$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa File: aa5258a5-65f3-38a9-aa81-1659d247f3de.roa (raw, json) Hash identifier: zhHvR5fFVsrgzYjFS0iPs/ma3If17N6jPqTCVqGZ+nI= Subject key identifier: 41:2F:33:D2:1E:FA:30:1D:B4:18:E8:FF:2E:1E:F0:F3:60:51:1D:54 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C242287FB9B5D44530C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 130.174.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c2:42:28:7f:b9:b5:d4:45:30:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=dbc86020-caaf-45fb-be9a-e09d9e0b6872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:25:c3:16:8f:5f:df:8c:c1:35:93:f6:b6: 3d:ac:4e:23:ff:14:46:e7:97:14:c4:cd:8c:22:ca: 53:80:72:b6:50:8b:b8:93:18:5b:b1:82:76:30:34: fd:0d:f3:c6:c3:57:e4:a0:06:53:d7:24:a8:71:bb: f0:cb:d4:39:54:89:01:9d:b8:f0:0c:2d:53:92:33: d7:9a:60:20:1d:eb:c4:28:c2:24:ab:52:3b:b6:3a: d5:54:56:6c:d0:be:23:01:42:99:b1:0a:20:47:3d: ea:38:9a:a5:a7:46:17:65:7e:1f:0d:75:20:5b:50: 06:14:95:66:c2:66:94:79:e9:75:00:5c:8d:76:4c: 22:34:db:09:54:3f:32:e6:65:10:55:ae:19:0a:32: 77:db:6d:d2:30:49:06:02:2a:89:bd:3e:06:e7:c1: 79:bb:83:e4:37:24:e0:ef:37:bb:e3:91:fa:ee:0e: 9e:57:71:3d:2f:8f:19:08:80:e8:0f:70:60:80:27: 86:49:fe:0a:61:fc:1d:e0:81:57:6d:2a:1b:16:56: 0d:0e:1b:55:ea:fb:e0:eb:f5:f4:3c:ea:4f:90:b5: a4:cd:ad:aa:15:fe:a8:8a:e6:16:b0:aa:0d:e6:4c: 95:c3:02:0d:73:f2:86:cd:46:77:16:b9:ee:5d:9d: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2F:33:D2:1E:FA:30:1D:B4:18:E8:FF:2E:1E:F0:F3:60:51:1D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/aa5258a5-65f3-38a9-aa81-1659d247f3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:09:f6:6a:95:a4:46:a4:09:f9:24:ce:a0:82:06:fb:42:ec: 0e:7f:6a:d2:7f:4b:4d:ce:bc:20:38:d4:46:a4:01:e2:a6:52: 10:38:9a:19:1e:62:87:6f:cc:d3:09:27:4d:66:74:f2:4f:94: fc:ae:28:9d:ef:eb:a4:ad:e0:90:5c:63:d8:93:8e:f4:57:eb: 03:69:d5:e6:a7:a8:a7:7c:b4:22:38:d3:6e:b1:1f:5f:ba:87: de:1e:46:cd:2a:1c:31:a1:80:ad:64:68:2f:3a:a7:be:9c:f8: ac:1c:e6:ad:18:48:32:e2:42:c4:b9:b5:43:f9:56:cd:6f:03: 35:02:20:ae:55:34:71:50:a0:34:29:57:f6:a8:00:eb:0b:51: 5a:10:1d:97:75:02:cc:e2:6a:8f:eb:e4:eb:6a:39:34:5e:fa: 23:ff:4d:4c:02:e3:d2:30:03:9c:12:cc:d5:28:e1:13:63:23: fd:01:7d:6a:db:7a:d4:c9:29:4b:69:91:69:01:5b:87:6b:fe: 1b:4e:39:b9:d2:b3:e0:eb:90:80:46:f7:aa:ed:99:7e:0e:d9: cb:51:7d:08:8f:4e:51:a8:76:15:85:d5:aa:6b:43:dd:9d:2b: 2c:be:a4:3f:fe:23:60:3c:26:d3:95:a5:66:03:16:00:13:58: 4d:64:3e:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsJCKH+5tdRFMMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZGJjODYwMjAtY2FhZi00NWZiLWJlOWEtZTA5ZDllMGI2ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWclwxaPX9+MwTWT9rY9rE4j/xRG55cUxM2M IspTgHK2UIu4kxhbsYJ2MDT9DfPGw1fkoAZT1ySocbvwy9Q5VIkBnbjwDC1TkjPX mmAgHevEKMIkq1I7tjrVVFZs0L4jAUKZsQogRz3qOJqlp0YXZX4fDXUgW1AGFJVm wmaUeel1AFyNdkwiNNsJVD8y5mUQVa4ZCjJ3223SMEkGAiqJvT4G58F5u4PkNyTg 7ze745H67g6eV3E9L48ZCIDoD3BggCeGSf4KYfwd4IFXbSobFlYNDhtV6vvg6/X0 POpPkLWkza2qFf6oiuYWsKoN5kyVwwINc/KGzUZ3FrnuXZ2QrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEvM9Ie+jAdtBjo/y4e8PNgUR1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWE1MjU4YTUtNjVmMy0z OGE5LWFhODEtMTY1OWQyNDdmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgJ9mqVpEakCfkkzqCCBvtC7A5/atJ/S03OvCA41EakAeKmUhA4mhke YodvzNMJJ01mdPJPlPyuKJ3v66St4JBcY9iTjvRX6wNp1eanqKd8tCI4026xH1+6 h94eRs0qHDGhgK1kaC86p76c+Kwc5q0YSDLiQsS5tUP5Vs1vAzUCIK5VNHFQoDQp V/aoAOsLUVoQHZd1Asziao/r5OtqOTRe+iP/TUwC49IwA5wSzNUo4RNjI/0BfWrb etTJKUtpkWkBW4dr/htOObnSs+DrkIBG96rtmX4O2ctRfQiPTlGodhWF1aprQ92d Kyy+pD/+I2A8JtOVpWYDFgATWE1kPqg= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:53 2025 by rpki-client