$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c80ccce6-623b-38d7-aa52-84fe6c39c8d8.roa File: c80ccce6-623b-38d7-aa52-84fe6c39c8d8.roa (raw, json) Hash identifier: tr+MQwNc+6p99swnIxSaDT7MnxwtRohHNxBls05ReO0= Subject key identifier: 42:93:7E:0F:62:4C:93:E2:BE:45:99:7F:6B:3B:FA:6A:C9:6F:23:51 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F0326AEAC60DE88D1C1D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c80ccce6-623b-38d7-aa52-84fe6c39c8d8.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 3356 IP address blocks: 130.174.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:32:6a:ea:c6:0d:e8:8d:1c:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=426c3562-f847-492f-8009-db40a32b262d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:15:ec:ea:81:d8:0c:d6:b3:9e:c0:67:e3:49: 34:92:78:0e:79:9b:d4:28:ac:09:b4:e4:e1:b3:1b: 10:38:d1:7c:c4:ad:c8:a1:61:f6:63:06:57:de:b1: fa:8b:68:4c:aa:26:0c:29:b1:3c:78:e7:58:9c:0f: 19:de:44:26:7d:be:da:e0:ab:ab:25:2c:3b:b7:21: d0:e8:d5:d2:d3:b2:cc:12:33:0b:05:6a:73:83:b2: 9f:7b:59:f6:74:02:af:a3:c3:70:7f:cf:5c:76:13: 0e:cc:22:c2:be:ad:3a:12:dc:5e:d8:68:24:ce:61: fe:10:85:57:b8:a3:be:b1:2f:ca:78:2f:4d:6d:78: 03:bc:85:31:21:8a:7e:44:36:3d:2e:a7:50:21:d2: 8e:6e:90:ab:ee:1f:0d:b6:d2:dc:90:37:bc:93:f4: e3:23:0e:99:c2:31:6c:7b:5f:87:23:03:b1:54:f7: 87:99:5b:51:75:9b:69:9e:96:70:9a:c0:54:a8:5b: c0:37:78:5f:a4:59:77:81:f4:23:c5:05:28:2e:98: a3:e1:17:58:50:d0:10:f7:7e:88:f9:93:a6:30:c9: 8a:00:d6:fc:0d:38:f5:b7:e8:fc:f0:83:68:ef:1d: 1b:3d:43:34:07:b9:80:5b:df:f7:08:44:41:84:c2: c1:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:93:7E:0F:62:4C:93:E2:BE:45:99:7F:6B:3B:FA:6A:C9:6F:23:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c80ccce6-623b-38d7-aa52-84fe6c39c8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:17:3e:b5:91:78:74:ca:1c:96:79:13:c4:e5:86:23:b3:bf: a9:2f:52:e2:88:f1:eb:89:c6:4f:1b:26:48:34:2b:9e:21:58: 0f:33:38:94:0f:54:ca:b6:0e:90:ca:6a:80:d8:8b:a4:23:f7: 53:f4:ca:43:8a:f2:dd:f4:47:27:c7:92:ea:3d:e1:74:b1:cb: 06:2d:e2:b8:02:03:bc:22:48:21:18:f2:c9:da:05:35:a4:24: cb:39:45:f2:e6:dd:3a:ae:96:2f:4d:cf:a8:bd:ce:8f:a2:73: d9:4e:3d:0a:28:f2:bd:7a:95:ff:ba:c2:16:22:20:e7:0a:1f: fb:e1:be:fc:93:3d:10:92:cf:2b:30:46:20:03:06:76:9c:75: a3:33:f9:19:f5:63:fa:62:9c:27:9e:bc:2c:0f:f5:32:f9:60: e7:05:a4:2d:b2:9c:26:c8:41:6c:dd:10:15:05:92:eb:d8:08: c9:9e:8b:9a:b6:9b:7c:08:bc:d0:7b:54:5b:0f:03:06:00:0c: d2:39:cd:bb:e7:af:30:d8:1c:5f:2f:37:d5:fc:33:61:27:77: ee:83:89:67:46:5f:56:45:e6:80:a7:00:c8:9f:e2:c8:d2:82: ea:4b:69:19:40:6f:ac:52:d3:4c:50:d5:bb:c5:80:50:5a:79: 19:32:dc:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DJq6sYN6I0cHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk NDI2YzM1NjItZjg0Ny00OTJmLTgwMDktZGI0MGEzMmIyNjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBXs6oHYDNaznsBn40k0kngOeZvUKKwJtOTh sxsQONF8xK3IoWH2YwZX3rH6i2hMqiYMKbE8eOdYnA8Z3kQmfb7a4KurJSw7tyHQ 6NXS07LMEjMLBWpzg7Kfe1n2dAKvo8Nwf89cdhMOzCLCvq06Etxe2GgkzmH+EIVX uKO+sS/KeC9NbXgDvIUxIYp+RDY9LqdQIdKObpCr7h8NttLckDe8k/TjIw6ZwjFs e1+HIwOxVPeHmVtRdZtpnpZwmsBUqFvAN3hfpFl3gfQjxQUoLpij4RdYUNAQ936I +ZOmMMmKANb8DTj1t+j88INo7x0bPUM0B7mAW9/3CERBhMLBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKTfg9iTJPivkWZf2s7+mrJbyNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzgwY2NjZTYtNjIzYi0z OGQ3LWFhNTItODRmZTZjMzljOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAXPrWReHTKHJZ5E8TlhiOzv6kvUuKI8euJxk8bJkg0K54hWA8zOJQP VMq2DpDKaoDYi6Qj91P0ykOK8t30RyfHkuo94XSxywYt4rgCA7wiSCEY8snaBTWk JMs5RfLm3Tquli9Nz6i9zo+ic9lOPQoo8r16lf+6whYiIOcKH/vhvvyTPRCSzysw RiADBnacdaMz+Rn1Y/pinCeevCwP9TL5YOcFpC2ynCbIQWzdEBUFkuvYCMmei5q2 m3wIvNB7VFsPAwYADNI5zbvnrzDYHF8vN9X8M2End+6DiWdGX1ZF5oCnAMif4sjS gupLaRlAb6xS00xQ1bvFgFBaeRky3DE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:05:20 2025 by rpki-client