$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa File: baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa (raw, json) Hash identifier: 8hrs8XFvx4F31LyltGKcDKL75MqwZzPyeN1MLKFp+J0= Subject key identifier: 7B:48:0F:B1:AE:8A:EC:FB:74:AC:42:02:67:FA:14:9C:3F:12:5E:1B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F03CD46B942BF80F6D7980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 203 IP address blocks: 130.174.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:3c:d4:6b:94:2b:f8:0f:6d:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=14747340-ef56-49db-a00b-43e9dbaddcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:29:da:95:0b:e9:67:bc:c4:5b:8f:cf:bf:76: bc:9c:42:6b:c3:bb:5c:74:2f:87:7e:8f:c0:9e:19: ba:0a:e9:31:4c:cb:d7:4f:c2:dd:d8:2f:fa:63:d9: 9a:34:28:c7:0d:a2:3a:cd:dc:d7:d8:4c:03:f1:5e: f0:0f:fb:a0:0a:a7:da:6d:82:3c:26:15:3f:b4:52: 8b:b1:d0:2b:55:2e:90:ef:4e:fb:cc:04:80:ed:e6: 2a:74:da:05:26:9c:3a:24:43:ef:98:05:29:ec:94: 0c:c8:6a:d0:3a:60:61:4f:2e:e0:3c:e8:fb:45:8c: ea:d5:25:94:c3:d8:9e:31:cf:94:53:41:43:d7:c6: 30:5c:91:83:66:04:9b:88:d5:67:31:12:18:2c:0b: b6:ab:37:30:1a:f2:c1:b4:c0:6a:89:07:48:c9:e9: 93:9e:e4:8b:a2:18:6f:ef:21:5e:c8:49:95:72:97: cc:4d:22:15:c0:b5:78:84:f3:e8:e5:98:19:24:77: 54:6f:79:ef:15:5d:89:dd:73:14:3a:74:ae:fa:08: 51:68:55:f2:90:de:4e:6a:d2:e2:51:fe:f0:cb:fb: 00:a6:ad:63:dc:47:35:cb:cf:bd:fa:61:7d:a0:c3: 55:f1:79:f1:e2:51:76:94:9c:1b:aa:62:b8:6f:97: 11:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:48:0F:B1:AE:8A:EC:FB:74:AC:42:02:67:FA:14:9C:3F:12:5E:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/baf468c6-36cb-352e-8c73-3266d2fc5ca6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:7a:c7:df:04:f9:dd:65:c9:df:b8:ef:b6:c6:2b:9d:09:6c: 6a:5b:0d:55:c6:c2:36:e2:32:52:ff:db:1f:e8:e7:c1:01:f1: 1a:17:3a:b8:97:4b:ec:35:a0:80:a8:1e:d2:71:0c:4f:5e:0a: bf:70:d3:0b:1d:e0:18:7d:71:34:a8:4e:08:cf:b2:4f:49:ef: 14:f0:84:cb:15:05:f2:81:94:dd:03:c8:8a:74:9b:6f:14:f9: 19:3c:a2:ae:5b:05:79:51:8a:0e:66:1c:4d:5e:eb:7b:ef:a8: 35:f8:78:d9:21:63:6e:84:cc:e1:d3:99:66:e5:e3:11:70:df: 66:81:d1:ad:58:46:91:45:a8:af:84:97:90:a1:f9:b7:82:49: 25:90:b0:3e:05:18:7a:c0:58:53:10:58:11:d9:a9:c1:e4:00: a5:99:ea:00:4f:5f:a3:a5:d6:4a:90:a4:89:b9:f0:68:16:a4: 72:59:0a:04:c9:b4:03:f2:fd:e0:19:96:be:f8:35:6a:be:12: 2d:c2:b3:5f:5e:e8:09:70:7d:e9:3a:ac:a6:33:ed:d4:9a:c6: 52:41:b7:f9:4d:15:9e:d7:b2:ef:94:69:ff:47:4d:cd:d5:02: 39:58:35:d9:45:b2:7d:78:47:5b:c0:59:e6:cf:f3:67:78:13: 03:b7:5f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DzUa5Qr+A9teYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk MTQ3NDczNDAtZWY1Ni00OWRiLWEwMGItNDNlOWRiYWRkY2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkynalQvpZ7zEW4/Pv3a8nEJrw7tcdC+Hfo/A nhm6CukxTMvXT8Ld2C/6Y9maNCjHDaI6zdzX2EwD8V7wD/ugCqfabYI8JhU/tFKL sdArVS6Q7077zASA7eYqdNoFJpw6JEPvmAUp7JQMyGrQOmBhTy7gPOj7RYzq1SWU w9ieMc+UU0FD18YwXJGDZgSbiNVnMRIYLAu2qzcwGvLBtMBqiQdIyemTnuSLohhv 7yFeyEmVcpfMTSIVwLV4hPPo5ZgZJHdUb3nvFV2J3XMUOnSu+ghRaFXykN5OatLi Uf7wy/sApq1j3Ec1y8+9+mF9oMNV8Xnx4lF2lJwbqmK4b5cRVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtID7Guiuz7dKxCAmf6FJw/El4bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFmNDY4YzYtMzZjYi0z NTJlLThjNzMtMzI2NmQyZmM1Y2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADp6x98E+d1lyd+477bGK50JbGpbDVXGwjbiMlL/2x/o58EB8RoXOriX S+w1oICoHtJxDE9eCr9w0wsd4Bh9cTSoTgjPsk9J7xTwhMsVBfKBlN0DyIp0m28U +Rk8oq5bBXlRig5mHE1e63vvqDX4eNkhY26EzOHTmWbl4xFw32aB0a1YRpFFqK+E l5Ch+beCSSWQsD4FGHrAWFMQWBHZqcHkAKWZ6gBPX6Ol1kqQpIm58GgWpHJZCgTJ tAPy/eAZlr74NWq+Ei3Cs19e6Alwfek6rKYz7dSaxlJBt/lNFZ7Xsu+Uaf9HTc3V AjlYNdlFsn14R1vAWebP82d4EwO3Xwo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:51 2025 by rpki-client