$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855e6524-2e2b-3c24-8e0e-2b74f5fcdb0d.roa File: 855e6524-2e2b-3c24-8e0e-2b74f5fcdb0d.roa (raw, json) Hash identifier: F9aCdSTP5RrMu3Rbac3/b3n6xlS2y7JiQboIg1Nf/80= Subject key identifier: 4E:F5:75:0C:5C:04:70:7D:03:92:14:C6:45:21:C4:EF:0A:9A:21:FD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E537C248D682179111E000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855e6524-2e2b-3c24-8e0e-2b74f5fcdb0d.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 130.174.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:37:c2:48:d6:82:17:91:11:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3647092f-3157-4c97-b319-804daaea4fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:64:6a:88:0e:dc:e2:ef:db:2c:af:18:92: 23:3d:37:d3:75:8a:7e:eb:d8:f3:19:28:a7:79:f6: 5a:0a:ea:53:d7:87:31:cc:fe:55:43:fe:d2:fd:16: e9:61:e0:ba:1b:09:83:60:34:34:d3:e0:92:9a:d2: a2:a8:c6:87:29:08:a2:0a:2b:fc:51:3b:cf:a7:12: 5f:e3:72:26:53:d8:d4:2f:73:45:f5:0b:e1:80:61: 6b:a4:3e:83:bc:b9:64:65:aa:32:1b:8a:db:76:88: 59:a9:dd:73:56:86:99:a6:ec:f2:26:48:61:be:3e: 9e:a7:ac:a6:e2:17:af:63:a2:0f:d9:1f:81:43:32: 03:65:19:92:be:c5:30:ed:f4:cb:4d:a7:00:a8:01: cc:28:d8:0c:21:7d:b8:5a:3c:90:02:07:e0:ba:09: a7:5a:46:8c:25:34:a4:c9:71:6d:89:2a:56:70:ac: 0f:c6:59:7c:2d:c7:b0:f9:93:16:10:60:50:9d:ff: a2:3e:4c:ad:27:e3:1c:25:69:6e:22:f0:2b:bc:7a: 76:56:de:b6:cf:12:6a:1e:e2:5f:4b:0f:c4:64:37: 90:8e:6b:ad:81:e7:cc:60:ce:b7:30:8d:8b:16:5d: 81:a2:26:23:f3:70:57:93:d3:55:5f:08:3a:87:70: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:F5:75:0C:5C:04:70:7D:03:92:14:C6:45:21:C4:EF:0A:9A:21:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/855e6524-2e2b-3c24-8e0e-2b74f5fcdb0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:77:df:74:b8:97:30:fd:a3:99:60:93:d5:18:60:c8:63:99: 9f:59:11:fa:8a:cc:ea:5b:bd:aa:2c:83:39:fa:b3:8d:d7:74: 85:c3:d6:1e:14:47:9b:47:1a:93:27:f6:78:0f:55:3f:10:3c: 91:6b:04:3c:e0:f2:8f:a7:51:69:71:c9:35:cf:dc:36:89:b9: f3:f3:36:88:6a:f2:ad:e9:51:e0:b0:4e:de:09:27:e9:3e:f1: 66:b4:e2:a4:45:f9:ba:dc:88:69:ba:5e:e3:ba:58:45:4a:5e: 5f:20:cf:5b:ce:a7:77:63:e6:5d:42:f5:4a:8f:bc:17:72:ea: 6e:2d:af:28:8c:ae:73:8a:f8:68:69:2e:ed:06:f7:ec:18:fc: f8:44:21:82:b9:49:77:20:da:96:eb:7e:7e:13:56:99:56:1c: 16:a1:ad:ef:3c:fc:9b:72:7b:c4:af:44:36:a6:c1:a4:ae:b0: b1:b9:28:a5:72:95:33:c4:d9:e5:46:4c:f0:91:ea:8a:fb:cf: 3a:39:31:ec:4a:b8:5d:91:59:dd:d4:89:23:2b:fb:79:38:af: 04:64:72:88:bf:c0:cf:c8:1f:51:cb:8c:06:62:bf:a4:e1:32: ad:30:50:1f:4d:0a:0b:3c:49:c3:9c:4d:52:00:ce:2e:98:21: 82:dc:18:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TfCSNaCF5ER4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MzY0NzA5MmYtMzE1Ny00Yzk3LWIzMTktODA0ZGFhZWE0ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKJkaogO3OLv2yyvGJIjPTfTdYp+69jzGSin efZaCupT14cxzP5VQ/7S/RbpYeC6GwmDYDQ00+CSmtKiqMaHKQiiCiv8UTvPpxJf 43ImU9jUL3NF9QvhgGFrpD6DvLlkZaoyG4rbdohZqd1zVoaZpuzyJkhhvj6ep6ym 4hevY6IP2R+BQzIDZRmSvsUw7fTLTacAqAHMKNgMIX24WjyQAgfgugmnWkaMJTSk yXFtiSpWcKwPxll8Lcew+ZMWEGBQnf+iPkytJ+McJWluIvArvHp2Vt62zxJqHuJf Sw/EZDeQjmutgefMYM63MI2LFl2BoiYj83BXk9NVXwg6h3BCgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE71dQxcBHB9A5IUxkUhxO8KmiH9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODU1ZTY1MjQtMmUyYi0z YzI0LThlMGUtMmI3NGY1ZmNkYjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJV333S4lzD9o5lgk9UYYMhjmZ9ZEfqKzOpbvaosgzn6s43XdIXD1h4U R5tHGpMn9ngPVT8QPJFrBDzg8o+nUWlxyTXP3DaJufPzNohq8q3pUeCwTt4JJ+k+ 8Wa04qRF+brciGm6XuO6WEVKXl8gz1vOp3dj5l1C9UqPvBdy6m4tryiMrnOK+Ghp Lu0G9+wY/PhEIYK5SXcg2pbrfn4TVplWHBahre88/Jtye8SvRDamwaSusLG5KKVy lTPE2eVGTPCR6or7zzo5MexKuF2RWd3UiSMr+3k4rwRkcoi/wM/IH1HLjAZiv6Th Mq0wUB9NCgs8ScOcTVIAzi6YIYLcGLo= -----END CERTIFICATE-----Generated at Mon Jun 16 05:13:14 2025 by rpki-client