$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f350d84-67cb-35c4-9872-5d8030d28116.roa File: 8f350d84-67cb-35c4-9872-5d8030d28116.roa (raw, json) Hash identifier: 3spmCpZzz3SmfMVZn/LcdB3Hv2q4d6hkIWQaE4sgZhk= Subject key identifier: 32:03:95:1B:AE:17:F9:CA:B9:E3:2B:7A:29:ED:A7:38:90:A2:AF:27 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BB33E0391909CA333B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f350d84-67cb-35c4-9872-5d8030d28116.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bb:33:e0:39:19:09:ca:33:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=25bab7d5-24b4-4670-bb57-8b3b142d8918 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f6:f6:3d:5d:2f:31:24:34:f4:e0:8f:4a:e6: 37:72:d1:d2:3e:c0:3d:06:12:01:59:4d:94:3e:9c: 1f:e6:2c:8e:e5:3a:d2:f3:6c:38:b0:6a:af:3f:1a: b1:78:b8:a4:39:e2:a6:1d:d7:c7:22:a1:22:0f:fc: d7:6b:4e:39:e3:e3:bb:d0:80:bb:6b:83:bc:ee:ec: 81:fa:3c:d2:e4:99:d1:95:12:52:bb:85:b1:df:1b: cd:d1:29:df:0a:25:ee:2e:af:1a:7a:45:49:13:35: 38:70:2c:70:23:a8:fe:67:0c:b9:e3:16:07:76:08: ab:84:a4:ef:26:1d:af:9b:64:1f:37:20:81:0f:8c: 96:82:70:a5:fa:d2:30:28:39:06:84:31:dd:a6:a4: 0c:92:45:92:0f:38:06:37:4a:06:f8:10:a4:5d:c0: 88:70:4e:2d:29:3b:5b:5a:81:c6:6c:3d:12:a6:49: ff:49:38:54:c5:96:a2:ce:88:13:d4:66:10:52:1a: a6:ad:6b:a8:e5:94:fd:66:c8:58:d1:88:a1:fc:fb: f4:6d:24:a2:cc:6f:af:e7:fe:49:45:c2:44:f1:28: 82:23:4f:83:08:b0:6b:3a:c7:57:f7:05:07:06:89: 1b:69:58:43:6f:96:12:2a:9c:fa:82:e1:e3:a6:99: 33:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:03:95:1B:AE:17:F9:CA:B9:E3:2B:7A:29:ED:A7:38:90:A2:AF:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8f350d84-67cb-35c4-9872-5d8030d28116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:42:b5:b1:fb:d7:32:a5:b1:24:db:69:0d:1d:17:77:e1:1a: 40:44:9e:f8:c8:bf:37:f5:2d:07:c1:a6:21:39:7e:53:51:30: ef:9f:23:8c:0c:46:63:53:5c:14:9f:f7:d7:8c:11:cd:8c:c2: 8b:14:a8:35:b3:5f:49:b5:a0:22:1e:e2:84:13:35:1d:31:69: 84:2d:87:6b:3a:70:6b:44:e0:6c:14:86:6b:91:52:1d:7f:9a: e3:2b:fc:f5:b3:39:59:0d:82:9e:59:df:c9:c0:a4:23:6b:4b: 0d:84:78:b3:f7:d2:b8:46:25:cc:6e:51:4b:90:1a:e7:ac:65: 50:a4:b0:ff:d6:ec:3e:b2:e5:75:9d:49:9b:4c:a1:e4:35:a4: 8a:a3:39:4a:e9:c8:d2:d7:9b:07:f1:25:cd:62:c3:cb:9a:ea: 52:1e:66:a7:f2:39:22:c2:32:ce:b4:96:83:52:66:1a:7d:c2: 33:4f:22:35:6b:f2:2b:ad:74:29:36:d3:61:a0:35:e2:aa:05: d5:26:9e:ab:1d:19:2a:ed:e7:91:b5:ad:b8:0a:4f:e4:d7:04: db:95:45:19:e1:d5:d5:f9:e2:fc:32:a6:b0:a4:5f:eb:c4:ee: 14:b9:e2:f7:37:5e:3b:8f:0f:9a:24:7b:21:46:41:f9:1c:d2: 66:04:d6:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrsz4DkZCcozOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MjViYWI3ZDUtMjRiNC00NjcwLWJiNTctOGIzYjE0MmQ4OTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPb2PV0vMSQ09OCPSuY3ctHSPsA9BhIBWU2U Ppwf5iyO5TrS82w4sGqvPxqxeLikOeKmHdfHIqEiD/zXa0454+O70IC7a4O87uyB +jzS5JnRlRJSu4Wx3xvN0SnfCiXuLq8aekVJEzU4cCxwI6j+Zwy54xYHdgirhKTv Jh2vm2QfNyCBD4yWgnCl+tIwKDkGhDHdpqQMkkWSDzgGN0oG+BCkXcCIcE4tKTtb WoHGbD0Spkn/SThUxZaizogT1GYQUhqmrWuo5ZT9ZshY0Yih/Pv0bSSizG+v5/5J RcJE8SiCI0+DCLBrOsdX9wUHBokbaVhDb5YSKpz6guHjppkzyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIDlRuuF/nKueMreintpziQoq8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGYzNTBkODQtNjdjYi0z NWM0LTk4NzItNWQ4MDMwZDI4MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRCtbH71zKlsSTbaQ0dF3fhGkBEnvjIvzf1LQfBpiE5flNRMO+fI4wM RmNTXBSf99eMEc2MwosUqDWzX0m1oCIe4oQTNR0xaYQth2s6cGtE4GwUhmuRUh1/ muMr/PWzOVkNgp5Z38nApCNrSw2EeLP30rhGJcxuUUuQGuesZVCksP/W7D6y5XWd SZtMoeQ1pIqjOUrpyNLXmwfxJc1iw8ua6lIeZqfyOSLCMs60loNSZhp9wjNPIjVr 8iutdCk202GgNeKqBdUmnqsdGSrt55G1rbgKT+TXBNuVRRnh1dX54vwyprCkX+vE 7hS54vc3XjuPD5okeyFGQfkc0mYE1tg= -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:30 2025 by rpki-client