$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa File: db597222-f843-3ed4-998f-1deb57292b3d.roa (raw, json) Hash identifier: vyINQhrb3r+2/daGDcooZVu2VQ29nbFmyazVeHTtXR8= Subject key identifier: 11:D1:7C:03:13:C7:53:F1:2A:32:59:4D:9A:C7:C5:49:66:97:59:09 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584832F039AF683C2B766EB5EA80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa Signing time: Sat 14 Dec 2024 02:00:39 +0000 ROA not before: Sat 14 Dec 2024 02:00:39 +0000 ROA not after: Fri 14 Mar 2025 01:00:39 +0000 asID: 203 IP address blocks: 130.174.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:32:f0:39:af:68:3c:2b:76:6e:b5:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 02:00:39 2024 GMT Not After : Mar 14 01:00:39 2025 GMT Subject: CN=93266af5-a1ac-4bc8-82fc-de8e271c523f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:36:61:b7:91:b6:83:1e:09:0c:5b:64:f7: 72:fd:e5:35:e8:8f:e8:d0:66:1b:76:1d:a8:ec:30: a4:bd:ce:c9:05:d8:1e:de:d4:72:ed:4c:a6:cc:bb: 35:ed:76:9c:a7:88:24:85:45:a6:fd:27:a0:67:07: 7f:58:4b:8d:2a:e0:98:cd:bc:02:d3:4e:65:c8:f6: 25:e4:eb:cd:02:72:4e:81:32:43:fb:8c:be:c7:8a: ec:b0:19:af:de:99:90:e5:a4:5d:7c:87:77:12:8b: 14:68:ae:fc:d2:0a:53:52:5a:4c:a3:d7:1a:04:35: 76:3e:1e:bd:ba:d0:78:31:83:7a:02:04:42:a6:d5: 7a:bd:41:4a:90:45:00:31:55:95:34:d0:43:d4:10: 32:20:e6:65:d1:5b:80:d0:08:60:66:07:15:cc:38: d0:8d:3d:34:52:ff:8b:01:2b:81:58:13:35:98:f1: a1:18:ed:aa:3d:e3:98:c3:ee:39:09:be:3d:02:51: 83:a9:fe:de:59:c0:c5:e0:2e:aa:fe:8f:ba:45:a2: 7e:72:48:18:79:72:d2:1d:d8:07:2a:16:24:8c:0c: 95:18:89:1c:a8:d1:ed:71:20:46:f4:97:a2:db:ff: 66:ed:7f:21:87:dc:a7:cf:c8:70:f0:70:c8:40:df: 62:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:7C:03:13:C7:53:F1:2A:32:59:4D:9A:C7:C5:49:66:97:59:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/db597222-f843-3ed4-998f-1deb57292b3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b6:80:d9:1f:1c:9d:1d:c2:b5:eb:df:85:64:0a:7a:51:38: fc:c5:8a:e6:ee:30:54:da:6e:eb:fe:db:c8:7c:2e:e8:61:0a: d9:c5:70:69:39:c2:ef:bc:8a:40:a3:3a:78:b4:e9:1d:e3:6c: 8e:21:9d:bc:5a:07:4e:d9:b5:18:f6:7c:18:82:3c:d7:86:35: 1b:8b:a7:93:20:fe:59:78:5d:bb:e6:6d:c0:d8:b2:2a:f2:05: 6c:b3:69:ca:8f:38:20:4f:d0:9a:d5:f2:a1:00:f2:81:e0:5f: 79:18:35:77:07:85:66:30:9f:ea:36:44:5e:bc:74:ba:38:71: 6f:7b:9c:24:a2:77:d1:cd:88:53:18:ea:d4:1d:0f:65:e0:f7: c5:8c:d7:63:c2:5e:af:be:2d:1d:f3:93:30:60:f6:61:7e:e3: 52:d0:92:15:fb:37:ad:fc:cf:52:3e:df:d9:c8:ea:09:4e:b3: d0:f2:f7:74:4e:80:57:18:8c:6f:f9:0a:b4:3d:82:c3:db:60: e9:0a:84:7d:05:f1:8e:52:cd:fc:e3:0e:d5:b9:98:4a:9d:fd: 94:32:16:07:09:9f:c6:a7:6d:b6:a2:60:2d:4a:4c:97:fd:96: 02:57:84:8f:62:41:21:f2:3c:d7:90:9c:73:1c:eb:3b:a2:2a: 06:98:63:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy8DmvaDwrdm616oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk OTMyNjZhZjUtYTFhYy00YmM4LTgyZmMtZGU4ZTI3MWM1MjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsck2YbeRtoMeCQxbZPdy/eU16I/o0GYbdh2o 7DCkvc7JBdge3tRy7UymzLs17Xacp4gkhUWm/SegZwd/WEuNKuCYzbwC005lyPYl 5OvNAnJOgTJD+4y+x4rssBmv3pmQ5aRdfId3EosUaK780gpTUlpMo9caBDV2Ph69 utB4MYN6AgRCptV6vUFKkEUAMVWVNNBD1BAyIOZl0VuA0AhgZgcVzDjQjT00Uv+L ASuBWBM1mPGhGO2qPeOYw+45Cb49AlGDqf7eWcDF4C6q/o+6RaJ+ckgYeXLSHdgH KhYkjAyVGIkcqNHtcSBG9Jei2/9m7X8hh9ynz8hw8HDIQN9iGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHRfAMTx1PxKjJZTZrHxUlml1kJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGI1OTcyMjItZjg0My0z ZWQ0LTk5OGYtMWRlYjU3MjkyYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFa2gNkfHJ0dwrXr34VkCnpROPzFiubuMFTabuv+28h8LuhhCtnFcGk5 wu+8ikCjOni06R3jbI4hnbxaB07ZtRj2fBiCPNeGNRuLp5Mg/ll4XbvmbcDYsiry BWyzacqPOCBP0JrV8qEA8oHgX3kYNXcHhWYwn+o2RF68dLo4cW97nCSid9HNiFMY 6tQdD2Xg98WM12PCXq++LR3zkzBg9mF+41LQkhX7N638z1I+39nI6glOs9Dy93RO gFcYjG/5CrQ9gsPbYOkKhH0F8Y5SzfzjDtW5mEqd/ZQyFgcJn8anbbaiYC1KTJf9 lgJXhI9iQSHyPNeQnHMc6zuiKgaYY8A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:29:23 2025 by rpki-client