$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa File: 104038a4-0b27-3ddd-924e-b238fc38a0d9.roa (raw, json) Hash identifier: nO7FRq64KlR8+4ASgFoRxjf+XJgBk0Pf30VQdq/7EgA= Subject key identifier: 9C:FE:44:3D:80:B2:86:74:7C:50:AC:9B:AF:19:BD:FF:9F:E4:50:B6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246C1B2852DBCD74EBB2380 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3356 IP address blocks: 130.174.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:c1:b2:85:2d:bc:d7:4e:bb:23:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=e0aa2419-56f0-4f01-8519-a6070084bfd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:24:d3:0d:ea:77:46:08:e4:26:ce:50:33:01: 73:d7:04:44:b6:14:40:de:d5:a9:c5:14:d4:f9:01: 98:0c:cf:f0:fa:9c:d1:16:9c:6b:dd:b4:f9:2f:6e: ad:0e:02:25:1c:8b:7d:7c:c8:f6:df:2a:b1:96:34: 35:01:f9:31:60:16:01:6c:21:3e:74:aa:9b:4f:aa: 05:0d:60:2b:ef:78:67:9a:cd:bc:92:7a:81:12:52: 51:86:ab:b9:2b:98:43:57:88:1a:b4:72:9e:f0:ee: b8:b8:3d:02:f4:73:1d:19:48:91:62:3a:3e:d2:b9: 4c:ea:15:46:6e:cf:03:cf:75:a0:8e:44:b0:40:ec: ff:8e:ef:02:43:66:e1:c2:d9:f5:1b:38:64:38:11: 95:b5:7e:28:a1:b0:64:de:b1:1a:f0:70:b9:4d:dd: 85:bd:ec:7b:88:51:23:9f:86:df:2e:fb:ee:95:c8: 50:c7:be:0b:36:b3:99:67:d7:5a:c5:a7:ee:63:1b: de:74:47:ae:af:42:9d:a2:9c:bd:a2:8f:fb:77:c2: 87:e0:e2:ce:9e:7c:57:82:75:07:e3:0d:bb:7f:0b: c7:5c:f4:72:d8:13:af:ea:f5:c4:84:e9:20:01:51: 4b:53:cc:74:e6:3e:62:ee:1d:57:56:96:9c:63:4a: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:44:3D:80:B2:86:74:7C:50:AC:9B:AF:19:BD:FF:9F:E4:50:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/104038a4-0b27-3ddd-924e-b238fc38a0d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:67:2f:87:c2:2f:15:08:d9:7b:58:d3:13:bd:74:57:c9:90: b4:05:39:d1:2f:e8:a4:86:b4:82:8c:ae:36:c9:f7:60:35:c9: 6b:82:70:96:5e:8c:4a:f0:cd:fe:c4:08:0d:d9:b8:3f:71:af: ff:ab:73:e4:19:21:f3:01:35:39:72:02:bf:50:1e:d0:20:ab: dd:54:17:06:df:ae:99:b8:5b:94:e5:ca:cb:96:b5:31:e7:5f: 19:d0:30:63:22:79:7e:1b:a4:f4:21:76:a2:3d:65:77:2b:84: d3:3b:1c:03:20:d8:dc:a2:0e:64:6e:c5:94:47:15:c1:af:99: 2e:c2:bc:39:09:91:2c:e0:99:10:ff:5a:a2:37:29:2f:1a:aa: a5:a0:d7:d2:8a:a7:7d:f3:8b:c3:42:69:14:da:b8:29:57:49: 79:4a:83:6c:33:8c:7c:2b:a4:31:21:08:02:49:06:21:68:83: 25:85:bd:16:b0:53:4e:72:47:4b:b2:a1:30:cb:e1:93:25:31: 53:ce:1d:cf:1b:8e:86:d9:a3:c3:6c:6d:a9:c3:46:a1:a0:b9: 30:86:3c:51:fe:aa:86:7f:ea:cc:58:0d:ca:bd:c0:e4:39:96: d5:52:9f:c9:17:a1:7b:15:a9:b1:d3:41:ee:0f:dc:5a:c9:22: e0:36:24:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRsGyhS281067I4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk ZTBhYTI0MTktNTZmMC00ZjAxLTg1MTktYTYwNzAwODRiZmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyTTDep3RgjkJs5QMwFz1wREthRA3tWpxRTU +QGYDM/w+pzRFpxr3bT5L26tDgIlHIt9fMj23yqxljQ1AfkxYBYBbCE+dKqbT6oF DWAr73hnms28knqBElJRhqu5K5hDV4gatHKe8O64uD0C9HMdGUiRYjo+0rlM6hVG bs8Dz3WgjkSwQOz/ju8CQ2bhwtn1GzhkOBGVtX4oobBk3rEa8HC5Td2Fvex7iFEj n4bfLvvulchQx74LNrOZZ9daxafuYxvedEeur0Kdopy9oo/7d8KH4OLOnnxXgnUH 4w27fwvHXPRy2BOv6vXEhOkgAVFLU8x05j5i7h1XVpacY0pAKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJz+RD2AsoZ0fFCsm68Zvf+f5FC2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTA0MDM4YTQtMGIyNy0z ZGRkLTkyNGUtYjIzOGZjMzhhMGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZnL4fCLxUI2XtY0xO9dFfJkLQFOdEv6KSGtIKMrjbJ92A1yWuCcJZe jErwzf7ECA3ZuD9xr/+rc+QZIfMBNTlyAr9QHtAgq91UFwbfrpm4W5TlysuWtTHn XxnQMGMieX4bpPQhdqI9ZXcrhNM7HAMg2NyiDmRuxZRHFcGvmS7CvDkJkSzgmRD/ WqI3KS8aqqWg19KKp33zi8NCaRTauClXSXlKg2wzjHwrpDEhCAJJBiFogyWFvRaw U05yR0uyoTDL4ZMlMVPOHc8bjobZo8NsbanDRqGguTCGPFH+qoZ/6sxYDcq9wOQ5 ltVSn8kXoXsVqbHTQe4P3FrJIuA2JOc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:38 2025 by rpki-client