$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa File: cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa (raw, json) Hash identifier: EpAtaeWXgePNn3v1ZvnFIevg0kPAeTNtAUPft9oQUd8= Subject key identifier: 12:67:CA:5A:E2:79:75:53:54:3A:AF:79:49:A3:8C:26:F7:FF:5E:BA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F03C0CEC734C7A0C406C00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 203 IP address blocks: 130.174.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:3c:0c:ec:73:4c:7a:0c:40:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=bf6a2750-a7db-416b-aa90-4b398921eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fd:7a:2e:6a:34:1a:91:39:4f:b9:99:f8:fd: 01:52:46:3a:44:c0:2c:78:ad:26:e4:f9:b6:91:30: f1:bb:17:06:f1:06:ff:48:56:de:85:82:78:6b:66: ec:72:6e:9b:e4:5c:c6:bc:dc:40:76:ed:39:4a:68: 2c:33:39:7b:ee:86:71:bc:c0:93:a8:bd:3b:a0:bc: 4a:d7:81:3a:c4:31:ff:ad:d5:8d:d8:a1:94:8c:e5: 7d:65:1a:ce:0e:45:68:d1:5f:aa:eb:ef:7e:e2:d9: 26:43:9b:dc:6e:5a:43:bd:ad:e8:39:f2:22:7b:23: 16:a6:8f:2b:8a:8e:ae:f0:db:5a:18:52:8f:9b:ff: 88:91:1e:a0:b0:53:46:bb:37:18:5c:00:0e:8a:a1: 87:fd:5c:cb:22:f2:7b:8e:af:36:62:dd:97:e9:94: 9c:a8:ad:26:3c:82:b2:90:34:f6:60:3d:83:5a:e2: 21:2c:87:f1:8a:37:b6:91:74:08:91:7f:dc:e5:3e: 90:1c:c0:d6:84:d5:1e:e1:a0:e5:f3:79:4a:68:34: a6:66:8f:aa:2e:39:2b:7f:66:ad:0a:7f:0d:39:89: 30:73:30:03:f0:09:e5:b2:1c:bb:94:c3:23:38:ec: af:1e:99:7f:25:83:5f:98:a5:fc:44:6f:68:0c:be: 57:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:67:CA:5A:E2:79:75:53:54:3A:AF:79:49:A3:8C:26:F7:FF:5E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/cf88b641-3b60-3f5d-bea7-07efddaf89c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:dd:8d:02:f6:e1:24:99:e4:5c:90:2f:5f:bf:b5:13:f9:5c: a9:8b:98:17:2f:20:95:85:4d:50:cd:ee:07:56:67:16:57:64: 03:cd:af:1a:ef:a2:e6:2e:01:9f:4e:be:25:d8:56:e3:14:d8: b9:47:58:1d:63:c9:9a:2f:0f:8d:9d:41:78:bd:dc:32:fa:a4: 64:ce:a9:4e:ef:2a:9b:e0:ff:b1:5a:a5:2c:01:b6:29:b8:04: 7f:df:bd:b3:fd:e1:55:b8:81:a0:44:7c:3e:7e:b1:45:30:68: eb:85:da:a8:a1:37:f1:da:fc:21:f1:bf:d1:08:a9:fc:a9:e7: f4:1f:df:ae:a0:75:32:b2:8c:97:0b:20:c1:a2:da:e3:53:56: eb:b1:26:5b:a3:c6:e4:97:d2:2e:40:20:72:47:50:d5:c3:59: e0:ef:c5:8e:b2:4a:bf:c3:a6:cf:1b:c4:00:72:ab:41:4e:bc: 7f:5b:9e:97:b8:58:8d:55:da:e7:e4:5c:9b:77:09:7c:c7:9f: 12:a4:eb:44:22:fb:c6:96:a3:9b:fa:87:a1:8f:8e:0f:e9:b3: 38:24:10:5d:db:c6:6d:a6:d2:7d:54:3a:53:97:2e:c5:be:16: bc:15:62:c2:60:4a:02:06:9d:bc:a0:65:de:74:30:c8:fc:cf: 71:8c:29:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DwM7HNMegxAbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk YmY2YTI3NTAtYTdkYi00MTZiLWFhOTAtNGIzOTg5MjFlYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyv16Lmo0GpE5T7mZ+P0BUkY6RMAseK0m5Pm2 kTDxuxcG8Qb/SFbehYJ4a2bscm6b5FzGvNxAdu05SmgsMzl77oZxvMCTqL07oLxK 14E6xDH/rdWN2KGUjOV9ZRrODkVo0V+q6+9+4tkmQ5vcblpDva3oOfIieyMWpo8r io6u8NtaGFKPm/+IkR6gsFNGuzcYXAAOiqGH/VzLIvJ7jq82Yt2X6ZScqK0mPIKy kDT2YD2DWuIhLIfxije2kXQIkX/c5T6QHMDWhNUe4aDl83lKaDSmZo+qLjkrf2at Cn8NOYkwczAD8Anlshy7lMMjOOyvHpl/JYNfmKX8RG9oDL5XCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJnylrieXVTVDqveUmjjCb3/166MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2Y4OGI2NDEtM2I2MC0z ZjVkLWJlYTctMDdlZmRkYWY4OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7djQL24SSZ5FyQL1+/tRP5XKmLmBcvIJWFTVDN7gdWZxZXZAPNrxrv ouYuAZ9OviXYVuMU2LlHWB1jyZovD42dQXi93DL6pGTOqU7vKpvg/7FapSwBtim4 BH/fvbP94VW4gaBEfD5+sUUwaOuF2qihN/Ha/CHxv9EIqfyp5/Qf366gdTKyjJcL IMGi2uNTVuuxJlujxuSX0i5AIHJHUNXDWeDvxY6ySr/Dps8bxAByq0FOvH9bnpe4 WI1V2ufkXJt3CXzHnxKk60Qi+8aWo5v6h6GPjg/pszgkEF3bxm2m0n1UOlOXLsW+ FrwVYsJgSgIGnbygZd50MMj8z3GMKWE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:30 2025 by rpki-client