$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa File: ff022184-8837-3a66-a5c1-7e1e7a988a09.roa (raw, json) Hash identifier: CwXoF7cHkTPX0tEPIIKdF6EWWCSceAl5KrlgZlYip/U= Subject key identifier: 6B:24:03:C8:BC:B1:EC:58:0B:E5:E6:33:B9:2C:3D:80:95:B1:36:CC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C0E96387AADD23A7C080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 202 IP address blocks: 130.174.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c0:e9:63:87:aa:dd:23:a7:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=bb0bc3b5-d31a-4216-8aba-27626bc96466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:52:ba:7d:11:9e:a3:75:d1:5d:fb:1b:88:69: d9:22:ab:62:f0:fa:b2:ee:66:d7:7c:f5:0c:e0:ed: 27:25:05:d7:31:03:bc:5e:b6:81:b6:82:25:88:a2: 20:b2:30:60:8c:62:ea:88:ff:80:a2:28:5f:b6:24: bd:5d:43:e0:39:26:e5:93:ab:18:7b:4c:39:c9:56: cb:e1:ad:6c:5c:c9:d9:3f:b3:d3:88:ab:f4:3a:af: 09:80:4d:bd:5f:b0:43:fc:e1:ca:09:66:34:46:e0: 4f:95:3b:d5:5d:dc:65:fe:a4:1e:f1:02:77:e3:3b: e1:88:d4:89:c6:45:d0:b5:77:67:1e:d1:f7:d8:3b: cf:e4:fd:b3:f1:7a:42:64:fe:80:a2:42:c6:f8:ed: bd:bf:b3:18:8b:80:18:82:6f:51:d3:ea:64:4d:cb: 4a:7c:10:3d:6b:44:5b:3e:fd:fc:68:f4:21:f3:90: 22:0f:a1:b7:a5:8a:e0:19:6b:79:b5:f9:56:4f:d2: ed:c2:67:a9:d6:ec:68:ec:86:17:39:0c:37:f4:06: 8a:06:82:33:80:27:05:97:6f:46:f4:42:62:dc:c4: 4c:45:e5:45:b9:d2:a6:80:e0:eb:ad:8d:0d:e8:d5: 7c:25:18:68:a8:fc:9d:d1:fc:30:47:c4:3f:c0:97: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:24:03:C8:BC:B1:EC:58:0B:E5:E6:33:B9:2C:3D:80:95:B1:36:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ff022184-8837-3a66-a5c1-7e1e7a988a09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:10:4c:d1:94:41:b1:c2:2c:e6:ff:de:14:42:5d:86:95:3a: b7:bc:6a:b4:17:9f:6b:28:66:de:25:47:e3:10:22:3c:cd:71: 70:10:d9:57:84:d7:57:5f:75:a4:8a:01:e0:a3:8e:76:73:11: ae:f4:4d:3a:84:ed:1c:b5:75:d8:a6:a0:27:81:d0:f9:84:c8: ff:46:d6:a1:fb:a6:e6:84:e3:46:e4:f4:c0:d9:75:28:35:f8: 2b:0e:a5:2d:32:06:f4:1f:a8:60:31:be:51:a4:03:f4:ef:02: 23:a1:2b:7b:e4:87:5a:5b:7e:f1:89:80:31:33:db:d8:ba:3a: d8:22:7a:44:88:54:0c:75:31:32:7b:a6:82:25:39:58:44:f5: 45:01:95:2d:d4:dc:0a:9d:76:bf:72:df:70:97:bb:e6:f9:ec: b8:36:1f:5c:69:b7:25:d4:22:19:e1:f4:11:b6:08:f5:85:2f: e9:ae:54:f6:39:8a:d9:e0:1d:51:4d:19:97:c8:ef:80:96:07: 1e:8c:05:1c:0b:e8:c7:a4:d5:bf:33:1f:1d:5a:68:b3:87:2f: 3a:b2:f7:08:5a:55:e1:f3:f7:fe:9c:94:48:4c:31:dc:6e:d2: 29:34:a5:9a:cb:45:1f:8b:1d:a2:8d:fe:54:89:25:d6:3a:3d: 1b:6f:d8:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsDpY4eq3SOnwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk YmIwYmMzYjUtZDMxYS00MjE2LThhYmEtMjc2MjZiYzk2NDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVK6fRGeo3XRXfsbiGnZIqti8Pqy7mbXfPUM 4O0nJQXXMQO8XraBtoIliKIgsjBgjGLqiP+AoihftiS9XUPgOSblk6sYe0w5yVbL 4a1sXMnZP7PTiKv0Oq8JgE29X7BD/OHKCWY0RuBPlTvVXdxl/qQe8QJ34zvhiNSJ xkXQtXdnHtH32DvP5P2z8XpCZP6AokLG+O29v7MYi4AYgm9R0+pkTctKfBA9a0Rb Pv38aPQh85AiD6G3pYrgGWt5tflWT9Ltwmep1uxo7IYXOQw39AaKBoIzgCcFl29G 9EJi3MRMReVFudKmgODrrY0N6NV8JRhoqPyd0fwwR8Q/wJcI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGskA8i8sexYC+XmM7ksPYCVsTbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZmYwMjIxODQtODgzNy0z YTY2LWE1YzEtN2UxZTdhOTg4YTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQQTNGUQbHCLOb/3hRCXYaVOre8arQXn2soZt4lR+MQIjzNcXAQ2VeE 11dfdaSKAeCjjnZzEa70TTqE7Ry1ddimoCeB0PmEyP9G1qH7puaE40bk9MDZdSg1 +CsOpS0yBvQfqGAxvlGkA/TvAiOhK3vkh1pbfvGJgDEz29i6OtgiekSIVAx1MTJ7 poIlOVhE9UUBlS3U3Aqddr9y33CXu+b57Lg2H1xptyXUIhnh9BG2CPWFL+muVPY5 itngHVFNGZfI74CWBx6MBRwL6Mek1b8zHx1aaLOHLzqy9whaVeHz9/6clEhMMdxu 0ik0pZrLRR+LHaKN/lSJJdY6PRtv2CU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:17:42 2025 by rpki-client