$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa File: ced0a47e-4508-3b79-9eeb-e55f9546464a.roa (raw, json) Hash identifier: Bz1P0S0m/zhSxok8OM+WxulMjtmZxUwKyMok9sU+o8Q= Subject key identifier: 21:37:F2:FB:5F:59:6E:08:95:F3:8A:42:A0:F5:4B:C0:C9:50:42:00 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E537B42E2B1D9119A24460 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 130.174.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:37:b4:2e:2b:1d:91:19:a2:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=9f8e2242-a816-4bc8-a937-32b1fb62e1ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:72:90:62:ab:d5:00:2c:f8:50:ac:ee:99:09: 4a:64:ea:a5:d6:9e:89:d7:7a:12:98:f5:26:98:21: cf:84:a6:3c:a8:48:2a:29:0e:d1:b2:05:55:cc:37: 2c:8a:06:d7:d4:2c:5a:67:27:4a:3a:3a:22:74:b4: 1a:b7:2c:7d:55:80:ec:90:ad:46:a5:e6:0b:e7:d5: 8e:af:f6:58:73:f2:57:4d:21:7e:7a:68:9b:7b:9d: 05:5e:eb:94:8f:0f:08:dd:98:9a:e5:3a:dc:52:e5: b5:e9:ff:18:e1:f5:5f:17:74:e0:69:9e:ca:88:04: cf:db:52:d6:12:1c:74:33:e6:25:10:3d:4f:68:e2: c8:f4:28:3f:5b:cb:a1:a2:da:fc:c4:8e:c9:a8:b3: 2f:9d:f1:a5:d9:26:c2:4b:1e:f4:89:47:5c:a7:72: bc:4d:44:a3:71:fe:fe:bd:88:3d:ac:50:2d:4d:aa: d6:a5:64:0e:68:1b:1b:44:f9:8a:b5:95:04:31:9b: 18:06:25:07:3c:cf:23:26:6e:b1:cc:76:06:9b:86: 4d:d7:40:db:e9:88:03:12:3e:a5:3f:cd:b7:cf:88: 1d:94:9e:8c:38:35:da:a0:cf:b2:be:30:7d:a1:83: fa:1c:05:57:28:61:39:85:50:43:cc:4a:ab:ab:9e: 2e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:37:F2:FB:5F:59:6E:08:95:F3:8A:42:A0:F5:4B:C0:C9:50:42:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ced0a47e-4508-3b79-9eeb-e55f9546464a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5d:93:04:7c:1e:b9:a3:00:7b:21:a3:de:e5:34:d1:9d:61: f3:86:d5:0f:eb:37:06:04:fb:35:d7:c3:b7:fc:1f:2e:f3:1c: 27:cf:a5:7a:c6:9e:b9:eb:f7:4c:67:2e:43:42:d1:d4:cb:e6: 55:48:5f:77:95:10:6e:3c:58:f9:c0:2b:9f:b0:ac:49:ba:cc: f9:1f:dc:be:fd:f9:43:19:b8:b2:05:b6:9e:2e:39:c1:83:c7: 77:28:05:33:68:e5:72:c1:06:9a:ae:e8:b2:bc:b7:bb:7e:4a: 0a:87:20:c0:78:4a:a1:8a:0e:0b:83:e3:ae:69:f0:c0:c3:17: f0:fa:81:86:74:d9:25:71:82:f0:e0:76:1c:ec:cb:13:cf:56: 72:cc:98:80:16:78:6d:2e:9b:ec:7e:1c:1f:38:8f:0b:39:9e: de:4e:95:df:d2:08:2f:c4:6f:37:15:33:f1:8d:11:52:16:21: b7:b8:a3:ae:d9:04:b5:1a:d4:9a:93:9e:84:0c:97:d2:7b:1e: 9b:97:65:b5:a8:06:cf:25:16:2b:a7:90:93:ad:24:70:43:34: a4:04:b6:5d:91:f7:98:25:4e:83:2a:4f:cd:8f:de:0b:e1:7f: 15:b1:01:2f:63:6a:5d:23:bf:43:05:08:47:27:d0:45:86:ea: 54:f9:88:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5Te0LisdkRmiRGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk OWY4ZTIyNDItYTgxNi00YmM4LWE5MzctMzJiMWZiNjJlMWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHKQYqvVACz4UKzumQlKZOql1p6J13oSmPUm mCHPhKY8qEgqKQ7RsgVVzDcsigbX1CxaZydKOjoidLQatyx9VYDskK1GpeYL59WO r/ZYc/JXTSF+emibe50FXuuUjw8I3Zia5TrcUuW16f8Y4fVfF3TgaZ7KiATP21LW Ehx0M+YlED1PaOLI9Cg/W8uhotr8xI7JqLMvnfGl2SbCSx70iUdcp3K8TUSjcf7+ vYg9rFAtTarWpWQOaBsbRPmKtZUEMZsYBiUHPM8jJm6xzHYGm4ZN10Db6YgDEj6l P823z4gdlJ6MODXaoM+yvjB9oYP6HAVXKGE5hVBDzEqrq54uhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCE38vtfWW4IlfOKQqD1S8DJUEIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2VkMGE0N2UtNDUwOC0z Yjc5LTllZWItZTU1Zjk1NDY0NjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNdkwR8HrmjAHsho97lNNGdYfOG1Q/rNwYE+zXXw7f8Hy7zHCfPpXrG nrnr90xnLkNC0dTL5lVIX3eVEG48WPnAK5+wrEm6zPkf3L79+UMZuLIFtp4uOcGD x3coBTNo5XLBBpqu6LK8t7t+SgqHIMB4SqGKDguD465p8MDDF/D6gYZ02SVxgvDg dhzsyxPPVnLMmIAWeG0um+x+HB84jws5nt5Old/SCC/EbzcVM/GNEVIWIbe4o67Z BLUa1JqTnoQMl9J7HpuXZbWoBs8lFiunkJOtJHBDNKQEtl2R95glToMqT82P3gvh fxWxAS9jal0jv0MFCEcn0EWG6lT5iBs= -----END CERTIFICATE-----Generated at Sun Jun 15 16:05:07 2025 by rpki-client