$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa File: e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa (raw, json) Hash identifier: xbnUHrdfzJnUMJxYQvcbd1ME/Ne3fb1NyUDKub8tSYo= Subject key identifier: F6:BC:D6:13:8A:A3:66:90:5F:D0:60:71:EC:DC:EE:BF:14:EA:03:16 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BFAE701FA33F07254B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bf:ae:70:1f:a3:3f:07:25:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=c67fa387-5d39-465d-9833-96b8f93dbdfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:be:01:05:39:4d:d3:cc:cd:ef:3f:4d:71: 4c:35:52:ee:d8:a2:3d:64:37:02:5a:df:66:76:d6: 2e:cb:b3:d7:ce:78:d6:b6:97:b1:88:3c:6e:8f:2c: bb:6a:e8:9b:09:a1:da:c7:e0:72:c9:c6:91:50:d1: 7c:ef:d3:d4:16:b7:14:98:9b:20:39:66:3a:4a:90: b4:72:d6:e5:1b:9d:1a:03:06:1b:34:29:58:aa:96: 0f:57:43:46:43:fe:04:4c:05:ef:50:13:14:eb:62: c0:f6:80:9c:0f:ff:b9:1d:ad:f7:f4:74:2d:1d:35: ce:a5:b1:ee:b8:4b:fc:60:5a:44:1b:c5:f3:60:c4: 03:24:0a:e6:b7:81:6a:90:98:96:84:a5:c2:44:1e: 05:38:2d:32:cc:6e:fb:da:30:d1:b5:3e:c5:a2:47: ce:17:2f:7c:8d:e6:0c:0e:f5:4b:ce:50:a1:9f:cf: 1e:24:de:e3:64:44:c0:86:17:74:1e:05:4d:5c:2f: bb:42:73:a4:94:4c:94:01:ae:91:69:98:38:01:95: 0c:eb:28:4e:f9:8b:eb:8e:6e:a0:99:1a:c8:2c:03: 8a:40:45:6d:1a:db:c7:89:c5:3d:6d:d9:4d:e1:6e: 95:a5:ff:06:19:5c:14:4a:6f:30:22:08:c5:5f:3e: fe:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:BC:D6:13:8A:A3:66:90:5F:D0:60:71:EC:DC:EE:BF:14:EA:03:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e88e7120-f1f6-31be-b0fb-2d1377e09ae6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:64:00:f7:2c:3e:37:f6:64:88:69:8b:1b:de:1a:1a:52:65: a3:e6:82:85:c3:90:38:b2:34:ea:6e:7d:e7:08:cc:e7:a4:8c: 03:50:1e:b2:a5:1e:56:a6:b4:40:4a:bc:90:10:df:8d:9e:31: 75:8a:5c:ac:49:74:a9:94:4f:67:d1:97:b3:b3:3e:58:9d:c8: 19:6c:f3:76:74:f9:dc:3e:86:1d:d0:e2:2b:42:2b:89:0c:ee: 99:5f:f2:d2:86:b5:f4:8d:84:b3:e2:b3:48:99:2d:65:92:c5: 6d:04:27:fd:d2:4b:35:66:d7:7b:2c:6c:18:47:51:38:91:3f: ae:b9:a5:3d:eb:ea:52:4e:be:b0:09:2c:b0:ff:54:db:6e:b8: bf:8a:7c:e5:fb:9a:a9:c5:26:e4:54:24:fe:bd:32:0d:39:e4: dd:9c:78:88:3f:44:c2:4a:8f:29:6d:e1:d5:f0:07:25:c2:17: af:29:6f:69:33:97:6f:75:e2:d4:32:e0:5e:92:d6:4e:eb:98: da:db:43:2d:13:c2:71:18:39:41:84:46:41:98:40:9d:e2:3d: ea:46:93:ca:0a:f1:46:c1:f3:bc:09:57:46:7b:eb:c2:4b:4e: bd:85:32:40:f4:e0:46:b0:be:a2:33:35:ce:81:24:83:4a:f7: d6:ff:3e:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr+ucB+jPwclS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YzY3ZmEzODctNWQzOS00NjVkLTk4MzMtOTZiOGY5M2RiZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLy+AQU5TdPMze8/TXFMNVLu2KI9ZDcCWt9m dtYuy7PXznjWtpexiDxujyy7auibCaHax+ByycaRUNF879PUFrcUmJsgOWY6SpC0 ctblG50aAwYbNClYqpYPV0NGQ/4ETAXvUBMU62LA9oCcD/+5Ha339HQtHTXOpbHu uEv8YFpEG8XzYMQDJArmt4FqkJiWhKXCRB4FOC0yzG772jDRtT7FokfOFy98jeYM DvVLzlChn88eJN7jZETAhhd0HgVNXC+7QnOklEyUAa6RaZg4AZUM6yhO+Yvrjm6g mRrILAOKQEVtGtvHicU9bdlN4W6Vpf8GGVwUSm8wIgjFXz7+bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa81hOKo2aQX9Bgcezc7r8U6gMWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTg4ZTcxMjAtZjFmNi0z MWJlLWIwZmItMmQxMzc3ZTA5YWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhkAPcsPjf2ZIhpixveGhpSZaPmgoXDkDiyNOpufecIzOekjANQHrKl HlamtEBKvJAQ342eMXWKXKxJdKmUT2fRl7OzPlidyBls83Z0+dw+hh3Q4itCK4kM 7plf8tKGtfSNhLPis0iZLWWSxW0EJ/3SSzVm13ssbBhHUTiRP665pT3r6lJOvrAJ LLD/VNtuuL+KfOX7mqnFJuRUJP69Mg055N2ceIg/RMJKjylt4dXwByXCF68pb2kz l2914tQy4F6S1k7rmNrbQy0TwnEYOUGERkGYQJ3iPepGk8oK8UbB87wJV0Z768JL Tr2FMkD04EawvqIzNc6BJINK99b/Pmc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:34 2025 by rpki-client