$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d08a54c7-01bd-3176-a78d-08734b460991.roa File: d08a54c7-01bd-3176-a78d-08734b460991.roa (raw, json) Hash identifier: 4L7+WjwqeolZX/EcV4jn35fd1kb1SMpaX6l9QrmGNsg= Subject key identifier: 70:D5:07:0A:7D:19:C0:2B:45:0A:03:F3:CA:2C:8E:81:F2:27:E7:6C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B44F567CAC41A4EABB80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d08a54c7-01bd-3176-a78d-08734b460991.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 130.174.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b4:4f:56:7c:ac:41:a4:ea:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6b885d89-701b-4756-b47a-7179bddaa3fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8a:74:a1:14:48:91:f2:2b:5a:fd:f8:14:8d: 7d:27:e0:ae:38:38:63:d2:b8:b0:ed:04:8c:30:ca: 99:3d:d1:a1:65:39:c0:b3:06:c6:36:f4:f3:92:dd: 6e:e9:fe:3b:8b:21:67:9c:48:a8:18:80:ee:0b:16: 0f:c5:e8:a6:c9:49:18:09:90:29:40:a1:ee:02:3d: 3f:3b:78:18:54:a6:76:c4:05:ef:b9:3d:27:35:60: 10:1a:69:56:8d:83:12:f0:d2:2c:6d:fd:b3:34:cc: 50:ca:83:6a:be:1b:7b:78:f2:b4:1b:71:f9:c9:77: 81:aa:ad:3e:67:fd:77:55:7b:31:44:0c:5d:1c:33: d7:ac:ca:3e:73:a6:61:dd:c0:8a:77:13:dc:4b:6f: 8d:e6:1d:e4:56:82:73:43:83:2c:91:6c:b5:ab:86: 3d:a1:55:be:d9:6e:e4:cd:ae:08:32:ee:07:00:38: c2:c0:a1:19:53:09:c8:d3:73:50:91:fa:b6:6f:f9: a3:ba:f5:c6:ec:5f:26:c7:10:70:d8:c3:a0:75:c3: 40:85:41:93:7e:86:c9:78:77:94:7a:8a:d6:fa:84: 01:39:d5:35:eb:e2:29:07:61:49:ba:b9:66:95:d2: c9:c1:63:29:68:94:35:aa:63:4e:56:39:5c:17:0e: 43:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D5:07:0A:7D:19:C0:2B:45:0A:03:F3:CA:2C:8E:81:F2:27:E7:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d08a54c7-01bd-3176-a78d-08734b460991.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9a:16:2b:56:ce:8f:92:cf:b0:d6:65:42:87:42:18:25:0d: ed:5a:22:ad:fd:0c:df:18:10:37:3c:a6:de:e4:71:c3:5b:dd: 38:42:9c:da:5f:33:a5:b7:54:e6:0a:92:7b:4c:01:bd:50:b0: d0:b0:0f:47:a3:68:c6:e2:a3:99:c1:10:77:bb:18:1b:e6:5c: 72:e8:57:f0:f5:8e:65:f3:11:3c:4e:16:f5:41:e1:c3:b5:7c: c0:58:60:aa:d0:75:9b:78:32:40:7a:cd:cf:a6:7c:71:19:71: 2b:76:0e:21:40:d0:83:d1:0c:1e:72:3f:f0:a9:88:7c:ca:f2: 2d:b9:62:a0:8d:d7:90:bd:ae:2f:5e:4c:31:99:18:21:76:b4: b1:44:f1:6e:30:0c:ec:40:55:6a:c2:42:c5:df:9f:13:33:16: 88:40:0d:ac:54:c2:b1:67:de:5a:fb:f0:1c:dc:5d:d0:d8:3a: ea:92:29:e7:eb:99:c1:8c:cd:09:76:c3:52:05:84:af:d5:bf: b3:71:e6:b4:c3:ab:84:3f:d5:ca:5b:ea:4b:fb:50:a6:09:7b: c7:34:4d:56:37:32:32:a4:7b:63:7e:bd:4d:6f:a2:60:9e:28: 54:7a:d6:7d:6d:79:11:23:0c:fc:db:d5:58:be:e4:33:e1:cf: 60:3d:3c:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrRPVnysQaTqu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmI4ODVkODktNzAxYi00NzU2LWI0N2EtNzE3OWJkZGFhM2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIp0oRRIkfIrWv34FI19J+CuODhj0riw7QSM MMqZPdGhZTnAswbGNvTzkt1u6f47iyFnnEioGIDuCxYPxeimyUkYCZApQKHuAj0/ O3gYVKZ2xAXvuT0nNWAQGmlWjYMS8NIsbf2zNMxQyoNqvht7ePK0G3H5yXeBqq0+ Z/13VXsxRAxdHDPXrMo+c6Zh3cCKdxPcS2+N5h3kVoJzQ4MskWy1q4Y9oVW+2W7k za4IMu4HADjCwKEZUwnI03NQkfq2b/mjuvXG7F8mxxBw2MOgdcNAhUGTfobJeHeU eorW+oQBOdU16+IpB2FJurlmldLJwWMpaJQ1qmNOVjlcFw5DkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDVBwp9GcArRQoD88osjoHyJ+dsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDA4YTU0YzctMDFiZC0z MTc2LWE3OGQtMDg3MzRiNDYwOTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq41MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICaFitWzo+Sz7DWZUKHQhglDe1aIq39DN8YEDc8pt7kccNb3ThCnNpf M6W3VOYKkntMAb1QsNCwD0ejaMbio5nBEHe7GBvmXHLoV/D1jmXzETxOFvVB4cO1 fMBYYKrQdZt4MkB6zc+mfHEZcSt2DiFA0IPRDB5yP/CpiHzK8i25YqCN15C9ri9e TDGZGCF2tLFE8W4wDOxAVWrCQsXfnxMzFohADaxUwrFn3lr78BzcXdDYOuqSKefr mcGMzQl2w1IFhK/Vv7Nx5rTDq4Q/1cpb6kv7UKYJe8c0TVY3MjKke2N+vU1vomCe KFR61n1teREjDPzb1Vi+5DPhz2A9PP4= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:51 2025 by rpki-client