$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa File: 0fa828e8-585f-340f-8479-3265c9e2008a.roa (raw, json) Hash identifier: uhz+/+cBrFdeQr5n9Bd0SF7WRioy6XwZwArqweElMbo= Subject key identifier: 27:73:4A:B5:A5:BF:CA:B9:22:E4:A4:67:82:76:4D:02:B4:A3:36:F0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E5361D1BB927F50F787300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 130.174.62.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:36:1d:1b:b9:27:f5:0f:78:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=8417906f-4e7b-4cbb-a1ff-707c4b079e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:da:62:77:40:c7:6a:90:4c:77:0f:5c:f8:9f: b0:ed:7a:99:e0:39:08:d8:cc:41:b2:02:c9:56:44: 0e:9b:07:6f:9a:90:ed:7b:57:83:61:6e:90:15:54: 74:70:19:91:17:5f:46:e8:59:f8:e6:23:34:af:90: 10:cc:4d:51:6b:34:3c:7e:79:ba:59:13:80:19:ba: 86:0f:4e:85:7e:b1:9c:56:27:b1:bc:d3:d3:05:aa: 9f:bf:2a:4b:70:07:01:0a:ae:6f:45:e4:45:06:b3: c8:b6:9e:c7:6b:98:4b:bb:6d:18:f7:8f:f4:e7:10: 90:29:31:23:92:14:07:dc:7b:8c:a3:6a:b4:9a:52: 51:ff:40:0b:c4:d8:26:78:15:47:ce:df:e9:bc:45: 69:35:5b:71:d2:44:3e:d5:b2:af:17:a9:d8:5f:46: 08:bd:64:da:4e:6e:fc:b6:7b:d2:21:4e:45:60:60: 14:84:a9:9d:01:00:d5:1c:17:fe:65:1c:d2:7e:1a: 1a:5d:fd:50:68:eb:2c:3c:55:0c:62:69:4b:17:6c: c4:d1:0b:cf:d5:03:03:3b:2e:79:45:ab:9a:7f:ec: d6:e9:67:44:8d:dc:16:f5:db:2c:88:6c:f4:e3:39: 39:57:6b:f3:34:d9:e3:a4:dd:32:17:51:bb:cc:8e: 33:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:73:4A:B5:A5:BF:CA:B9:22:E4:A4:67:82:76:4D:02:B4:A3:36:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fa828e8-585f-340f-8479-3265c9e2008a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.62.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:84:8d:de:06:06:0d:c2:88:22:38:5d:14:03:25:d7:12:fb: 27:48:7a:1b:37:d4:e6:65:43:1a:3d:74:b4:ed:22:4b:7a:41: c6:fa:8b:f9:06:aa:a1:ef:88:89:32:04:40:03:14:e8:32:8b: cc:cf:ef:7b:1b:27:e9:ac:99:1d:c4:ee:f2:f8:36:78:00:e1: f9:f7:58:73:c1:ab:96:91:3c:c0:c1:45:00:a2:20:4e:0b:b9: 93:08:29:b9:57:1d:1a:7b:59:e3:b3:72:72:95:6d:70:30:7d: e1:76:af:ae:c3:de:b4:32:e2:53:b7:79:32:6d:05:b2:3e:0d: 64:e2:0b:21:31:38:ad:90:00:ad:00:09:07:04:a3:9a:34:ce: fd:ae:61:23:0c:91:62:ef:7b:b3:39:65:04:f2:30:89:72:a7: ee:91:d5:76:d0:cf:bb:5f:94:c9:a0:1c:bb:78:e0:b0:ca:70: 04:cc:ef:39:04:2a:76:b5:51:30:8f:0b:f0:da:bb:32:04:a4: 9c:91:0d:0b:ed:86:6e:6f:7e:0d:50:3d:2f:30:7d:4b:ba:75: 2b:0d:dd:5a:00:af:04:3f:f2:49:0e:45:3c:ed:95:b6:30:65: d6:14:d5:63:d2:9b:e3:51:ff:3d:2a:35:bd:72:b5:92:75:d2: 74:4f:bb:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TYdG7kn9Q94cwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ODQxNzkwNmYtNGU3Yi00Y2JiLWExZmYtNzA3YzRiMDc5ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdpid0DHapBMdw9c+J+w7XqZ4DkI2MxBsgLJ VkQOmwdvmpDte1eDYW6QFVR0cBmRF19G6Fn45iM0r5AQzE1RazQ8fnm6WROAGbqG D06FfrGcViexvNPTBaqfvypLcAcBCq5vReRFBrPItp7Ha5hLu20Y94/05xCQKTEj khQH3HuMo2q0mlJR/0ALxNgmeBVHzt/pvEVpNVtx0kQ+1bKvF6nYX0YIvWTaTm78 tnvSIU5FYGAUhKmdAQDVHBf+ZRzSfhoaXf1QaOssPFUMYmlLF2zE0QvP1QMDOy55 Rauaf+zW6WdEjdwW9dssiGz04zk5V2vzNNnjpN0yF1G7zI4z3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdzSrWlv8q5IuSkZ4J2TQK0ozbwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGZhODI4ZTgtNTg1Zi0z NDBmLTg0NzktMzI2NWM5ZTIwMDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2Ejd4GBg3CiCI4XRQDJdcS+ydIehs31OZlQxo9dLTtIkt6Qcb6i/kG qqHviIkyBEADFOgyi8zP73sbJ+msmR3E7vL4NngA4fn3WHPBq5aRPMDBRQCiIE4L uZMIKblXHRp7WeOzcnKVbXAwfeF2r67D3rQy4lO3eTJtBbI+DWTiCyExOK2QAK0A CQcEo5o0zv2uYSMMkWLve7M5ZQTyMIlyp+6R1XbQz7tflMmgHLt44LDKcATM7zkE Kna1UTCPC/DauzIEpJyRDQvthm5vfg1QPS8wfUu6dSsN3VoArwQ/8kkORTztlbYw ZdYU1WPSm+NR/z0qNb1ytZJ10nRPu4o= -----END CERTIFICATE-----Generated at Tue Jul 1 16:51:19 2025 by rpki-client