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c2:ee:08:a1:bc:82:77:1d:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=7b99f112-0eff-484f-a80a-daf1eae66d2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:91:14:83:d0:39:62:26:cd:9e:a6:8f:ae:35: 12:fe:c0:12:d1:3f:58:33:45:7c:de:b8:7c:2a:da: 97:82:9a:67:bf:9b:4d:5f:cd:7e:0a:25:e2:26:20: d9:ad:41:c2:bf:5f:89:9a:75:c0:f9:e2:c9:03:50: 01:80:ce:df:85:9e:36:d7:58:af:ba:ed:94:46:f5: 17:9f:3c:ab:44:c1:47:81:05:4d:80:80:5f:67:80: 9f:34:d7:ce:a5:2f:fc:70:e3:52:29:89:a8:17:82: 23:67:cc:81:9c:bf:29:96:0b:6f:fb:59:b2:20:85: 9e:5f:54:f3:3e:8d:61:bc:1c:be:fa:a5:f6:6c:e4: 1c:a8:c2:41:49:8d:8e:bb:71:15:6a:80:50:f5:d2: 3d:c4:4f:0c:00:8c:13:63:6c:09:c8:df:3b:4a:cd: 57:d9:d8:32:c4:1d:be:c1:7d:34:1a:e0:b5:41:17: 9d:a5:81:d1:e1:00:73:90:d7:2a:20:d1:4f:e4:ad: 62:80:ca:83:95:49:a1:16:f0:c0:3b:37:62:f2:58: 15:8b:8e:a7:c4:c0:e9:59:9d:bf:c9:b5:2a:2a:00: 8f:36:1f:b3:f0:e5:4b:de:16:4f:c7:5c:93:47:a1: d4:ec:2c:04:61:11:20:11:6b:ec:89:99:84:6f:b9: ea:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9F:7D:17:A1:E6:66:B8:88:06:49:11:CD:A1:09:3E:28:CB:9A:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/85a0fef3-eba8-309a-9b62-539d2ecfcafe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:6f:31:5a:09:3b:17:bb:71:6c:1d:25:50:e8:c3:20:8f:dd: 43:da:c3:af:e0:dc:90:ed:76:07:7c:64:2c:c3:b0:4f:f5:b4: 9b:3b:6f:a0:3d:0a:55:03:78:06:62:5a:8d:7b:5f:6b:ff:4e: ad:31:9c:8f:d5:4f:a5:3e:83:fa:83:d6:2b:40:40:48:0a:86: 14:bf:b8:68:35:97:0c:c3:b3:c3:10:91:64:d0:03:51:f4:fd: b0:b8:a0:f9:cd:aa:fa:f5:f0:8d:1a:4e:75:9e:c2:a4:ff:3a: c6:8a:9b:e9:7c:c2:4a:1e:72:c9:c7:cd:90:ba:62:78:b3:ed: 10:cd:ed:6a:54:c0:36:2c:d7:96:77:9b:40:f6:6f:a6:2c:f0: 6f:4c:e3:a9:bd:49:31:e0:38:0d:80:77:6f:f9:98:91:34:90: 01:7e:bc:df:18:ac:29:6e:1c:50:c4:c1:36:53:d0:fd:59:8a: 91:31:f7:a5:83:b5:b6:f7:69:e6:c3:a6:ce:26:19:6b:25:87: 62:d3:e0:21:52:ba:aa:a5:9e:d9:4e:f0:53:db:ae:36:09:1b: c6:6d:89:4f:b9:bd:17:cc:25:fb:db:5a:e5:9c:63:fc:1e:3c: 93:ea:92:88:fc:7f:76:c8:14:72:96:54:5d:df:64:3c:53:7f: 95:96:16:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsLuCKG8gncdigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk N2I5OWYxMTItMGVmZi00ODRmLWE4MGEtZGFmMWVhZTY2ZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpEUg9A5YibNnqaPrjUS/sAS0T9YM0V83rh8 KtqXgppnv5tNX81+CiXiJiDZrUHCv1+JmnXA+eLJA1ABgM7fhZ4211ivuu2URvUX nzyrRMFHgQVNgIBfZ4CfNNfOpS/8cONSKYmoF4IjZ8yBnL8plgtv+1myIIWeX1Tz Po1hvBy++qX2bOQcqMJBSY2Ou3EVaoBQ9dI9xE8MAIwTY2wJyN87Ss1X2dgyxB2+ wX00GuC1QRedpYHR4QBzkNcqINFP5K1igMqDlUmhFvDAOzdi8lgVi46nxMDpWZ2/ ybUqKgCPNh+z8OVL3hZPx1yTR6HU7CwEYREgEWvsiZmEb7nqpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGffReh5ma4iAZJEc2hCT4oy5rtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODVhMGZlZjMtZWJhOC0z MDlhLTliNjItNTM5ZDJlY2ZjYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFvMVoJOxe7cWwdJVDowyCP3UPaw6/g3JDtdgd8ZCzDsE/1tJs7b6A9 ClUDeAZiWo17X2v/Tq0xnI/VT6U+g/qD1itAQEgKhhS/uGg1lwzDs8MQkWTQA1H0 /bC4oPnNqvr18I0aTnWewqT/OsaKm+l8wkoecsnHzZC6Yniz7RDN7WpUwDYs15Z3 m0D2b6Ys8G9M46m9STHgOA2Ad2/5mJE0kAF+vN8YrCluHFDEwTZT0P1ZipEx96WD tbb3aebDps4mGWslh2LT4CFSuqqlntlO8FPbrjYJG8ZtiU+5vRfMJfvbWuWcY/we PJPqkoj8f3bIFHKWVF3fZDxTf5WWFgE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:23 2025 by rpki-client