$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa File: a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa (raw, json) Hash identifier: ThSQpi2xr3y13JywMiE1e00QXtf7WkL3Jc16FkoJOt4= Subject key identifier: 47:00:B3:4E:56:53:42:82:AA:50:B1:3C:78:4F:40:8C:FC:D1:AC:61 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B15A95D8426A74537580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 130.174.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b1:5a:95:d8:42:6a:74:53:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=48441de7-2f04-4c50-aa2e-fbe64d9c89d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:5d:76:6c:c8:cb:5c:b8:8a:65:cd:84:7b: 2a:ac:fa:77:59:3a:b3:db:63:d2:b7:99:d2:78:6f: 6d:a3:a3:d7:1b:a8:42:bc:80:d7:1b:57:b4:d5:46: 27:82:92:eb:6c:84:36:2b:02:36:1b:fb:f7:d9:81: 3d:2f:20:6d:16:57:d3:52:14:35:5a:0e:df:96:e0: db:38:e0:40:bc:b1:ef:43:35:d9:7d:c0:0a:29:80: 68:a2:49:05:e6:57:15:6e:4d:ea:6e:4a:11:15:38: e5:19:5d:cc:68:5a:43:05:fd:b9:d8:67:61:bd:00: a6:bc:ab:a8:34:68:a1:d7:2d:ab:fb:fa:d1:9f:17: 1a:ba:4e:b3:77:59:aa:05:4e:3e:57:d8:5c:dd:a8: d1:a8:5c:25:1e:70:15:29:6e:a1:c7:c5:36:d9:a2: fa:84:e7:e7:fc:ab:6c:11:f6:62:f5:33:eb:27:06: fb:8f:ca:1b:06:a0:6d:cc:9a:54:7d:77:3b:2a:b1: 35:d8:4f:fb:1a:33:31:82:45:37:34:73:7a:37:0d: a9:e6:79:fc:59:47:a5:a1:4c:fe:88:34:d5:c7:3d: 54:03:ef:f5:9c:02:44:b6:37:fb:de:9f:5a:77:33: e7:ab:8f:d2:66:91:42:a1:79:61:59:24:8e:78:68: bf:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:00:B3:4E:56:53:42:82:AA:50:B1:3C:78:4F:40:8C:FC:D1:AC:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a2893082-9fa2-3cc6-ab08-129a0aa64ca5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:7f:ec:3f:42:b4:a5:35:b3:2a:9b:66:86:2e:65:27:ee:51: 8f:f7:14:75:e5:2f:a5:e3:ab:ec:ce:e7:72:21:e6:d4:92:e9: 6d:90:db:3b:a2:ff:bc:b5:ef:c5:bd:38:8b:1d:a3:95:7e:26: 43:93:63:6d:16:ef:3b:53:dc:f2:66:19:59:1a:68:66:35:44: a2:3d:f2:57:ad:65:ae:01:d2:63:b0:34:f9:55:37:87:2a:ab: bc:9a:a9:06:b5:9e:ef:cc:87:ea:94:fa:9d:89:b1:3e:f2:bd: af:3f:e6:c4:4c:fe:9b:22:6f:7b:aa:1b:25:e4:67:14:2c:3d: e8:af:5c:99:03:91:44:2d:35:30:c6:2e:ba:6e:82:d8:cc:48: 0b:1c:3b:66:65:b1:28:2b:04:5f:63:4c:e5:65:87:5c:1a:2d: cc:19:56:47:09:d6:94:d5:f5:56:ac:da:ca:c5:f8:ac:da:07: b5:67:e1:d6:6b:93:30:18:53:b5:46:be:42:26:70:13:d6:e4: b6:82:ea:61:a8:58:4d:23:10:96:51:de:d2:65:86:3f:28:6a: 7b:11:29:bb:a6:6a:15:88:28:0e:20:b4:39:53:13:09:07:c3: 68:cf:6b:ec:b5:b9:b8:8a:59:58:e4:b5:5b:72:fb:d8:92:8f: e2:47:dd:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrFaldhCanRTdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NDg0NDFkZTctMmYwNC00YzUwLWFhMmUtZmJlNjRkOWM4OWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVZddmzIy1y4imXNhHsqrPp3WTqz22PSt5nS eG9to6PXG6hCvIDXG1e01UYngpLrbIQ2KwI2G/v32YE9LyBtFlfTUhQ1Wg7fluDb OOBAvLHvQzXZfcAKKYBookkF5lcVbk3qbkoRFTjlGV3MaFpDBf252GdhvQCmvKuo NGih1y2r+/rRnxcauk6zd1mqBU4+V9hc3ajRqFwlHnAVKW6hx8U22aL6hOfn/Kts EfZi9TPrJwb7j8obBqBtzJpUfXc7KrE12E/7GjMxgkU3NHN6Nw2p5nn8WUeloUz+ iDTVxz1UA+/1nAJEtjf73p9adzPnq4/SZpFCoXlhWSSOeGi/UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcAs05WU0KCqlCxPHhPQIz80axhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTI4OTMwODItOWZhMi0z Y2M2LWFiMDgtMTI5YTBhYTY0Y2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9/7D9CtKU1syqbZoYuZSfuUY/3FHXlL6Xjq+zO53Ih5tSS6W2Q2zui /7y178W9OIsdo5V+JkOTY20W7ztT3PJmGVkaaGY1RKI98letZa4B0mOwNPlVN4cq q7yaqQa1nu/Mh+qU+p2JsT7yva8/5sRM/psib3uqGyXkZxQsPeivXJkDkUQtNTDG LrpugtjMSAscO2ZlsSgrBF9jTOVlh1waLcwZVkcJ1pTV9Vas2srF+KzaB7Vn4dZr kzAYU7VGvkImcBPW5LaC6mGoWE0jEJZR3tJlhj8oansRKbumahWIKA4gtDlTEwkH w2jPa+y1ubiKWVjktVty+9iSj+JH3R0= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:30 2025 by rpki-client