$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8e9663-08e0-3cdc-9c41-1dfa8a140ac3.roa File: ba8e9663-08e0-3cdc-9c41-1dfa8a140ac3.roa (raw, json) Hash identifier: nay44ewwAe2kvrxxO8HVIDUbbVQRHhQZDVSuGfROSCI= Subject key identifier: F9:68:16:05:4F:0E:AE:B5:7C:3D:79:13:6A:27:72:C3:68:89:91:EF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2201EAFA38F106A0FC70 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8e9663-08e0-3cdc-9c41-1dfa8a140ac3.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3360 IP address blocks: 130.174.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:22:01:ea:fa:38:f1:06:a0:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=333f0bf1-0fae-4394-9327-db8def923920 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:35:20:0a:c4:e4:dd:4b:c3:ef:6d:b2:60:ad: df:8a:24:07:91:cf:26:56:31:6b:fa:19:ef:f6:8a: a9:d7:c8:5b:42:44:b8:e7:f6:0c:1d:90:08:5b:b6: f7:97:a7:f0:93:b9:50:9e:32:11:9e:c9:be:fd:f3: 9b:d1:b6:f9:e7:72:a3:c9:c3:55:3c:d3:59:cb:63: b0:cb:72:1d:15:c5:b7:4f:68:a9:08:67:33:1d:05: 37:a9:a6:ff:ff:39:99:e5:72:6a:c5:6d:6a:a9:8e: ae:1b:42:46:e4:6d:85:1a:7c:0a:52:44:58:14:e4: 62:3e:15:9d:14:2a:a2:8c:d1:e1:05:40:ac:13:b7: 4a:ec:ab:cd:90:95:5c:a4:26:d4:65:c6:77:f8:76: c8:41:24:48:f8:dc:ef:02:f4:5c:fa:dc:6c:7a:13: 61:3a:3f:b6:db:61:e4:5a:9b:e0:f7:37:4b:e1:a8: 03:13:4e:40:c0:64:c3:67:06:71:9f:18:4e:7e:5b: fe:14:6f:9f:81:1c:0d:cd:0d:6b:14:bd:9b:a7:86: f5:14:e2:2f:a8:2d:cf:dc:3d:9f:ff:0a:3d:12:5d: b4:9f:46:ef:c3:ea:4d:34:36:8e:53:44:51:91:b6: 2d:6e:99:5c:6a:77:bd:97:d1:88:9f:5b:da:13:bd: 18:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:68:16:05:4F:0E:AE:B5:7C:3D:79:13:6A:27:72:C3:68:89:91:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ba8e9663-08e0-3cdc-9c41-1dfa8a140ac3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:88:d5:3b:f2:7d:79:81:71:69:61:37:bb:0b:5e:d4:a1:e3: ef:90:98:74:72:c2:5c:25:31:eb:fb:df:db:f5:ea:24:57:20: 8f:9d:ac:9b:9d:b9:d0:8d:e1:23:8b:10:65:b7:81:fe:99:4a: 60:90:2c:ea:f3:d2:4b:2e:46:30:1f:7a:f7:1a:81:cd:af:40: 4b:af:72:98:f1:8e:e4:44:03:3a:3d:d5:53:f8:47:3f:9e:34: ca:38:e1:25:41:71:03:c1:df:08:40:bf:b9:f7:98:64:01:2e: c1:03:63:fe:70:2b:fd:74:c8:cc:d0:0a:d7:9d:00:45:3f:ef: 1c:b5:9b:e9:da:8a:28:4f:81:f2:a9:77:4e:68:1a:7f:6a:2e: 7b:b4:d7:57:0b:b1:82:c3:07:dd:e3:63:19:53:16:5c:26:e7: 50:68:d3:58:e7:51:a8:13:19:99:12:76:7b:0e:33:53:e8:d4: 3c:48:8f:f1:94:7b:24:2e:30:8a:fe:65:8d:75:df:c4:20:9e: 8d:2b:2c:29:d2:b9:d1:d5:26:93:5a:59:dc:50:ab:b3:9a:d0: 2f:55:49:b9:e9:e3:b2:f3:b1:a4:8c:90:d6:82:ea:c3:0e:21: 57:8b:a8:ec:61:bf:c0:2e:84:e6:87:62:02:1e:19:98:2d:be: e2:7e:fd:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCIB6vo48Qag/HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MzMzZjBiZjEtMGZhZS00Mzk0LTkzMjctZGI4ZGVmOTIzOTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTUgCsTk3UvD722yYK3fiiQHkc8mVjFr+hnv 9oqp18hbQkS45/YMHZAIW7b3l6fwk7lQnjIRnsm+/fOb0bb553KjycNVPNNZy2Ow y3IdFcW3T2ipCGczHQU3qab//zmZ5XJqxW1qqY6uG0JG5G2FGnwKUkRYFORiPhWd FCqijNHhBUCsE7dK7KvNkJVcpCbUZcZ3+HbIQSRI+NzvAvRc+txsehNhOj+222Hk Wpvg9zdL4agDE05AwGTDZwZxnxhOflv+FG+fgRwNzQ1rFL2bp4b1FOIvqC3P3D2f /wo9El20n0bvw+pNNDaOU0RRkbYtbplcane9l9GIn1vaE70YZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPloFgVPDq61fD15E2oncsNoiZHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmE4ZTk2NjMtMDhlMC0z Y2RjLTljNDEtMWRmYThhMTQwYWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyI1TvyfXmBcWlhN7sLXtSh4++QmHRywlwlMev739v16iRXII+drJud udCN4SOLEGW3gf6ZSmCQLOrz0ksuRjAfevcagc2vQEuvcpjxjuREAzo91VP4Rz+e NMo44SVBcQPB3whAv7n3mGQBLsEDY/5wK/10yMzQCtedAEU/7xy1m+naiihPgfKp d05oGn9qLnu011cLsYLDB93jYxlTFlwm51Bo01jnUagTGZkSdnsOM1Po1DxIj/GU eyQuMIr+ZY1138Qgno0rLCnSudHVJpNaWdxQq7Oa0C9VSbnp47LzsaSMkNaC6sMO IVeLqOxhv8AuhOaHYgIeGZgtvuJ+/bE= -----END CERTIFICATE-----Generated at Sat Apr 5 23:21:13 2025 by rpki-client