$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa File: bfb6b141-6a57-3161-831c-725299707029.roa (raw, json) Hash identifier: So5kANWhHGJNmMQkOVJ8lW7xBD+lIQ0j3HsOvQbHfso= Subject key identifier: 61:A5:AE:80:63:11:E6:09:C0:3B:DE:9E:E6:AE:0A:81:4A:C3:CB:EB Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C1A241198D572D6C9200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c1:a2:41:19:8d:57:2d:6c:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6e4f97fa-ddf8-4f53-b46c-7b01e7cfc718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:4c:36:f2:51:91:cd:3f:b3:7b:42:0c:df:f9: e4:e6:8f:d2:e1:e8:39:52:b7:dc:3f:eb:12:13:47: c0:11:0c:f8:a1:fa:eb:95:bf:d8:96:8c:0e:3c:f9: 36:f9:68:3b:de:7d:6b:f8:f6:e2:a7:58:d8:61:a0: 1e:07:85:a1:67:65:a1:d2:97:d6:df:3b:b4:12:77: e4:48:ad:3c:ae:35:0c:0e:98:9e:d8:3d:14:d8:65: 8a:a3:8d:8b:74:0d:a6:67:b1:98:3b:03:eb:c3:2c: 28:ca:7e:10:98:3f:3c:01:b4:a0:7a:5c:a4:81:51: ba:d7:1f:18:09:4c:56:f9:53:04:cb:cb:7f:de:8a: 8a:c0:b0:87:3a:2b:22:00:3f:86:63:3f:57:49:56: ca:63:f4:74:fe:d5:63:b0:e4:01:ef:39:f2:ef:d2: 18:b8:59:8b:89:d6:95:41:5f:b6:be:17:46:3e:d7: a5:29:ef:fa:29:8d:6e:98:6e:d8:07:41:2a:a7:56: 82:24:24:9a:09:e1:46:5a:c6:2e:38:f4:67:a5:09: d0:41:79:fe:9d:cf:fd:84:2e:39:8b:6f:3e:b6:35: 37:7c:d4:cb:e7:c7:95:20:26:6a:18:19:ec:14:d0: f7:f7:5a:69:13:de:70:da:43:69:30:9a:b8:da:dd: 59:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A5:AE:80:63:11:E6:09:C0:3B:DE:9E:E6:AE:0A:81:4A:C3:CB:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bfb6b141-6a57-3161-831c-725299707029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:d6:10:39:5c:a7:b9:f4:7f:fd:f8:4f:d0:14:d6:91:2e:d0: 52:be:5e:0f:5f:3b:d3:f2:76:a3:8f:4d:83:88:7b:89:61:9b: f9:49:c4:79:e9:b9:ed:6f:3b:a2:12:c0:13:48:77:3a:ad:dd: 95:ce:0c:35:e3:57:e3:60:6d:b1:55:e8:97:eb:cd:b2:1c:ea: b7:d3:70:3d:37:2a:05:e6:4a:38:79:1f:cd:db:2a:9d:e5:e3: e4:9f:b4:d5:00:f5:2b:ec:cf:74:39:92:e7:4a:ba:12:0b:32: fc:ec:0a:9d:e5:fd:50:45:8d:86:fc:df:46:36:e8:8e:12:35: 40:dc:b2:12:a0:d4:05:48:69:3e:52:7d:3d:f0:dd:23:0f:b6: ba:2e:3d:42:51:0c:7c:d6:1c:4a:e0:86:51:51:a7:9f:09:af: 35:e6:7d:68:40:d7:92:77:65:c5:87:92:d9:10:fd:cf:bc:aa: c4:be:11:8a:31:c1:ea:26:51:b9:98:1d:97:ef:ff:2b:9e:47: 85:ce:19:b3:a9:91:7b:8f:3e:75:2a:3b:f9:d7:36:ab:66:56: 20:09:dd:4e:c2:30:d1:bf:e4:08:7d:ac:5b:e9:ea:30:5f:07: 1a:bf:e1:9f:fd:fc:19:a9:60:de:72:ee:2b:f5:3e:1a:2c:b4: 08:30:ae:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsGiQRmNVy1skgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmU0Zjk3ZmEtZGRmOC00ZjUzLWI0NmMtN2IwMWU3Y2ZjNzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUw28lGRzT+ze0IM3/nk5o/S4eg5UrfcP+sS E0fAEQz4ofrrlb/YlowOPPk2+Wg73n1r+Pbip1jYYaAeB4WhZ2Wh0pfW3zu0Enfk SK08rjUMDpie2D0U2GWKo42LdA2mZ7GYOwPrwywoyn4QmD88AbSgelykgVG61x8Y CUxW+VMEy8t/3oqKwLCHOisiAD+GYz9XSVbKY/R0/tVjsOQB7zny79IYuFmLidaV QV+2vhdGPtelKe/6KY1umG7YB0Eqp1aCJCSaCeFGWsYuOPRnpQnQQXn+nc/9hC45 i28+tjU3fNTL58eVICZqGBnsFND391ppE95w2kNpMJq42t1ZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGlroBjEeYJwDvenuauCoFKw8vrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmZiNmIxNDEtNmE1Ny0z MTYxLTgzMWMtNzI1Mjk5NzA3MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPWEDlcp7n0f/34T9AU1pEu0FK+Xg9fO9PydqOPTYOIe4lhm/lJxHnp ue1vO6ISwBNIdzqt3ZXODDXjV+NgbbFV6JfrzbIc6rfTcD03KgXmSjh5H83bKp3l 4+SftNUA9Svsz3Q5kudKuhILMvzsCp3l/VBFjYb830Y26I4SNUDcshKg1AVIaT5S fT3w3SMPtrouPUJRDHzWHErghlFRp58JrzXmfWhA15J3ZcWHktkQ/c+8qsS+EYox weomUbmYHZfv/yueR4XOGbOpkXuPPnUqO/nXNqtmViAJ3U7CMNG/5Ah9rFvp6jBf Bxq/4Z/9/BmpYN5y7iv1PhostAgwrsk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:42:24 2025 by rpki-client