$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a253a6cb-cbee-3fde-90a7-54d6fceaedb1.roa File: a253a6cb-cbee-3fde-90a7-54d6fceaedb1.roa (raw, json) Hash identifier: 5zu5yAMWRlFSGA3O1MI3Lo9pBkzo90owy03Cu3PVeEE= Subject key identifier: DC:4A:A7:0A:48:10:78:B9:4C:5E:84:09:9A:0F:5C:9C:D0:A3:D9:0B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584834556FFFD8DB151A0165DA54 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a253a6cb-cbee-3fde-90a7-54d6fceaedb1.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 202 IP address blocks: 130.174.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:6f:ff:d8:db:15:1a:01:65:da:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=cd78ea0f-15de-48a3-8ad6-e878c89634ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:db:cf:a8:ad:f0:8e:90:33:67:51:a9:8f:4a: 40:6f:1e:21:cc:cc:2a:32:51:49:9b:53:0a:50:ad: 01:29:08:f5:bb:2a:35:ab:7f:5f:98:fa:ff:d7:c6: cd:3b:fa:bf:c1:0d:91:4a:94:03:d2:6f:9b:65:69: 7b:f2:77:f0:93:29:18:e0:c0:7e:e2:c7:d5:58:6a: f2:fb:72:5c:ad:11:fd:93:af:be:f4:57:dc:68:b1: b3:40:e4:58:39:dd:09:e4:6f:9b:b6:b8:ae:3d:9c: 60:04:28:30:f8:15:5c:75:4f:1a:3d:7d:76:ed:f7: d1:25:ba:93:e9:bb:9b:2e:56:ef:52:49:10:72:4e: dd:c5:1b:73:1a:0f:05:c3:59:70:7e:fb:fd:9c:96: 95:70:bb:3c:60:b7:b7:a2:c2:f3:9b:82:ca:64:e0: d7:9a:e8:11:9e:20:af:8b:94:28:4f:0a:62:a0:f8: 4b:3d:ee:1a:41:35:4f:ba:b0:dc:64:86:05:50:53: c8:b6:d2:46:10:65:ca:e1:cc:68:ae:4b:29:ce:23: 3b:70:55:38:7d:c8:92:da:be:83:f0:82:0a:16:dd: ef:3b:f8:24:47:c2:ab:22:8d:b4:3d:87:9e:c0:74: 22:cd:ce:30:b6:8e:e7:d7:45:12:96:aa:01:7b:50: 52:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:4A:A7:0A:48:10:78:B9:4C:5E:84:09:9A:0F:5C:9C:D0:A3:D9:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a253a6cb-cbee-3fde-90a7-54d6fceaedb1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c4:12:6c:22:ca:fe:ca:b1:c4:9b:cc:16:99:5a:47:7e:a5: 35:7c:b9:37:20:28:e8:88:39:84:e3:05:6d:de:0d:38:5e:ce: 55:24:2a:cd:9c:f0:bb:2d:65:d1:6d:ff:fc:17:86:03:c1:9e: e4:f2:4e:5f:08:4c:5e:20:92:f3:c4:1b:fb:08:0b:94:1e:d5: 72:ee:f5:3e:46:d5:70:a1:17:c5:31:da:db:85:fe:68:be:ea: e6:db:63:8f:cf:6d:c2:a6:9e:5e:cf:46:fe:00:55:1e:52:1d: 28:66:af:78:3a:fb:1b:04:6e:9b:97:40:a6:56:9e:2c:a6:ae: f2:ed:b5:05:46:5d:5f:7c:e3:ac:01:90:e1:f3:71:48:42:30: e3:6c:b7:59:5c:6d:4e:d7:d8:c8:f8:47:8b:0f:d6:f2:56:ab: 54:da:5f:bd:42:47:ce:ad:7e:f3:c1:15:ea:e5:a9:bd:00:9e: 21:49:7d:50:48:54:24:c9:56:67:a5:9e:08:fa:d2:de:b3:9a: c9:25:4e:0d:4f:c6:88:be:60:07:9c:41:a7:fa:fc:d6:4e:38: 3c:63:bc:73:52:77:4c:2b:49:59:b6:0f:80:ae:1e:89:9b:3a: a8:1b:15:dd:21:fb:70:58:83:9d:54:c2:33:73:71:12:ee:c2: 25:ce:f2:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VW//2NsVGgFl2lQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk Y2Q3OGVhMGYtMTVkZS00OGEzLThhZDYtZTg3OGM4OTYzNGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9vPqK3wjpAzZ1Gpj0pAbx4hzMwqMlFJm1MK UK0BKQj1uyo1q39fmPr/18bNO/q/wQ2RSpQD0m+bZWl78nfwkykY4MB+4sfVWGry +3JcrRH9k6++9FfcaLGzQORYOd0J5G+btriuPZxgBCgw+BVcdU8aPX127ffRJbqT 6bubLlbvUkkQck7dxRtzGg8Fw1lwfvv9nJaVcLs8YLe3osLzm4LKZODXmugRniCv i5QoTwpioPhLPe4aQTVPurDcZIYFUFPIttJGEGXK4cxorkspziM7cFU4fciS2r6D 8IIKFt3vO/gkR8KrIo20PYeewHQizc4wto7n10USlqoBe1BSNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxKpwpIEHi5TF6ECZoPXJzQo9kLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTI1M2E2Y2ItY2JlZS0z ZmRlLTkwYTctNTRkNmZjZWFlZGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrEEmwiyv7KscSbzBaZWkd+pTV8uTcgKOiIOYTjBW3eDThezlUkKs2c 8LstZdFt//wXhgPBnuTyTl8ITF4gkvPEG/sIC5Qe1XLu9T5G1XChF8Ux2tuF/mi+ 6ubbY4/PbcKmnl7PRv4AVR5SHShmr3g6+xsEbpuXQKZWniymrvLttQVGXV9846wB kOHzcUhCMONst1lcbU7X2Mj4R4sP1vJWq1TaX71CR86tfvPBFerlqb0AniFJfVBI VCTJVmelngj60t6zmsklTg1Pxoi+YAecQaf6/NZOODxjvHNSd0wrSVm2D4CuHomb OqgbFd0h+3BYg51UwjNzcRLuwiXO8u8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:38 2025 by rpki-client