$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a227d588-6a2e-34f0-9173-7d7095722a0a.roa File: a227d588-6a2e-34f0-9173-7d7095722a0a.roa (raw, json) Hash identifier: gKButbYy+Ft7lLRrVYn+M/9gpK6F2rwuwlEQ1NISXKM= Subject key identifier: 63:85:DF:B9:14:06:48:E1:86:CD:E0:9C:4A:89:50:32:10:96:3E:D1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F0300905D22DC7192C99E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a227d588-6a2e-34f0-9173-7d7095722a0a.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 202 IP address blocks: 130.174.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:30:09:05:d2:2d:c7:19:2c:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=a0fb70a5-a794-4b4f-a7ae-536a082452cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5f:67:3e:8e:3a:ba:5c:38:cb:33:9f:ac:ae: 1f:af:70:85:25:2e:61:90:2c:32:c0:01:57:ee:91: 53:b0:37:37:b8:62:5d:38:32:3e:d9:b0:04:de:77: b7:b2:45:5f:91:da:b9:0d:9d:a6:0d:a6:22:33:93: 2b:6e:94:39:5d:03:60:4f:97:78:78:85:8b:8d:f1: d3:47:2e:53:19:85:82:28:03:a8:46:25:14:c8:08: 9d:e7:86:88:30:4d:32:7a:b7:47:c7:82:dc:f0:ef: 4e:c3:fc:d3:b9:b7:70:40:bc:7c:46:b8:bd:7d:5c: 4b:04:00:20:2f:69:08:08:0c:98:ca:3d:0d:8e:0a: 52:e6:84:e9:15:03:96:d9:cf:79:4f:42:37:cf:6a: 31:25:b9:9d:d6:94:f0:6b:c5:bc:d8:01:1b:57:ed: d7:25:ea:a9:5b:42:08:00:cf:62:80:c8:22:ef:0c: 3d:49:42:08:51:a6:46:7c:da:92:f6:f5:0f:5e:0b: cf:3c:f3:62:d8:33:8c:7e:30:f4:98:45:39:71:8a: 24:9a:f1:68:cc:55:d5:af:02:79:ad:1a:ea:f2:fa: ba:3a:b1:94:ac:d3:2f:bc:87:a7:6f:bb:f5:61:92: f2:e3:fa:60:d6:4b:af:d9:1f:d9:c6:62:1d:54:3a: 4f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:85:DF:B9:14:06:48:E1:86:CD:E0:9C:4A:89:50:32:10:96:3E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a227d588-6a2e-34f0-9173-7d7095722a0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a3:4c:a9:f5:14:ba:b3:98:63:b6:ba:ab:2a:18:76:7d:30: d1:de:23:b0:20:7f:9e:cc:bf:5f:13:cf:05:fb:af:95:e5:11: bd:6f:01:5f:89:cf:7f:55:74:97:c3:f2:da:12:0e:3f:65:15: ea:ff:a9:d8:b6:7c:6b:72:2b:6d:2a:1b:00:1e:33:30:05:99: 92:29:b1:78:d6:50:23:96:d1:dd:14:f8:03:af:f0:3a:59:1c: fb:5a:25:fc:2c:bb:b1:4d:58:6d:0b:8b:b4:b6:33:c0:1c:5f: 02:51:e7:2b:f9:94:a2:f9:35:f1:f2:8e:db:67:52:0c:11:88: ee:05:10:47:b5:72:14:a5:2a:02:01:70:47:3f:ba:7f:33:e5: 7b:f2:87:df:8c:29:25:84:5b:f9:76:e9:46:9b:81:63:26:13: 4d:4d:8e:dc:25:6e:f2:f0:c0:7c:17:9d:8a:0b:c7:24:6f:89: 87:d8:4a:10:42:7a:10:93:73:b5:b7:a0:22:a6:f9:4a:0a:46: d5:09:31:06:05:fe:0c:b1:96:24:ef:12:d5:56:74:0c:d7:3a: e5:b4:ad:76:01:aa:01:a5:04:d1:50:a6:96:91:db:5c:1f:1d: 94:2e:29:4b:12:f1:99:26:b1:36:45:e8:73:06:e4:8d:96:4a: 03:38:e2:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DAJBdItxxksmeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YTBmYjcwYTUtYTc5NC00YjRmLWE3YWUtNTM2YTA4MjQ1MmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml9nPo46ulw4yzOfrK4fr3CFJS5hkCwywAFX 7pFTsDc3uGJdODI+2bAE3ne3skVfkdq5DZ2mDaYiM5MrbpQ5XQNgT5d4eIWLjfHT Ry5TGYWCKAOoRiUUyAid54aIME0yerdHx4Lc8O9Ow/zTubdwQLx8Rri9fVxLBAAg L2kICAyYyj0NjgpS5oTpFQOW2c95T0I3z2oxJbmd1pTwa8W82AEbV+3XJeqpW0II AM9igMgi7ww9SUIIUaZGfNqS9vUPXgvPPPNi2DOMfjD0mEU5cYokmvFozFXVrwJ5 rRrq8vq6OrGUrNMvvIenb7v1YZLy4/pg1kuv2R/ZxmIdVDpP9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGOF37kUBkjhhs3gnEqJUDIQlj7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTIyN2Q1ODgtNmEyZS0z NGYwLTkxNzMtN2Q3MDk1NzIyYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJujTKn1FLqzmGO2uqsqGHZ9MNHeI7Agf57Mv18TzwX7r5XlEb1vAV+J z39VdJfD8toSDj9lFer/qdi2fGtyK20qGwAeMzAFmZIpsXjWUCOW0d0U+AOv8DpZ HPtaJfwsu7FNWG0Li7S2M8AcXwJR5yv5lKL5NfHyjttnUgwRiO4FEEe1chSlKgIB cEc/un8z5Xvyh9+MKSWEW/l26UabgWMmE01NjtwlbvLwwHwXnYoLxyRviYfYShBC ehCTc7W3oCKm+UoKRtUJMQYF/gyxliTvEtVWdAzXOuW0rXYBqgGlBNFQppaR21wf HZQuKUsS8ZkmsTZF6HMG5I2WSgM44j0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:14 2025 by rpki-client