$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa File: 4a850ed4-4106-3fe5-af86-31e842945a97.roa (raw, json) Hash identifier: JbpaRN74BsB137ISacs2LbAJ7+XFQ3dXC34cg3rHU9Y= Subject key identifier: D8:D3:E5:C1:3D:50:76:68:C6:84:20:C6:91:0F:42:02:DE:E6:DD:58 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246B22ABE515BBF14AFA200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 203 IP address blocks: 130.174.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:b2:2a:be:51:5b:bf:14:af:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=0a54d0a1-6b24-446e-b098-53ba224f2866 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:22:a5:ba:77:0d:58:4e:0e:f2:db:9b:72: 6e:64:39:58:77:8c:4c:36:39:36:b0:73:25:dd:dc: bb:cd:eb:7a:f6:df:db:42:37:27:b1:a0:af:ea:aa: 9b:c9:6a:07:42:e3:b2:0f:f9:67:fc:2b:0e:47:8e: db:a6:9e:0e:ab:f6:cd:a9:dd:c9:d8:7d:07:31:a1: 63:15:41:d9:cf:19:df:ae:91:f4:5f:de:69:86:96: dc:76:cd:e3:8c:7f:bb:e4:6d:84:97:c0:9f:b8:54: 89:20:41:c7:4e:c3:d9:de:5f:b6:5f:fc:c3:85:4d: e6:eb:49:37:f4:62:1f:10:e2:c8:07:c1:ba:9b:e4: 7b:6e:ef:3d:8f:12:b5:93:df:36:70:48:e6:38:18: 5a:7d:85:27:17:4b:f9:cb:6d:bf:68:ad:5c:0e:71: 51:7d:3b:b8:23:e8:01:bf:0b:61:a9:bb:68:d6:17: 7d:ee:22:6c:7e:04:ac:58:bc:19:b3:0f:e6:f4:37: 3c:dd:29:2e:cc:05:cf:af:26:56:ff:24:5e:df:eb: 48:e0:2d:02:a8:0b:87:fa:8e:af:92:f9:cd:d4:09: f3:09:4d:39:36:08:7f:5e:51:c0:59:cf:ed:16:15: 2b:4e:fd:d5:17:d8:62:96:f8:df:52:c3:74:4d:b7: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:E5:C1:3D:50:76:68:C6:84:20:C6:91:0F:42:02:DE:E6:DD:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4a850ed4-4106-3fe5-af86-31e842945a97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:fd:b7:3d:a9:a6:66:ed:78:2a:f3:7a:78:3d:5e:32:08:c1: cf:d2:66:9b:81:5b:30:4e:ca:1d:92:6a:7f:3f:b8:e5:d8:42: fe:c3:ea:ff:c8:25:ef:31:79:56:3e:3c:90:dc:d0:a7:9f:19: 71:f4:b6:7f:f8:1a:90:c9:2b:6b:d2:c7:ba:bd:48:71:86:7c: b3:a5:9c:5e:bf:e7:de:8a:db:76:28:29:42:8f:d6:17:05:12: 38:82:cb:fd:ff:4c:48:88:9d:10:31:82:f8:e1:3c:cf:ce:57: ff:b4:46:16:34:ff:b2:3f:1a:4d:d5:f1:f9:4a:e3:e1:a0:1b: 13:00:f3:a6:29:81:25:53:bd:ac:4b:36:78:d0:3d:c6:7a:c3: dd:2d:6a:ec:32:54:89:42:1b:36:5f:cf:4f:30:e4:23:06:91: 75:0f:62:32:ab:90:0b:57:8c:b4:79:39:b0:28:3d:6e:d0:18: 40:42:d2:4a:d6:74:12:32:5b:f5:ff:b1:9f:66:8c:0e:d9:f3: bb:4a:07:1f:c6:b5:bf:2d:f2:92:23:83:85:69:6e:67:65:56: ea:d1:46:62:6f:ca:c7:54:6d:8e:0b:31:be:c0:a7:d4:98:33: b3:41:09:7d:7b:b2:f3:6d:ed:f8:db:a2:9c:c4:aa:f1:69:b3: d1:3d:02:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRrIqvlFbvxSvogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MGE1NGQwYTEtNmIyNC00NDZlLWIwOTgtNTNiYTIyNGYyODY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj0ipbp3DVhODvLbm3JuZDlYd4xMNjk2sHMl 3dy7zet69t/bQjcnsaCv6qqbyWoHQuOyD/ln/CsOR47bpp4Oq/bNqd3J2H0HMaFj FUHZzxnfrpH0X95phpbcds3jjH+75G2El8CfuFSJIEHHTsPZ3l+2X/zDhU3m60k3 9GIfEOLIB8G6m+R7bu89jxK1k982cEjmOBhafYUnF0v5y22/aK1cDnFRfTu4I+gB vwthqbto1hd97iJsfgSsWLwZsw/m9Dc83SkuzAXPryZW/yRe3+tI4C0CqAuH+o6v kvnN1AnzCU05Ngh/XlHAWc/tFhUrTv3VF9hilvjfUsN0Tbf9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjT5cE9UHZoxoQgxpEPQgLe5t1YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGE4NTBlZDQtNDEwNi0z ZmU1LWFmODYtMzFlODQyOTQ1YTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI79tz2ppmbteCrzeng9XjIIwc/SZpuBWzBOyh2San8/uOXYQv7D6v/I Je8xeVY+PJDc0KefGXH0tn/4GpDJK2vSx7q9SHGGfLOlnF6/596K23YoKUKP1hcF EjiCy/3/TEiInRAxgvjhPM/OV/+0RhY0/7I/Gk3V8flK4+GgGxMA86YpgSVTvaxL NnjQPcZ6w90tauwyVIlCGzZfz08w5CMGkXUPYjKrkAtXjLR5ObAoPW7QGEBC0krW dBIyW/X/sZ9mjA7Z87tKBx/Gtb8t8pIjg4VpbmdlVurRRmJvysdUbY4LMb7Ap9SY M7NBCX17svNt7fjbopzEqvFps9E9AhA= -----END CERTIFICATE-----Generated at Sun Apr 27 04:13:23 2025 by rpki-client