$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa File: b55a739f-372c-325e-887b-2f006cd12c3e.roa (raw, json) Hash identifier: k36IQtOYcsugtNBWBwdhTAFjL2HLumdq+9Wg1hTJ0NY= Subject key identifier: 96:9A:47:D2:1C:13:03:A0:C8:87:94:7B:2D:62:A6:BB:46:B1:E6:53 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858491246BEBFE9420DF5F6B93180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 3356 IP address blocks: 130.174.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:be:bf:e9:42:0d:f5:f6:b9:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=6e91a303-b6d5-4880-b8f6-8c2c3f953eab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:80:e3:a2:08:0d:dd:4e:69:1a:45:12:a2:09: 14:85:87:7d:43:76:70:12:a9:a6:6b:2e:c6:2e:95: 90:ff:28:c6:4b:ba:5e:a3:05:05:8a:02:0f:03:ad: c1:09:21:e3:0a:32:66:cf:0c:61:1e:cb:cf:ef:77: e3:ef:2f:33:fc:fb:03:e1:03:33:d0:e3:77:df:89: af:18:e1:7b:85:34:b8:b5:ab:6b:0a:ab:95:34:e6: b1:c5:19:67:6a:c0:d2:d2:18:1a:3d:c9:21:2d:6b: ca:97:34:dd:e8:49:a7:05:1e:af:6f:28:d5:db:db: d0:4c:63:91:d5:30:e3:d1:80:2a:19:2e:5f:9d:a7: 65:37:2c:d2:18:6b:c3:5f:24:96:3a:e0:e7:51:ae: a0:2a:69:ad:32:35:d6:f4:1b:36:33:b9:17:77:46: 73:ae:0e:45:9b:ac:80:df:43:64:59:f3:81:26:74: 21:03:17:a4:85:4a:d0:1c:8f:3b:46:c7:40:c7:02: 02:19:30:ef:9d:58:86:b2:bc:03:78:85:25:78:7d: cc:f9:24:67:7d:fa:c8:15:5f:68:78:28:2e:a6:5a: 34:50:4c:ff:04:cd:d0:89:1d:12:84:5d:25:98:03: b0:b7:59:23:02:af:db:00:44:1d:02:88:d7:35:0c: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9A:47:D2:1C:13:03:A0:C8:87:94:7B:2D:62:A6:BB:46:B1:E6:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b55a739f-372c-325e-887b-2f006cd12c3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:63:98:62:90:7e:2d:92:5a:e9:de:04:86:1a:0e:3b:fa:a6: 33:47:07:18:d4:87:38:aa:27:dd:1e:f7:ed:d6:9f:5b:bc:d1: b4:cc:33:f6:32:cb:c4:20:62:64:54:16:f4:82:ff:fd:bf:5f: 1c:a3:f6:9e:41:5d:94:df:a3:08:28:ae:8c:d3:e1:5e:ea:ab: 04:e9:3f:c1:fa:71:2e:e5:72:7e:ff:38:7d:8e:f8:50:1c:45: a8:00:f3:44:db:2a:af:0a:1d:e9:b2:9c:ba:4f:33:69:27:68: e6:6a:e8:2c:b3:29:db:01:50:5b:c0:f3:40:09:73:9c:69:29: cb:28:95:07:26:04:1f:ac:66:9d:89:7a:c3:b0:f7:22:a3:70: ad:86:76:23:39:b6:d6:b0:75:68:f5:cf:39:f0:fa:1e:59:c3: 44:6c:6f:72:1b:81:9e:71:c3:86:1d:32:cb:2b:73:df:ac:9c: ee:8f:5e:55:6e:49:0e:cd:7c:95:17:b7:0c:ed:88:48:dc:b2: 70:7d:55:77:d6:fa:a1:d5:c6:29:0c:0a:ae:18:f4:2d:86:83: 9a:ca:34:47:2b:a9:6e:14:69:ee:7d:88:5b:3c:92:a6:c1:e3: ba:2c:ec:0e:e3:e1:d4:18:b9:bf:ef:e9:1a:a6:20:4d:46:4a: f0:d2:06:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRr6/6UIN9fa5MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk NmU5MWEzMDMtYjZkNS00ODgwLWI4ZjYtOGMyYzNmOTUzZWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYDjoggN3U5pGkUSogkUhYd9Q3ZwEqmmay7G LpWQ/yjGS7peowUFigIPA63BCSHjCjJmzwxhHsvP73fj7y8z/PsD4QMz0ON334mv GOF7hTS4tatrCquVNOaxxRlnasDS0hgaPckhLWvKlzTd6EmnBR6vbyjV29vQTGOR 1TDj0YAqGS5fnadlNyzSGGvDXySWOuDnUa6gKmmtMjXW9Bs2M7kXd0Zzrg5Fm6yA 30NkWfOBJnQhAxekhUrQHI87RsdAxwICGTDvnViGsrwDeIUleH3M+SRnffrIFV9o eCguplo0UEz/BM3QiR0ShF0lmAOwt1kjAq/bAEQdAojXNQwQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaaR9IcEwOgyIeUey1iprtGseZTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjU1YTczOWYtMzcyYy0z MjVlLTg4N2ItMmYwMDZjZDEyYzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItjmGKQfi2SWuneBIYaDjv6pjNHBxjUhziqJ90e9+3Wn1u80bTMM/Yy y8QgYmRUFvSC//2/Xxyj9p5BXZTfowgorozT4V7qqwTpP8H6cS7lcn7/OH2O+FAc RagA80TbKq8KHemynLpPM2knaOZq6CyzKdsBUFvA80AJc5xpKcsolQcmBB+sZp2J esOw9yKjcK2GdiM5ttawdWj1zznw+h5Zw0Rsb3IbgZ5xw4YdMssrc9+snO6PXlVu SQ7NfJUXtwztiEjcsnB9VXfW+qHVxikMCq4Y9C2Gg5rKNEcrqW4Uae59iFs8kqbB 47os7A7j4dQYub/v6RqmIE1GSvDSBrY= -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:27 2025 by rpki-client