$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa File: 945495de-e862-3374-a52a-696db252a3fd.roa (raw, json) Hash identifier: oK9KQ3KqpeJkmfYY9zsDiLoVGQChIz7nqngLz9t0kH0= Subject key identifier: C8:B7:15:E7:71:C5:05:C9:03:A0:67:E0:D2:BB:01:01:75:90:DD:7F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC25C87BF89AC503106280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 130.174.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:25:c8:7b:f8:9a:c5:03:10:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=2b71ab7e-c4d5-40e3-8e7e-8f14aadd71ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f7:0c:f3:81:29:d7:f3:da:3b:de:be:47:97: 63:37:5d:5b:ff:65:90:a4:81:db:a0:b8:a3:e2:62: be:29:3f:43:1d:58:d9:1b:f8:51:1f:83:a7:83:ce: 66:eb:3d:ff:d7:b7:3e:b3:7f:59:65:af:40:db:91: bb:2a:a0:a7:30:82:6e:91:5e:af:2a:36:4d:58:37: 22:0f:47:0d:c9:e2:32:78:eb:57:0a:60:d4:d5:44: aa:3a:89:30:1c:76:2d:7b:78:1a:b9:a0:4d:b7:17: dc:51:7c:cb:49:a7:50:14:e0:c5:e1:94:03:e7:5c: 70:48:8b:20:ff:66:4b:57:d0:f0:f1:dd:87:56:fc: 3d:e8:29:a6:83:35:c2:95:8c:86:55:ce:b3:14:a8: 0c:de:2a:3b:3f:6a:ae:62:33:55:5b:ea:0b:d6:b2: a6:a7:0e:3f:e5:0f:74:ee:f4:10:3a:a9:dd:5e:49: 62:8c:11:91:6b:37:af:86:a6:79:ed:ed:de:f5:d0: 1d:af:5b:15:6f:b8:14:28:63:40:96:4d:31:ea:86: 7e:63:60:33:14:26:be:4e:c3:b6:2f:84:49:fe:fa: 8a:28:b5:ca:e7:07:a8:fa:23:7b:d4:09:55:c7:ca: 35:66:02:23:e5:27:8d:b0:65:ab:e0:58:6d:32:61: 3b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B7:15:E7:71:C5:05:C9:03:A0:67:E0:D2:BB:01:01:75:90:DD:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/945495de-e862-3374-a52a-696db252a3fd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:b2:e2:6d:6c:0e:96:4e:16:39:28:37:12:ac:94:12:58:39: 6b:fb:46:af:8c:3c:f4:f7:2a:1c:08:14:bb:f4:c8:5d:61:7d: cf:20:7d:e8:e6:63:7f:d8:83:b2:b1:80:a2:0a:33:32:a1:9d: 0e:d6:2a:3c:e6:82:b8:0f:91:16:2e:98:66:d8:0c:c8:5c:79: 74:9a:c9:8f:9f:c4:88:0a:ba:74:31:fc:c3:38:e2:72:00:67: d7:20:3a:94:29:b2:e2:f3:84:29:76:d9:2a:4a:ef:d2:a5:a3: e1:4c:43:01:50:2d:fe:13:ac:b0:d5:8c:65:88:0d:fb:e6:6a: 39:40:0f:d8:d0:fb:4c:28:15:d5:27:45:ac:0d:4d:58:0d:23: 6d:ee:30:c9:7b:a6:7b:cc:0d:ea:65:37:68:02:e3:0a:24:ae: bd:b5:0b:47:d3:37:b7:b8:52:2b:32:f5:34:0c:1c:cb:71:7d: 83:bc:17:d1:6b:c2:f8:f7:ea:62:f3:23:63:97:31:1f:8d:ec: 0f:fb:8a:76:c1:d1:cb:21:4a:0e:fc:1d:1c:c8:86:67:41:fe: b6:f3:22:68:2b:7a:e4:51:08:cf:5d:0d:6e:b5:e0:3f:ad:19: 92:7d:9f:f6:e6:7f:16:b0:93:0b:2e:0a:11:da:f6:56:61:e6: 01:a8:64:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCXIe/iaxQMQYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MmI3MWFiN2UtYzRkNS00MGUzLThlN2UtOGYxNGFhZGQ3MWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvcM84Ep1/PaO96+R5djN11b/2WQpIHboLij 4mK+KT9DHVjZG/hRH4Ong85m6z3/17c+s39ZZa9A25G7KqCnMIJukV6vKjZNWDci D0cNyeIyeOtXCmDU1USqOokwHHYte3gauaBNtxfcUXzLSadQFODF4ZQD51xwSIsg /2ZLV9Dw8d2HVvw96CmmgzXClYyGVc6zFKgM3io7P2quYjNVW+oL1rKmpw4/5Q90 7vQQOqndXklijBGRazevhqZ57e3e9dAdr1sVb7gUKGNAlk0x6oZ+Y2AzFCa+TsO2 L4RJ/vqKKLXK5weo+iN71AlVx8o1ZgIj5SeNsGWr4FhtMmE7xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMi3FedxxQXJA6Bn4NK7AQF1kN1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTQ1NDk1ZGUtZTg2Mi0z Mzc0LWE1MmEtNjk2ZGIyNTJhM2ZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADay4m1sDpZOFjkoNxKslBJYOWv7Rq+MPPT3KhwIFLv0yF1hfc8gfejm Y3/Yg7KxgKIKMzKhnQ7WKjzmgrgPkRYumGbYDMhceXSayY+fxIgKunQx/MM44nIA Z9cgOpQpsuLzhCl22SpK79Klo+FMQwFQLf4TrLDVjGWIDfvmajlAD9jQ+0woFdUn RawNTVgNI23uMMl7pnvMDeplN2gC4wokrr21C0fTN7e4Uisy9TQMHMtxfYO8F9Fr wvj36mLzI2OXMR+N7A/7inbB0cshSg78HRzIhmdB/rbzImgreuRRCM9dDW614D+t GZJ9n/bmfxawkwsuChHa9lZh5gGoZNQ= -----END CERTIFICATE-----Generated at Thu Apr 10 15:03:53 2025 by rpki-client