$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f40340cf-3b14-3dba-bb03-67f0c1fe6c97.roa File: f40340cf-3b14-3dba-bb03-67f0c1fe6c97.roa (raw, json) Hash identifier: 4Oj/1VsumL1x8SBEnOkCmXqfGFOeeLXdf8lx9qPzsQE= Subject key identifier: 25:51:4A:5A:21:B7:DC:E0:60:55:25:58:42:62:B6:BB:AF:CE:66:86 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C454E74AE97409257B00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f40340cf-3b14-3dba-bb03-67f0c1fe6c97.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 130.174.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c4:54:e7:4a:e9:74:09:25:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=1aee53b5-341f-4d87-a419-2b4e8d8d3139 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:20:9b:f7:3e:c0:25:a9:9f:a9:0e:62:e0:36: 74:7a:98:38:ea:0b:db:9a:e9:f1:03:08:bc:87:ad: 2b:3a:2a:37:d9:67:c9:b6:e0:79:0d:7e:b9:89:bf: 28:13:2c:a6:51:b9:59:9b:19:12:5b:6d:f5:b6:1e: d6:c3:50:45:0a:c1:0a:af:7d:ab:0c:23:96:bc:40: 3a:ae:13:ba:88:5a:76:1a:7b:00:54:09:6b:00:71: d5:7d:72:d2:ad:a5:79:58:ec:e8:fa:0f:f0:2e:cc: df:42:8b:19:ea:b8:b6:d1:62:55:d5:04:8c:8e:b8: 38:18:f8:08:8f:10:b3:a5:50:fe:40:d6:7f:a5:95: d7:92:31:32:87:25:e8:cf:3d:6f:95:fd:83:8d:00: 4c:d9:39:59:49:68:d3:cd:ee:d9:3e:ba:e1:a3:4e: a9:86:50:d2:6a:2f:dd:cf:4c:ed:b3:91:46:26:e6: 56:a7:91:59:68:0a:fd:99:23:70:77:77:54:36:2d: d6:2b:96:7d:ed:72:ba:48:e9:17:26:5c:f9:f7:d2: c0:f7:97:de:0b:5e:ea:48:16:fa:27:94:ac:7b:2e: 38:cb:61:c2:61:17:ea:f2:99:74:22:e3:c7:33:12: 51:98:59:71:1f:15:6c:91:fb:f7:aa:79:0b:de:b0: 09:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:51:4A:5A:21:B7:DC:E0:60:55:25:58:42:62:B6:BB:AF:CE:66:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f40340cf-3b14-3dba-bb03-67f0c1fe6c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c9:f9:14:76:2d:d1:b4:86:62:08:56:b5:6b:e6:52:73:bc: 11:d8:45:ce:a0:f6:cd:6a:10:f7:a5:1b:ca:85:d5:77:f6:cb: d3:80:b7:8a:c8:35:22:65:8e:0e:70:0e:db:b3:9c:e1:b2:bb: 7b:26:f1:79:04:e5:6b:71:da:18:08:4b:ed:a6:97:a8:a8:78: 55:32:d7:c2:f0:34:69:fd:ba:ff:4c:d3:66:c3:8d:a0:d8:74: 34:7f:b9:24:7c:ea:ee:d3:b1:e7:cf:56:97:7e:af:64:b9:c0: 70:1d:2e:85:6c:bf:a2:b8:c8:b4:52:bf:11:56:1d:e9:c3:ad: dc:53:4d:62:13:01:13:87:b7:71:04:f0:b0:ab:7e:57:14:00: 17:f2:e6:b2:ed:7d:07:bf:8c:bf:da:c2:df:46:73:30:77:af: 74:f6:16:24:4b:b7:e0:ba:3f:d2:a1:6e:fc:f4:9d:0b:ce:e6: 21:95:7d:f6:50:81:6b:cf:4a:3b:2a:ca:02:e4:a0:42:a0:38: b0:45:0d:ec:4e:5f:72:d4:73:f7:0d:0a:e1:71:38:dd:a6:0e: ee:e8:cd:b8:0c:9f:d2:89:f0:bd:93:66:21:2c:a6:11:31:ef: 15:3f:71:7f:16:88:1b:34:45:f3:75:7d:d0:96:a2:61:c5:7b: b9:ad:62:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsRU50rpdAklewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MWFlZTUzYjUtMzQxZi00ZDg3LWE0MTktMmI0ZThkOGQzMTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSCb9z7AJamfqQ5i4DZ0epg46gvbmunxAwi8 h60rOio32WfJtuB5DX65ib8oEyymUblZmxkSW231th7Ww1BFCsEKr32rDCOWvEA6 rhO6iFp2GnsAVAlrAHHVfXLSraV5WOzo+g/wLszfQosZ6ri20WJV1QSMjrg4GPgI jxCzpVD+QNZ/pZXXkjEyhyXozz1vlf2DjQBM2TlZSWjTze7ZPrrho06phlDSai/d z0zts5FGJuZWp5FZaAr9mSNwd3dUNi3WK5Z97XK6SOkXJlz599LA95feC17qSBb6 J5Ssey44y2HCYRfq8pl0IuPHMxJRmFlxHxVskfv3qnkL3rAJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCVRSloht9zgYFUlWEJitruvzmaGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjQwMzQwY2YtM2IxNC0z ZGJhLWJiMDMtNjdmMGMxZmU2Yzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq40MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzJ+RR2LdG0hmIIVrVr5lJzvBHYRc6g9s1qEPelG8qF1Xf2y9OAt4rI NSJljg5wDtuznOGyu3sm8XkE5Wtx2hgIS+2ml6ioeFUy18LwNGn9uv9M02bDjaDY dDR/uSR86u7TsefPVpd+r2S5wHAdLoVsv6K4yLRSvxFWHenDrdxTTWITAROHt3EE 8LCrflcUABfy5rLtfQe/jL/awt9GczB3r3T2FiRLt+C6P9Khbvz0nQvO5iGVffZQ gWvPSjsqygLkoEKgOLBFDexOX3LUc/cNCuFxON2mDu7ozbgMn9KJ8L2TZiEsphEx 7xU/cX8WiBs0RfN1fdCWomHFe7mtYms= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:07 2025 by rpki-client