$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa File: df151142-859b-3304-8c30-830c91a3721f.roa (raw, json) Hash identifier: bIsxOedwhQYbOkor8HG9AjWfv0EtVAusIF5gVVCWq60= Subject key identifier: 84:0F:87:5B:A4:CD:14:24:35:D1:C2:D5:6E:31:70:23:E6:39:4F:39 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858483455700E7E3DE2FFF243E080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 203 IP address blocks: 130.174.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:70:0e:7e:3d:e2:ff:f2:43:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=edb0be59-4b3a-4c69-97bb-ce9a8efc226f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:61:49:8c:a6:53:ee:c8:e5:25:ba:24:e6:50: bd:ad:03:92:f7:dc:99:db:3f:24:b3:13:92:35:3a: a2:43:e7:3c:c2:19:5c:ad:cd:d5:8b:eb:1f:6b:60: 33:10:ca:20:84:43:8a:3f:3d:7a:b0:9f:14:30:77: 11:46:66:f1:1e:10:21:70:c4:76:08:9b:fd:f6:73: 96:70:14:43:e1:25:7f:9b:15:e7:6e:0c:b1:c4:b4: 49:51:2f:dd:9f:fe:db:37:13:3e:17:d9:7b:e9:36: 74:df:35:a6:65:e8:9f:49:ef:55:5a:fd:7d:8c:ea: 09:e5:94:9d:47:61:65:0a:b1:78:45:3f:57:74:31: 39:91:26:54:f7:fd:d1:b4:0b:8b:4b:05:ac:62:cd: 77:5a:41:09:d8:9e:1f:0d:b1:85:ea:04:03:40:43: 8b:8d:af:68:5c:6c:b8:09:fb:f5:07:8a:70:51:19: 70:2e:46:f4:89:d9:2f:f9:e2:0b:0c:25:6d:6c:58: 01:09:e1:2d:10:54:78:67:d4:10:80:02:39:36:3a: db:93:a2:3c:7a:3e:33:f8:13:82:08:5c:ad:5d:c5: 6e:3c:7b:8b:ad:94:d7:ac:01:cf:6c:0d:cf:27:36: 2b:38:a0:0c:cf:bd:38:c9:73:a1:92:6c:6d:8d:b9: f9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0F:87:5B:A4:CD:14:24:35:D1:C2:D5:6E:31:70:23:E6:39:4F:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/df151142-859b-3304-8c30-830c91a3721f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:dd:36:c2:8b:59:7c:99:10:8e:e4:cb:28:b9:ea:22:89:d4: e4:78:f2:56:e4:2f:ba:ff:b7:42:a0:62:6a:5a:9b:8b:49:98: ed:05:df:72:ca:f2:74:6b:3a:0f:95:7c:12:42:d8:e0:ca:bd: a6:21:12:a9:2c:d9:f7:a7:87:b4:98:6c:90:a3:dc:f1:a5:2d: 1c:89:60:c0:8f:16:ae:2c:be:b8:93:73:75:ea:27:92:90:ba: 32:79:ef:6a:91:16:7c:5a:8a:8e:b9:05:3c:ea:2f:0a:bc:9b: d0:0a:91:e0:5f:27:e4:63:8b:03:79:58:bf:46:09:7d:05:59: 18:0a:3d:35:a8:41:8a:6c:06:c9:73:86:54:40:df:04:c0:80: c5:b1:0d:32:e4:da:58:d3:eb:c6:48:e8:d4:36:ee:4c:9c:42: b6:06:c4:0b:e1:c1:5c:92:bf:85:8c:37:8d:36:a7:2f:32:0e: 0c:94:2c:67:4a:27:d2:37:f1:0c:04:12:57:9f:b5:b5:d8:ed: 35:30:ad:73:03:22:25:03:91:f3:00:ad:35:a2:c7:e1:8b:5e: 20:23:a1:22:47:c1:d6:a3:6f:2a:7f:c2:51:ac:76:e5:3e:1a: 48:5e:0f:4a:33:a4:da:6e:6e:7c:ad:26:5f:74:2a:68:ee:89: e9:bd:c4:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg0VXAOfj3i//JD4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWRiMGJlNTktNGIzYS00YzY5LTk3YmItY2U5YThlZmMyMjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmFJjKZT7sjlJbok5lC9rQOS99yZ2z8ksxOS NTqiQ+c8whlcrc3Vi+sfa2AzEMoghEOKPz16sJ8UMHcRRmbxHhAhcMR2CJv99nOW cBRD4SV/mxXnbgyxxLRJUS/dn/7bNxM+F9l76TZ03zWmZeifSe9VWv19jOoJ5ZSd R2FlCrF4RT9XdDE5kSZU9/3RtAuLSwWsYs13WkEJ2J4fDbGF6gQDQEOLja9oXGy4 Cfv1B4pwURlwLkb0idkv+eILDCVtbFgBCeEtEFR4Z9QQgAI5Njrbk6I8ej4z+BOC CFytXcVuPHuLrZTXrAHPbA3PJzYrOKAMz704yXOhkmxtjbn5TQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQPh1ukzRQkNdHC1W4xcCPmOU85MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGYxNTExNDItODU5Yi0z MzA0LThjMzAtODMwYzkxYTM3MjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbdNsKLWXyZEI7kyyi56iKJ1OR48lbkL7r/t0KgYmpam4tJmO0F33LK 8nRrOg+VfBJC2ODKvaYhEqks2fenh7SYbJCj3PGlLRyJYMCPFq4svriTc3XqJ5KQ ujJ572qRFnxaio65BTzqLwq8m9AKkeBfJ+RjiwN5WL9GCX0FWRgKPTWoQYpsBslz hlRA3wTAgMWxDTLk2ljT68ZI6NQ27kycQrYGxAvhwVySv4WMN402py8yDgyULGdK J9I38QwEEleftbXY7TUwrXMDIiUDkfMArTWix+GLXiAjoSJHwdajbyp/wlGsduU+ GkheD0ozpNpubnytJl90Kmjuiem9xEc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:36 2025 by rpki-client