$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa File: f112e98d-5990-34ef-99a3-61d46f80f713.roa (raw, json) Hash identifier: N6PZiR6FJCofrC0UqCvvGswRCTU2eC1Ud+M2KM3KQ24= Subject key identifier: 1D:3A:6F:D4:AC:57:C6:E5:B8:08:1C:0F:AB:18:44:1C:62:8A:4D:2A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BF3EBBDF517138DC49F0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3360 IP address blocks: 130.174.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:bf:3e:bb:df:51:71:38:dc:49:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1008eb51-ba20-4170-8079-d4c0cfc04405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cb:00:e5:a0:91:2a:7e:dd:45:54:60:82:09: f5:66:43:e3:29:f1:5d:8c:53:c2:46:62:e2:8d:69: c7:6d:2b:f4:fb:b2:14:c8:82:3c:86:06:a1:b3:c8: 99:57:c4:33:b6:7c:66:cc:30:26:99:16:e6:a5:0c: e6:95:29:31:1b:c1:77:22:3c:0a:6f:67:bb:7c:b6: db:8a:22:2a:ce:df:98:3c:0d:eb:ce:f7:a3:69:ce: 8a:ae:d4:37:4d:7c:21:80:9f:28:f8:f8:f1:43:67: d9:8c:82:7e:63:82:14:7a:db:6c:d9:58:36:9f:f5: 85:28:d0:06:43:6e:fe:2b:94:4a:9d:2c:19:44:e6: ab:ef:7c:17:47:1e:b0:8b:f3:b1:0a:a2:b9:2b:20: bc:a8:89:f5:d5:31:09:0a:f3:61:76:f6:79:f3:62: 01:24:10:cb:76:f7:35:24:b9:8e:07:a5:d3:c4:0a: 6a:c8:a7:0d:13:5c:67:27:40:31:81:36:e4:c0:29: 43:64:51:9b:20:05:60:e0:39:42:85:0c:0a:7e:93: 49:b7:b6:31:1c:b6:dc:f9:11:85:3d:0d:00:28:db: e7:85:17:cb:49:42:f8:af:59:93:2c:e7:95:65:53: d0:07:66:55:34:3f:1f:37:53:c8:c6:86:46:f6:c3: 60:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3A:6F:D4:AC:57:C6:E5:B8:08:1C:0F:AB:18:44:1C:62:8A:4D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f112e98d-5990-34ef-99a3-61d46f80f713.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:4a:89:da:7e:2b:a6:c4:0e:72:96:65:34:60:41:8b:a8:55: ba:6e:a5:32:b0:a4:39:f3:e1:77:d1:5e:ab:5a:a2:01:16:96: 11:79:46:fa:b5:42:3c:84:fa:66:84:32:0b:f5:e4:db:c5:64: 7e:d1:c5:79:cd:1d:03:72:27:03:9c:7b:63:03:40:0c:5e:4c: 85:4f:20:b4:d3:ae:38:2a:94:ed:3d:b0:38:86:05:f3:4c:dc: 0f:21:5d:41:48:77:98:07:60:cb:f9:93:23:52:0f:f0:e1:1f: 2f:8c:97:ce:ea:96:92:2e:f3:84:f5:21:eb:86:53:ae:d9:04: ba:45:cf:83:10:f8:05:a9:6c:14:29:dd:d8:69:f3:6a:f6:62: d1:74:79:a9:5f:17:4e:8c:7b:d5:4f:b7:46:04:44:cb:61:79: 7a:ce:e3:8b:d1:bd:e8:2d:fb:d2:a4:00:dd:d5:d9:9f:2c:8e: 99:b3:22:98:e8:d0:65:00:34:f5:94:1c:09:98:c1:bf:b2:8f: 24:44:23:4b:2f:62:36:cb:f3:8b:15:69:c7:73:b1:7e:55:d5: 68:fa:f3:a1:d2:87:5b:a3:bc:7c:48:cf:ab:b2:2c:e4:20:16: 51:0c:14:4c:47:36:41:26:cd:8b:b2:67:95:e9:29:8b:97:ce: d4:11:7c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr8+u99RcTjcSfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTAwOGViNTEtYmEyMC00MTcwLTgwNzktZDRjMGNmYzA0NDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8sA5aCRKn7dRVRgggn1ZkPjKfFdjFPCRmLi jWnHbSv0+7IUyII8hgahs8iZV8QztnxmzDAmmRbmpQzmlSkxG8F3IjwKb2e7fLbb iiIqzt+YPA3rzvejac6KrtQ3TXwhgJ8o+PjxQ2fZjIJ+Y4IUetts2Vg2n/WFKNAG Q27+K5RKnSwZROar73wXRx6wi/OxCqK5KyC8qIn11TEJCvNhdvZ582IBJBDLdvc1 JLmOB6XTxApqyKcNE1xnJ0AxgTbkwClDZFGbIAVg4DlChQwKfpNJt7YxHLbc+RGF PQ0AKNvnhRfLSUL4r1mTLOeVZVPQB2ZVND8fN1PIxoZG9sNgQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB06b9SsV8bluAgcD6sYRBxiik0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjExMmU5OGQtNTk5MC0z NGVmLTk5YTMtNjFkNDZmODBmNzEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVKidp+K6bEDnKWZTRgQYuoVbpupTKwpDnz4XfRXqtaogEWlhF5Rvq1 QjyE+maEMgv15NvFZH7RxXnNHQNyJwOce2MDQAxeTIVPILTTrjgqlO09sDiGBfNM 3A8hXUFId5gHYMv5kyNSD/DhHy+Ml87qlpIu84T1IeuGU67ZBLpFz4MQ+AWpbBQp 3dhp82r2YtF0ealfF06Me9VPt0YERMtheXrO44vRvegt+9KkAN3V2Z8sjpmzIpjo 0GUANPWUHAmYwb+yjyREI0svYjbL84sVacdzsX5V1Wj686HSh1ujvHxIz6uyLOQg FlEMFExHNkEmzYuyZ5XpKYuXztQRfPI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:00 2025 by rpki-client