$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa File: c455adff-3e8e-3227-995f-2b7e767669f2.roa (raw, json) Hash identifier: d29G8CWr435iKmQ54CO0Qip49nuGdJge3cnSExrQ2fg= Subject key identifier: 23:EA:49:99:9A:4F:B5:3E:8E:5B:BC:32:49:BC:41:B3:B9:A7:4D:12 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584834557079DC1BB08532A27400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 3356 IP address blocks: 130.174.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:70:79:dc:1b:b0:85:32:a2:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=06ee5422-b6fe-45f9-ab88-124414f46e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:16:88:f6:08:72:af:82:f5:28:a8:ff:48:48: f4:7a:5e:f1:30:e7:f2:b2:ba:bf:a8:e1:8a:34:cc: e8:fa:af:e1:52:69:11:d6:64:0e:6b:fb:3c:d6:c0: 02:dd:04:48:cc:43:ff:7c:b6:05:5f:fc:18:0a:d4: 5e:40:08:cd:79:5c:12:b2:81:54:10:4c:c3:e0:3d: d9:5f:b1:57:d3:ff:0b:47:5a:f6:19:0f:34:51:bd: 9b:68:ec:bf:15:61:29:97:80:16:19:01:14:0f:bd: 72:c2:a1:15:60:b2:8e:83:32:1c:1e:e8:17:f1:37: 01:fe:d0:5a:86:2d:5f:3f:4f:f0:9b:1a:89:29:2d: bc:83:81:7b:6f:01:87:9a:1d:81:1f:0d:87:1a:1c: af:9b:cc:f8:3f:37:9f:69:05:f6:b2:aa:41:30:ad: 15:be:4f:a8:bc:59:0c:37:d9:a1:a6:e1:93:cf:74: 09:fa:dd:bf:57:bc:b7:ef:fc:42:3d:8c:8f:f2:23: 75:5a:fb:e3:49:ad:36:93:e0:80:63:c8:7f:d0:04: e7:c6:a9:e2:52:a0:38:0a:71:2a:d1:e7:84:f1:5b: bf:bd:13:97:fc:0b:33:da:f0:fe:43:b8:c5:2b:6e: c0:74:97:f8:d0:bd:84:be:b5:d8:88:aa:da:9d:37: 12:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:EA:49:99:9A:4F:B5:3E:8E:5B:BC:32:49:BC:41:B3:B9:A7:4D:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c455adff-3e8e-3227-995f-2b7e767669f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:95:86:7f:a1:49:28:a4:58:5d:60:aa:24:e0:90:e6:87:a2: 61:90:94:d1:2e:ed:58:dc:0b:7c:6a:59:a1:7b:94:08:b3:d0: fb:b1:3a:7d:f5:ed:a6:cf:c5:8b:81:90:bb:c7:3a:33:af:d3: e6:d3:20:c7:e5:3c:a4:18:b8:26:9c:1b:f8:e1:c5:8b:4c:2a: df:3e:02:57:a3:03:61:ca:ca:d4:a2:05:90:4a:db:23:21:47: 98:b7:fe:0f:49:33:93:40:27:db:da:23:12:c7:e8:95:d5:0e: 67:a9:ee:68:dc:d8:41:08:5d:8c:5b:ea:65:85:05:79:08:e1: c8:aa:a1:36:5c:a7:75:e7:d1:50:10:49:b6:e4:9c:74:38:ff: fe:a3:e4:28:5a:60:51:80:b0:f7:cb:5a:51:b9:65:f4:a9:e7: 43:04:37:39:3f:51:95:7c:a8:38:31:1e:c6:48:9a:35:84:2f: 76:01:dd:4a:e9:cc:c8:ae:a1:62:96:95:35:09:95:73:6f:29: 2a:d7:ed:26:72:e2:59:6b:02:61:ec:af:bc:ae:41:0f:f3:1f: e8:d7:7b:7e:2a:0f:50:ac:17:94:92:f7:a4:a9:14:e2:3c:49: b6:da:5e:2d:34:44:9f:1c:22:85:7d:95:8d:6e:40:ea:08:83: 84:c0:81:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VXB53BuwhTKidAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDZlZTU0MjItYjZmZS00NWY5LWFiODgtMTI0NDE0ZjQ2ZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxaI9ghyr4L1KKj/SEj0el7xMOfysrq/qOGK NMzo+q/hUmkR1mQOa/s81sAC3QRIzEP/fLYFX/wYCtReQAjNeVwSsoFUEEzD4D3Z X7FX0/8LR1r2GQ80Ub2baOy/FWEpl4AWGQEUD71ywqEVYLKOgzIcHugX8TcB/tBa hi1fP0/wmxqJKS28g4F7bwGHmh2BHw2HGhyvm8z4PzefaQX2sqpBMK0Vvk+ovFkM N9mhpuGTz3QJ+t2/V7y37/xCPYyP8iN1WvvjSa02k+CAY8h/0ATnxqniUqA4CnEq 0eeE8Vu/vROX/Asz2vD+Q7jFK27AdJf40L2EvrXYiKranTcSOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPqSZmaT7U+jlu8Mkm8QbO5p00SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzQ1NWFkZmYtM2U4ZS0z MjI3LTk5NWYtMmI3ZTc2NzY2OWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2Vhn+hSSikWF1gqiTgkOaHomGQlNEu7VjcC3xqWaF7lAiz0PuxOn31 7abPxYuBkLvHOjOv0+bTIMflPKQYuCacG/jhxYtMKt8+AlejA2HKytSiBZBK2yMh R5i3/g9JM5NAJ9vaIxLH6JXVDmep7mjc2EEIXYxb6mWFBXkI4ciqoTZcp3Xn0VAQ SbbknHQ4//6j5ChaYFGAsPfLWlG5ZfSp50MENzk/UZV8qDgxHsZImjWEL3YB3Urp zMiuoWKWlTUJlXNvKSrX7SZy4llrAmHsr7yuQQ/zH+jXe34qD1CsF5SS96SpFOI8 SbbaXi00RJ8cIoV9lY1uQOoIg4TAgc4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:44 2025 by rpki-client