$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa File: 45903c34-be56-3f79-af14-28700a3b4f0b.roa (raw, json) Hash identifier: F/Bw47pyFd4vt2I4PmI6k3vgHVkr3eR8kTwXWHdCrzQ= Subject key identifier: 77:8D:AE:98:D6:BD:5E:4F:71:32:CF:4B:F4:0B:5D:CC:B7:C7:7A:D9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FC5B6CB3960EFB6D9DE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3360 IP address blocks: 130.174.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:c5:b6:cb:39:60:ef:b6:d9:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=f0aa58d4-85d4-4555-93dd-7cfd9f1def0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:db:c5:47:7f:60:b8:62:1c:18:c9:71:db:83: 8c:d4:c6:4d:a1:85:5d:60:44:43:de:42:98:2d:42: 3a:a9:62:26:0c:be:c2:94:d3:31:5e:5e:b0:f3:fe: 26:37:05:81:0b:7a:0e:d0:42:fd:59:6f:22:e0:a6: 41:0d:e5:e5:a0:cc:d4:13:51:cc:3d:99:af:5a:fa: ea:c2:49:5b:21:c2:6a:26:bf:7f:a1:f4:97:01:db: d7:af:10:45:6c:77:43:cd:ec:5f:d1:e4:03:3d:93: 91:5b:48:1c:72:91:cf:6d:31:ed:53:19:f4:43:68: 49:20:1f:ad:b3:b8:d6:86:cc:de:7e:75:14:30:10: 2d:e3:d6:61:44:27:28:bf:7e:e1:20:da:9d:88:54: dc:b4:5a:dc:d9:50:83:04:23:6e:91:8a:ca:e7:dc: ae:70:b7:40:f6:19:5c:1f:1e:59:d5:0e:5e:87:01: af:a8:3e:c4:ca:d6:ef:45:2f:84:c1:47:bb:61:6c: 6f:3b:f4:10:fc:92:87:04:49:32:e0:04:17:ba:21: a8:fb:6e:43:d5:5c:b2:7a:78:03:7a:1c:8f:c7:2f: 27:83:c7:36:0b:d5:5f:34:85:9e:40:ae:69:a7:15: 60:de:71:42:dc:98:4e:fa:28:cf:92:56:c3:b4:69: 35:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:8D:AE:98:D6:BD:5E:4F:71:32:CF:4B:F4:0B:5D:CC:B7:C7:7A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/45903c34-be56-3f79-af14-28700a3b4f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:64:9f:8e:71:d7:14:0f:11:85:10:31:b7:92:3a:6e:41:28: 58:bc:aa:97:02:f1:72:1b:e0:e2:e3:da:05:0e:81:86:1c:f1: a1:b6:be:f5:30:21:51:aa:39:aa:18:17:d6:6f:bf:f8:fd:fe: 88:65:ca:b8:f3:ba:6b:0d:92:21:1e:d0:14:c2:36:4e:02:0d: b1:20:98:b7:ce:11:10:af:e8:6f:e1:13:0a:10:02:9c:53:43: 2b:2e:90:7f:f6:85:98:6b:01:10:19:84:55:0e:81:12:fe:78: ac:01:73:61:eb:87:92:52:5b:5c:4a:8b:da:02:2f:8a:6a:31: db:25:83:86:e9:08:83:d5:3d:be:ae:89:43:96:fd:44:b9:8d: f0:2f:d8:d1:8e:11:9a:af:74:06:db:38:3f:5f:7e:c9:a7:4a: 4d:48:1f:ac:f9:91:1a:55:b0:5d:b3:38:e7:ac:ff:b6:46:45: c5:b3:b0:b3:19:82:08:56:94:2a:f7:8a:18:73:51:fa:8f:ba: e3:f6:09:25:bd:81:b6:ba:90:53:d3:98:35:37:76:1e:1e:ce: 3d:34:81:4a:8d:0a:6c:6d:25:ba:53:fa:35:1a:f5:49:b5:03: 1b:f0:45:80:0f:f4:c6:99:54:79:7a:c4:97:f6:a1:ec:f9:60: c7:b5:48:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8W2yzlg77bZ3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk ZjBhYTU4ZDQtODVkNC00NTU1LTkzZGQtN2NmZDlmMWRlZjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9vFR39guGIcGMlx24OM1MZNoYVdYERD3kKY LUI6qWImDL7ClNMxXl6w8/4mNwWBC3oO0EL9WW8i4KZBDeXloMzUE1HMPZmvWvrq wklbIcJqJr9/ofSXAdvXrxBFbHdDzexf0eQDPZORW0gccpHPbTHtUxn0Q2hJIB+t s7jWhszefnUUMBAt49ZhRCcov37hINqdiFTctFrc2VCDBCNukYrK59yucLdA9hlc Hx5Z1Q5ehwGvqD7EytbvRS+EwUe7YWxvO/QQ/JKHBEky4AQXuiGo+25D1VyyengD ehyPxy8ng8c2C9VfNIWeQK5ppxVg3nFC3JhO+ijPklbDtGk1YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHeNrpjWvV5PcTLPS/QLXcy3x3rZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDU5MDNjMzQtYmU1Ni0z Zjc5LWFmMTQtMjg3MDBhM2I0ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBkn45x1xQPEYUQMbeSOm5BKFi8qpcC8XIb4OLj2gUOgYYc8aG2vvUw IVGqOaoYF9Zvv/j9/ohlyrjzumsNkiEe0BTCNk4CDbEgmLfOERCv6G/hEwoQApxT QysukH/2hZhrARAZhFUOgRL+eKwBc2Hrh5JSW1xKi9oCL4pqMdslg4bpCIPVPb6u iUOW/US5jfAv2NGOEZqvdAbbOD9ffsmnSk1IH6z5kRpVsF2zOOes/7ZGRcWzsLMZ gghWlCr3ihhzUfqPuuP2CSW9gba6kFPTmDU3dh4ezj00gUqNCmxtJbpT+jUa9Um1 AxvwRYAP9MaZVHl6xJf2oez5YMe1SA8= -----END CERTIFICATE-----Generated at Mon Jun 16 09:57:23 2025 by rpki-client