$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa File: c852d60f-ea77-3ce3-8e09-634d422e697d.roa (raw, json) Hash identifier: MkG5zEhctjHiXOo4gSKhMj5EPRjU3aQHFgbZkb1mWxo= Subject key identifier: 66:41:46:85:7D:39:F2:15:F2:0F:69:CF:3B:5C:31:D2:21:B4:BD:F0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC28E10EC6B57BBA779FC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 130.174.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:28:e1:0e:c6:b5:7b:ba:77:9f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=c2b1348c-62d0-4b8d-8e28-fdcf11cb39e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:88:23:ae:c0:8d:c0:26:c1:49:0a:57:ec:ff: 11:da:56:fb:41:12:df:f5:16:d1:60:61:55:15:d9: 93:1c:ca:e9:31:78:bd:ad:d9:8e:ae:b5:66:f6:7b: 5b:4e:8f:0d:3f:98:53:44:34:c8:c1:c4:cc:86:c1: 17:81:76:97:18:17:ce:9d:0a:06:17:c7:02:ad:da: 77:cc:42:b9:90:e2:09:39:47:9e:c6:fc:da:25:20: c1:01:19:0e:57:b9:91:c2:19:30:0f:38:97:92:50: ff:69:ac:25:85:8b:31:3a:d7:5f:be:b6:5d:9e:2f: 89:bb:4d:aa:27:84:48:5b:17:fc:e7:5c:96:30:4a: 54:70:77:2b:5b:27:80:16:3f:7a:13:24:6e:66:ed: 5a:bc:03:a8:8f:e0:ae:12:a4:40:44:1c:cc:2f:ea: 3f:71:28:20:f2:f3:8e:17:67:9b:77:aa:c8:cf:5e: c1:51:f3:79:a3:ba:cb:ba:eb:d1:f4:ad:50:2a:2a: 74:ea:d2:b7:19:f8:eb:97:63:94:04:24:11:26:01: c2:95:4d:d5:f4:24:7e:0e:74:37:b1:18:24:e6:75: 8a:e2:fd:86:dc:f8:18:72:d8:36:29:8d:7d:82:b1: f9:d5:cd:46:ee:af:a9:a7:c9:9d:e4:06:61:1c:63: 6b:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:41:46:85:7D:39:F2:15:F2:0F:69:CF:3B:5C:31:D2:21:B4:BD:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c852d60f-ea77-3ce3-8e09-634d422e697d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e7:da:50:48:62:5d:0c:00:ed:c8:89:fd:55:ab:e6:da:c3: 16:d7:67:6b:e5:d1:64:ee:02:e7:fe:c4:53:e1:e5:03:83:24: a0:18:00:7c:b3:59:ac:f4:be:ad:50:8a:f5:5a:d3:94:dc:cd: 03:06:53:a0:5d:8d:02:58:04:1d:50:88:56:47:e4:16:ab:09: 66:2d:a7:68:bc:0b:5a:c5:15:9f:30:3c:a1:e4:8f:b4:47:27: 48:b9:93:5c:26:fa:3b:59:28:60:36:48:24:03:73:af:59:5d: 5e:07:e5:1d:c7:38:4a:87:e6:4f:1a:ba:e3:56:ae:ab:76:76: 7f:b9:2c:4a:a2:e9:09:cb:2b:24:f7:aa:a2:79:f8:3d:4d:19: af:9e:d1:36:74:a9:3d:a3:0c:8c:58:6d:93:48:97:97:00:5c: 98:57:43:d0:d2:01:2d:5b:0d:91:5b:56:33:a1:d2:e0:8a:29: 2b:ad:48:a8:67:91:9f:af:81:4e:fb:98:96:46:e5:f8:e1:5a: fb:22:ad:f7:95:f0:a8:6d:af:ee:b7:96:56:b6:38:4a:57:46: be:84:3c:2b:cc:8a:e6:e7:8b:4a:b5:0f:7f:e7:44:92:12:84: b8:b0:78:05:68:33:bb:6f:33:03:6c:24:ca:97:21:e9:12:36: cb:2e:3d:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrCjhDsa1e7p3n8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YzJiMTM0OGMtNjJkMC00YjhkLThlMjgtZmRjZjExY2IzOWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgYgjrsCNwCbBSQpX7P8R2lb7QRLf9RbRYGFV FdmTHMrpMXi9rdmOrrVm9ntbTo8NP5hTRDTIwcTMhsEXgXaXGBfOnQoGF8cCrdp3 zEK5kOIJOUeexvzaJSDBARkOV7mRwhkwDziXklD/aawlhYsxOtdfvrZdni+Ju02q J4RIWxf851yWMEpUcHcrWyeAFj96EyRuZu1avAOoj+CuEqRARBzML+o/cSgg8vOO F2ebd6rIz17BUfN5o7rLuuvR9K1QKip06tK3Gfjrl2OUBCQRJgHClU3V9CR+DnQ3 sRgk5nWK4v2G3PgYctg2KY19grH51c1G7q+pp8md5AZhHGNr+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZBRoV9OfIV8g9pzztcMdIhtL3wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzg1MmQ2MGYtZWE3Ny0z Y2UzLThlMDktNjM0ZDQyMmU2OTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPn2lBIYl0MAO3Iif1Vq+bawxbXZ2vl0WTuAuf+xFPh5QODJKAYAHyz Waz0vq1QivVa05TczQMGU6BdjQJYBB1QiFZH5BarCWYtp2i8C1rFFZ8wPKHkj7RH J0i5k1wm+jtZKGA2SCQDc69ZXV4H5R3HOEqH5k8auuNWrqt2dn+5LEqi6QnLKyT3 qqJ5+D1NGa+e0TZ0qT2jDIxYbZNIl5cAXJhXQ9DSAS1bDZFbVjOh0uCKKSutSKhn kZ+vgU77mJZG5fjhWvsirfeV8Khtr+63lla2OEpXRr6EPCvMiubni0q1D3/nRJIS hLiweAVoM7tvMwNsJMqXIekSNssuPc4= -----END CERTIFICATE-----Generated at Sat Apr 5 11:09:02 2025 by rpki-client