$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa File: 3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa (raw, json) Hash identifier: RZZjzYg1Z6jXK0ikEuj5FjkEoPW9UMzKd1AUF9TKv0Y= Subject key identifier: 48:CD:F3:45:01:90:D8:D2:C3:F9:74:8E:4A:B3:00:F2:B3:F3:3C:BD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FCA90BAB6F0C5EEDA4000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3360 IP address blocks: 130.174.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:ca:90:ba:b6:f0:c5:ee:da:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=207798ae-80d6-42e4-81ec-4c49cf50d5da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:0b:1d:c7:86:bb:7c:f1:34:62:21:0d:e0: c0:b5:9c:15:10:8c:3c:f2:9f:7c:3c:1a:f5:90:02: 17:b3:98:f0:aa:c2:df:1c:b2:ba:49:b3:b8:c2:8d: ec:dd:d4:81:a1:ce:3d:f9:6b:67:d9:07:15:f0:04: e7:99:e1:13:48:48:64:7f:a3:f9:96:72:ac:53:e6: 77:cd:8a:58:0b:15:8a:05:2f:ad:5d:04:d1:82:97: 83:1f:f7:2a:b0:ac:ad:8a:4e:a0:ff:b6:90:e4:98: 9b:f1:f2:c7:e1:12:92:ed:38:90:87:fe:a3:d1:f2: ff:d3:5d:20:f5:1c:de:93:76:a6:b9:2f:d3:b6:83: 01:63:29:bc:5e:cf:80:7a:95:d7:ff:6b:15:5f:12: ba:89:6c:ae:db:14:eb:23:93:bb:b4:b4:92:2a:8c: b5:93:10:f3:f7:b1:60:a9:5a:8c:4e:af:14:15:99: ea:f3:a1:9a:66:d8:27:d7:fc:d4:7e:7a:1c:a0:9a: c8:f5:1a:75:36:c6:d3:f7:cb:26:a6:40:b3:5c:96: 28:d3:e6:2e:a9:10:d3:5c:ab:e0:90:29:b9:45:34: 57:e9:9c:4d:fe:14:c6:00:82:18:61:d1:6b:1b:1f: 23:b0:65:54:77:c4:82:36:85:2c:79:6b:1e:76:0b: 2c:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:CD:F3:45:01:90:D8:D2:C3:F9:74:8E:4A:B3:00:F2:B3:F3:3C:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e0ac1b7-1898-3bf5-9987-3a9a1cfcd455.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:ad:be:61:4a:c5:ca:9e:39:95:1e:fb:ae:81:52:19:d5: d9:21:a2:af:ef:a2:41:16:87:0c:f9:a2:bc:78:47:61:bc:db: b0:e0:56:ca:0a:57:c6:41:72:a4:9e:f0:2a:1c:92:2e:f1:b1: fe:c5:17:cb:21:b6:cc:f7:46:5a:77:e4:37:db:cb:b0:ff:e3: ab:a7:98:8f:11:a0:2e:c7:d3:e3:16:94:2d:a8:eb:77:32:f4: 19:1c:39:da:1d:54:67:99:96:23:17:13:60:d8:f8:77:29:95: 57:dd:6e:35:a4:c8:1e:a6:61:d3:40:06:b3:51:b3:a4:5d:22: b3:01:05:dd:c8:e7:df:fa:93:30:66:cc:1f:73:5a:ce:c8:c8: 9b:87:f0:3f:40:ad:f9:11:1b:48:37:2d:01:2a:fd:6a:18:4e: 12:a4:e7:50:42:6e:f5:89:b6:58:86:82:6f:2b:05:47:d6:5f: 49:52:c4:f4:a2:eb:46:3a:3a:34:5b:d0:27:ba:4f:a0:ae:1b: 2e:45:0f:85:89:7e:f9:c0:25:be:8a:e9:f7:21:b9:d1:11:8b: 4d:6f:80:50:6e:10:15:48:19:9a:5d:e2:fa:56:37:31:be:ee: 81:af:18:79:05:f9:c8:a7:5e:7a:2f:a4:8b:a0:de:94:a0:37: 49:3c:08:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8qQurbwxe7aQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk MjA3Nzk4YWUtODBkNi00MmU0LTgxZWMtNGM0OWNmNTBkNWRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xILHceGu3zxNGIhDeDAtZwVEIw88p98PBr1 kAIXs5jwqsLfHLK6SbO4wo3s3dSBoc49+Wtn2QcV8ATnmeETSEhkf6P5lnKsU+Z3 zYpYCxWKBS+tXQTRgpeDH/cqsKytik6g/7aQ5Jib8fLH4RKS7TiQh/6j0fL/010g 9Rzek3amuS/TtoMBYym8Xs+AepXX/2sVXxK6iWyu2xTrI5O7tLSSKoy1kxDz97Fg qVqMTq8UFZnq86GaZtgn1/zUfnocoJrI9Rp1NsbT98smpkCzXJYo0+YuqRDTXKvg kCm5RTRX6ZxN/hTGAIIYYdFrGx8jsGVUd8SCNoUseWsedgssdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEjN80UBkNjSw/l0jkqzAPKz8zy9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2UwYWMxYjctMTg5OC0z YmY1LTk5ODctM2E5YTFjZmNkNDU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8rb5hSsXKnjmVHvuugVIZ1dkhoq/vokEWhwz5orx4R2G827DgVsoK V8ZBcqSe8Cocki7xsf7FF8shtsz3Rlp35Dfby7D/46unmI8RoC7H0+MWlC2o63cy 9BkcOdodVGeZliMXE2DY+HcplVfdbjWkyB6mYdNABrNRs6RdIrMBBd3I59/6kzBm zB9zWs7IyJuH8D9ArfkRG0g3LQEq/WoYThKk51BCbvWJtliGgm8rBUfWX0lSxPSi 60Y6OjRb0Ce6T6CuGy5FD4WJfvnAJb6K6fchudERi01vgFBuEBVIGZpd4vpWNzG+ 7oGvGHkF+cinXnovpIug3pSgN0k8CBE= -----END CERTIFICATE-----Generated at Mon Jun 30 19:46:43 2025 by rpki-client