$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa File: bf90fca5-79a9-3e91-8066-10aabfcc4701.roa (raw, json) Hash identifier: uE+WrmN6TZGxYcpGQaDQFmZXJmE2fIC5gY64kgF0hSo= Subject key identifier: C1:AE:5C:5E:A7:9A:1C:E4:22:B4:1E:83:E9:AC:70:A0:34:66:DB:62 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC24D73FA1937783369A50 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 130.174.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:24:d7:3f:a1:93:77:83:36:9a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=9532a268-7155-46ed-a6e1-90ee3bd42537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:e2:c6:32:36:da:5b:51:88:6e:c9:f2:a2: e6:b1:de:15:f7:a9:6c:01:c2:b2:0f:f0:d5:ad:c9: 2f:71:d1:63:90:36:bb:8f:35:b5:6a:6c:ad:c4:4b: d9:38:cb:58:fe:dd:a8:7b:2d:09:71:6e:bb:f3:a7: 83:a3:bf:c7:9e:ed:e7:cb:c3:2b:88:a0:29:7c:22: 0b:9b:1f:d8:95:c2:a0:da:dd:07:9d:3e:9c:1d:4b: 75:e0:ab:7e:01:d9:0f:e0:be:11:e0:33:12:c4:0d: f1:64:c4:ef:82:60:97:c3:d1:20:cf:96:3b:8a:fc: 79:b6:2a:b1:f2:d7:17:bf:9d:af:50:1e:87:ca:91: 59:52:1e:67:e1:d0:e3:8c:37:a9:cd:ae:4e:51:cd: 31:56:8c:cd:38:42:92:66:23:a5:49:a6:43:2b:40: 20:7d:2f:36:33:18:c5:57:48:4e:9f:f0:0c:65:d3: d0:de:fd:04:ab:a4:30:fa:4f:5b:1c:10:c0:c3:45: 62:4a:e6:72:ba:83:97:76:44:1f:35:e0:07:ac:cc: 79:4a:70:1c:5c:d3:9d:95:0f:af:c1:c1:d3:63:c1: 88:a9:ff:48:8a:7a:38:e9:17:9d:d2:9a:b0:9f:58: b9:ad:b2:19:b3:0e:f0:66:ca:46:c3:61:f9:bb:0c: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AE:5C:5E:A7:9A:1C:E4:22:B4:1E:83:E9:AC:70:A0:34:66:DB:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf90fca5-79a9-3e91-8066-10aabfcc4701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:a2:06:3d:85:ca:3b:82:88:49:10:5b:03:28:ce:e8:a8:22: f9:89:26:b8:c6:52:09:54:75:e7:db:19:5b:42:ce:c6:26:08: 11:78:f3:fb:41:7e:2d:ee:ba:93:fe:65:11:a8:16:ac:18:4d: 32:e1:96:91:30:6a:d1:03:6f:5a:20:1d:3c:74:c5:96:0b:f5: d4:96:cc:12:a8:ae:91:ac:aa:a8:19:9e:32:ff:bb:50:d1:1d: 20:71:75:6b:a7:f7:77:86:af:c2:af:b7:5b:de:5a:b5:dd:04: 2b:22:d4:ee:84:c7:35:5e:45:46:65:22:a9:9a:e2:b1:72:21: af:29:8d:f0:22:91:59:b2:ff:23:d0:78:5c:07:67:c7:4d:44: 02:ac:f2:53:e8:39:fd:1b:2b:e0:38:e1:a9:69:ba:be:43:74: 09:9d:27:40:e8:ab:ac:93:fa:48:70:c6:4b:ea:a5:5f:46:73: d4:c7:57:7e:b3:2e:d4:b3:c2:71:59:a5:93:94:19:a5:83:fa: f6:a8:f3:27:ad:74:8d:a5:44:52:84:b9:56:04:98:c9:1c:6b: c3:d0:32:23:8d:07:f9:49:3e:c4:79:a2:e3:6f:d1:e3:ea:bf: df:e2:83:ef:fe:c8:05:f0:9d:ef:40:8f:94:6e:67:1a:b4:27: 59:68:95:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCTXP6GTd4M2mlAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OTUzMmEyNjgtNzE1NS00NmVkLWE2ZTEtOTBlZTNiZDQyNTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/HixjI22ltRiG7J8qLmsd4V96lsAcKyD/DV rckvcdFjkDa7jzW1amytxEvZOMtY/t2oey0JcW6786eDo7/Hnu3ny8MriKApfCIL mx/YlcKg2t0HnT6cHUt14Kt+AdkP4L4R4DMSxA3xZMTvgmCXw9Egz5Y7ivx5tiqx 8tcXv52vUB6HypFZUh5n4dDjjDepza5OUc0xVozNOEKSZiOlSaZDK0AgfS82MxjF V0hOn/AMZdPQ3v0Eq6Qw+k9bHBDAw0ViSuZyuoOXdkQfNeAHrMx5SnAcXNOdlQ+v wcHTY8GIqf9Iino46Red0pqwn1i5rbIZsw7wZspGw2H5uwyeSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGuXF6nmhzkIrQeg+mscKA0ZttiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmY5MGZjYTUtNzlhOS0z ZTkxLTgwNjYtMTBhYWJmY2M0NzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSiBj2FyjuCiEkQWwMozuioIvmJJrjGUglUdefbGVtCzsYmCBF48/tB fi3uupP+ZRGoFqwYTTLhlpEwatEDb1ogHTx0xZYL9dSWzBKorpGsqqgZnjL/u1DR HSBxdWun93eGr8Kvt1veWrXdBCsi1O6ExzVeRUZlIqma4rFyIa8pjfAikVmy/yPQ eFwHZ8dNRAKs8lPoOf0bK+A44alpur5DdAmdJ0Doq6yT+khwxkvqpV9Gc9THV36z LtSzwnFZpZOUGaWD+vao8yetdI2lRFKEuVYEmMkca8PQMiONB/lJPsR5ouNv0ePq v9/ig+/+yAXwne9Aj5RuZxq0J1lolYM= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:00 2025 by rpki-client