$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa File: a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa (raw, json) Hash identifier: kbQoCBKRAz0pQGa8HYSZpiBL1AUm0VraBgeJXJINRAI= Subject key identifier: 5A:74:64:8F:AB:79:E1:85:68:89:11:53:9B:8B:C4:9D:C6:B3:8F:9F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BBC97F828F9D9274FB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 130.174.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bb:c9:7f:82:8f:9d:92:74:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=8be1d8eb-4388-45f5-979c-94fef95a9673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6b:99:83:b9:54:8a:2f:66:68:95:72:4e:e4: d9:8f:b4:f4:cd:93:d2:6a:43:fd:0f:a6:0a:32:69: cf:8b:3f:1b:87:e5:29:8a:d8:6a:aa:40:92:73:8d: 90:3b:68:ff:1f:d5:f4:09:87:b5:33:f2:76:18:7a: 2c:20:2b:20:90:76:9d:3b:36:15:45:be:59:87:75: b0:f5:2a:81:d0:f9:82:9e:f2:b6:70:fe:ae:da:81: db:63:38:e6:36:d7:be:7d:4e:72:fd:f0:b1:17:c7: 0f:4d:c1:8e:ee:15:4c:b9:bf:2f:a5:26:44:a7:e3: 45:91:03:0f:5b:e6:08:33:a4:76:3c:e3:c6:ad:b7: 22:76:58:fc:bf:ec:4f:61:51:64:22:ef:82:dd:44: ea:c3:92:67:39:37:2b:9e:7a:cf:dc:ac:eb:93:b5: 59:4f:28:9a:72:b0:e1:b0:1a:17:0f:57:ba:d5:10: 75:bc:b5:6e:79:d6:c1:c5:b9:18:45:79:27:2c:0c: fe:6e:6d:f2:e0:8e:ae:cc:f4:18:d3:4c:15:bc:d8: e1:6f:d5:e6:f0:31:79:91:36:9a:6e:fa:be:66:0e: e6:f4:97:18:87:d9:61:c2:a5:7a:2f:c7:8a:b0:19: a3:d6:58:ac:6c:f9:83:95:5a:bd:e6:4e:32:58:76: 82:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:74:64:8F:AB:79:E1:85:68:89:11:53:9B:8B:C4:9D:C6:B3:8F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a026a2a0-d99e-3e1c-b85b-9cd3a7ab268c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:02:a4:c1:3f:0f:43:fa:9b:40:9e:88:a6:1b:b4:1d:2c:c7: 00:a3:cc:a0:23:09:cf:0c:1d:ec:62:04:5c:96:43:b3:26:b4: a9:56:f2:f7:67:56:13:5f:99:d6:2b:0b:db:73:0c:ff:2c:48: ac:c9:51:62:ff:40:ab:11:cc:e9:31:9b:f4:ea:ae:1c:cf:4a: b3:9d:33:6e:44:fd:fa:80:a2:01:03:76:cd:b0:28:fb:a2:58: 6e:ae:0d:7d:f3:63:6d:b5:ee:b5:c3:00:fa:c8:29:72:27:8f: 34:fa:b3:9f:0f:c0:c0:05:df:40:2e:c1:09:f1:13:52:af:b3: 25:9c:07:e0:54:be:89:4a:ca:60:ee:44:90:cc:30:ab:7c:17: 59:1c:3d:db:f9:26:54:82:32:1e:8d:47:45:87:e6:ee:89:a6: 90:ee:70:b9:71:20:e5:3a:d8:1b:2b:b5:c1:ec:a6:10:6c:8d: 67:f4:ec:55:d7:85:84:b9:31:f2:2a:c1:a0:0b:6b:08:0c:7f: b2:32:ba:d0:7b:16:8a:4d:78:81:12:c8:b5:d4:7f:ac:0f:44: 5b:77:db:45:7b:25:ce:70:6a:bf:3b:49:1b:de:cd:53:40:5e: 6c:0e:cd:05:95:da:57:d3:36:1f:68:a7:ed:89:b6:e4:3d:04: 1c:1f:24:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrvJf4KPnZJ0+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk OGJlMWQ4ZWItNDM4OC00NWY1LTk3OWMtOTRmZWY5NWE5NjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2uZg7lUii9maJVyTuTZj7T0zZPSakP9D6YK MmnPiz8bh+UpithqqkCSc42QO2j/H9X0CYe1M/J2GHosICsgkHadOzYVRb5Zh3Ww 9SqB0PmCnvK2cP6u2oHbYzjmNte+fU5y/fCxF8cPTcGO7hVMub8vpSZEp+NFkQMP W+YIM6R2POPGrbcidlj8v+xPYVFkIu+C3UTqw5JnOTcrnnrP3Kzrk7VZTyiacrDh sBoXD1e61RB1vLVuedbBxbkYRXknLAz+bm3y4I6uzPQY00wVvNjhb9Xm8DF5kTaa bvq+Zg7m9JcYh9lhwqV6L8eKsBmj1lisbPmDlVq95k4yWHaC9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp0ZI+reeGFaIkRU5uLxJ3Gs4+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTAyNmEyYTAtZDk5ZS0z ZTFjLWI4NWItOWNkM2E3YWIyNjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8CpME/D0P6m0CeiKYbtB0sxwCjzKAjCc8MHexiBFyWQ7MmtKlW8vdn VhNfmdYrC9tzDP8sSKzJUWL/QKsRzOkxm/TqrhzPSrOdM25E/fqAogEDds2wKPui WG6uDX3zY2217rXDAPrIKXInjzT6s58PwMAF30AuwQnxE1KvsyWcB+BUvolKymDu RJDMMKt8F1kcPdv5JlSCMh6NR0WH5u6JppDucLlxIOU62BsrtcHsphBsjWf07FXX hYS5MfIqwaALawgMf7IyutB7FopNeIESyLXUf6wPRFt320V7Jc5war87SRvezVNA XmwOzQWV2lfTNh9op+2JtuQ9BBwfJE8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:10 2025 by rpki-client