$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa File: ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa (raw, json) Hash identifier: JNgo5DMovz/9NFyBpP1CHAvQlrWTmAPlDmBxq8Kbn+Q= Subject key identifier: FE:E9:34:8E:30:79:83:82:BA:19:E3:ED:5A:73:D5:A1:9E:FD:79:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584834556AD753415313F114A880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 203 IP address blocks: 130.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:6a:d7:53:41:53:13:f1:14:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=a25d8d33-3050-477e-966f-fd7e5a55f1a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9b:02:bd:b7:25:f0:9d:62:8c:40:f0:d1:44: 06:6c:cf:62:33:f8:4f:91:31:d5:98:31:03:d2:89: ef:fc:68:d7:54:13:dd:b4:fc:9f:a9:d0:49:13:5a: 81:03:9e:3f:cc:be:14:d5:74:7d:bc:1d:09:9d:cc: 60:2c:57:a2:55:3b:f9:96:45:1e:c6:ae:96:2b:b6: ce:71:a9:d1:b2:31:d4:53:12:64:62:13:86:70:c2: b2:87:37:56:bf:6d:d9:96:9e:ff:e4:80:c5:51:eb: 30:4e:51:27:a9:af:91:8a:40:d7:59:2e:56:9a:90: f3:2a:9f:24:ad:55:ef:16:c9:f3:dd:7b:7d:48:4c: 20:b2:fd:c1:d3:17:75:92:22:3e:c2:86:4a:cc:e7: f9:54:dd:6f:17:ed:54:18:92:75:d7:f2:a1:b6:40: 70:e8:12:99:06:9b:fd:82:e1:6f:eb:cb:fb:6b:30: bf:4c:22:63:b8:ef:75:91:06:a9:2d:a1:7b:51:47: c2:01:c1:dc:fc:d9:f4:98:dd:10:09:e5:e2:e8:f3: ff:be:a5:da:76:f7:77:8d:87:17:92:2a:52:e2:90: db:ba:64:c1:bd:f4:5d:37:fa:49:6f:44:6c:72:c6: 44:5e:ac:2a:92:d0:a9:1b:04:8d:ce:5f:9a:96:df: 93:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E9:34:8E:30:79:83:82:BA:19:E3:ED:5A:73:D5:A1:9E:FD:79:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8a30c3-03d6-32d3-b6b4-8a5ff35c1b39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:b1:b0:43:ea:a1:a4:69:9d:8f:bd:c3:4d:80:f8:46:76:ec: 88:0c:9b:08:cb:0d:29:0a:e0:6d:8b:9f:91:5d:3b:18:6b:0f: 9b:a6:ea:24:f5:73:07:a9:a7:81:70:e2:dc:2a:02:c2:21:f4: 37:c7:4a:2f:85:96:44:ff:17:db:19:19:bd:4c:42:ac:5b:f0: bc:9d:ba:5a:b8:a0:90:80:69:47:94:31:aa:06:08:0a:e6:dc: f2:99:c4:0c:76:d6:1b:b1:e6:f0:22:d8:df:f0:0a:c9:2f:58: 5d:65:65:08:7e:9f:2c:e1:05:c7:8f:90:f2:e3:c8:ba:f1:18: 3d:9c:a8:b6:06:96:78:49:5a:ee:7a:5f:fc:be:f1:04:e7:86: 9c:d9:13:7a:6e:e9:c5:46:0e:0a:0f:25:b8:91:4e:0e:48:f2: 6b:c5:c7:81:16:43:fe:62:48:bb:d2:13:57:4d:9f:b3:40:fb: 48:da:d0:86:4d:00:1b:51:19:a1:77:5b:d2:7c:c1:1a:65:b0: ab:15:1c:2a:c9:e3:05:d3:8c:bb:6c:8d:f3:07:1f:aa:0f:0e: e1:09:ef:e5:f3:18:42:13:72:33:35:9b:d0:e2:16:f4:06:6e: 59:18:c5:a6:e6:9d:5d:cf:59:04:50:49:61:d9:00:7d:d8:cc: 96:9a:99:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VWrXU0FTE/EUqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk YTI1ZDhkMzMtMzA1MC00NzdlLTk2NmYtZmQ3ZTVhNTVmMWEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopsCvbcl8J1ijEDw0UQGbM9iM/hPkTHVmDED 0onv/GjXVBPdtPyfqdBJE1qBA54/zL4U1XR9vB0JncxgLFeiVTv5lkUexq6WK7bO canRsjHUUxJkYhOGcMKyhzdWv23Zlp7/5IDFUeswTlEnqa+RikDXWS5WmpDzKp8k rVXvFsnz3Xt9SEwgsv3B0xd1kiI+woZKzOf5VN1vF+1UGJJ11/KhtkBw6BKZBpv9 guFv68v7azC/TCJjuO91kQapLaF7UUfCAcHc/Nn0mN0QCeXi6PP/vqXadvd3jYcX kipS4pDbumTBvfRdN/pJb0RscsZEXqwqktCpGwSNzl+alt+TWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7pNI4weYOCuhnj7Vpz1aGe/XntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmE4YTMwYzMtMDNkNi0z MmQzLWI2YjQtOGE1ZmYzNWMxYjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaxsEPqoaRpnY+9w02A+EZ27IgMmwjLDSkK4G2Ln5FdOxhrD5um6iT1 cwepp4Fw4twqAsIh9DfHSi+FlkT/F9sZGb1MQqxb8Lydulq4oJCAaUeUMaoGCArm 3PKZxAx21hux5vAi2N/wCskvWF1lZQh+nyzhBcePkPLjyLrxGD2cqLYGlnhJWu56 X/y+8QTnhpzZE3pu6cVGDgoPJbiRTg5I8mvFx4EWQ/5iSLvSE1dNn7NA+0ja0IZN ABtRGaF3W9J8wRplsKsVHCrJ4wXTjLtsjfMHH6oPDuEJ7+XzGEITcjM1m9DiFvQG blkYxabmnV3PWQRQSWHZAH3YzJaamSs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:37 2025 by rpki-client