$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa File: 4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa (raw, json) Hash identifier: 2d/vQZPJzHCwuBlDKtvOvkwECAbrKugg3sScbTFT3TY= Subject key identifier: 43:C1:7C:32:57:FB:7F:C9:C4:95:2C:19:A0:10:C1:E1:6B:70:7F:2B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E539A29E5E7BED7730D780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 3360 IP address blocks: 130.174.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:39:a2:9e:5e:7b:ed:77:30:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=d0699ba7-7cd4-4131-913e-5d88051c8578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:72:c4:ee:29:df:04:28:48:2c:01:07:f4: 15:51:7c:06:30:8a:4b:0a:67:db:4b:a9:20:85:31: f1:44:b4:28:01:bf:b3:9a:c6:74:6d:39:3e:55:f4: 21:2e:fe:6c:89:5a:fc:57:9f:a5:ee:7b:a6:71:e1: 5d:74:31:a7:ff:54:22:df:9a:5b:5d:96:1c:57:d5: 6e:25:8a:91:7e:4e:7a:99:fa:46:f8:35:ec:4d:fa: 8d:09:5a:ef:64:f0:a2:54:4d:f4:7d:c3:e5:68:bb: 08:a5:1e:80:16:92:ce:fa:59:ff:c8:51:23:80:94: 99:83:fa:17:bb:2b:55:bb:5d:02:8e:ac:c4:da:f3: 18:43:a1:e7:73:45:fc:d7:29:dd:16:b1:5f:84:b1: 05:4b:68:dd:96:d0:69:9d:e1:03:f3:86:53:1b:2a: b0:cc:ca:c4:f6:f5:cf:81:23:f0:6d:b0:0e:3b:e2: 4e:5f:0d:63:93:b1:06:63:99:66:f0:83:02:97:86: 8b:7e:d1:94:42:31:48:2a:88:69:60:e1:18:36:0c: 1d:f4:fe:18:b9:bd:95:cd:db:ca:b0:73:a7:fd:cd: 06:82:dd:4d:a8:9d:9b:e6:e2:d0:e3:95:d0:f0:30: d9:5c:5f:06:c0:e1:50:d8:25:49:ba:ce:96:5a:f5: 9b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:C1:7C:32:57:FB:7F:C9:C4:95:2C:19:A0:10:C1:E1:6B:70:7F:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4b1ddedf-1c7f-375e-be65-a1293f29f2df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.103.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:3a:c5:86:48:0f:41:6d:a5:53:aa:f8:6b:65:e0:b0:5f:d3: 7e:26:44:30:c1:b3:c2:37:5c:f6:8a:5c:d4:ab:89:ac:40:9d: 2d:0f:28:3d:6b:4e:1d:36:8e:bb:c4:ee:d3:c2:a7:b6:6b:84: 97:00:07:1a:65:23:3a:b8:a1:85:ee:2b:aa:f7:76:86:dc:e2: bb:6d:78:cd:c4:2d:4d:a2:06:97:9c:a2:71:bf:bf:37:b2:34: af:0a:1b:4b:45:23:74:f2:5b:57:b8:b1:b0:9e:93:d8:8d:a9: 82:75:2d:cf:cf:aa:70:ce:38:89:b6:18:a9:70:2c:3d:b7:e8: 23:4f:77:a9:e2:3f:7a:c1:27:1a:33:90:d5:95:25:05:d0:f5: 15:74:ba:0f:65:8c:62:73:10:fd:dc:60:86:c3:f3:a5:95:b5: 55:ee:77:8b:79:09:88:f6:34:7c:c2:df:15:2d:6b:49:be:4c: 97:5f:77:ea:3f:5e:81:be:ab:2e:69:9f:fd:9e:e5:79:3e:8d: 85:3a:c2:68:f4:08:0c:15:36:6b:95:12:84:18:0d:ec:17:97: c7:92:ec:8e:c0:25:db:0d:5f:57:d8:03:3e:50:b0:d8:62:60: 93:93:6b:dd:cb:37:fe:38:4e:0c:68:2c:f8:18:30:23:84:09: 53:ae:26:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5Tminl577Xcw14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk ZDA2OTliYTctN2NkNC00MTMxLTkxM2UtNWQ4ODA1MWM4NTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvZyxO4p3wQoSCwBB/QVUXwGMIpLCmfbS6kg hTHxRLQoAb+zmsZ0bTk+VfQhLv5siVr8V5+l7numceFddDGn/1Qi35pbXZYcV9Vu JYqRfk56mfpG+DXsTfqNCVrvZPCiVE30fcPlaLsIpR6AFpLO+ln/yFEjgJSZg/oX uytVu10CjqzE2vMYQ6Hnc0X81yndFrFfhLEFS2jdltBpneED84ZTGyqwzMrE9vXP gSPwbbAOO+JOXw1jk7EGY5lm8IMCl4aLftGUQjFIKohpYOEYNgwd9P4Yub2VzdvK sHOn/c0Ggt1NqJ2b5uLQ45XQ8DDZXF8GwOFQ2CVJus6WWvWbvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPBfDJX+3/JxJUsGaAQweFrcH8rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGIxZGRlZGYtMWM3Zi0z NzVlLWJlNjUtYTEyOTNmMjlmMmRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH46xYZID0FtpVOq+Gtl4LBf034mRDDBs8I3XPaKXNSriaxAnS0PKD1r Th02jrvE7tPCp7ZrhJcABxplIzq4oYXuK6r3dobc4rtteM3ELU2iBpeconG/vzey NK8KG0tFI3TyW1e4sbCek9iNqYJ1Lc/PqnDOOIm2GKlwLD236CNPd6niP3rBJxoz kNWVJQXQ9RV0ug9ljGJzEP3cYIbD86WVtVXud4t5CYj2NHzC3xUta0m+TJdfd+o/ XoG+qy5pn/2e5Xk+jYU6wmj0CAwVNmuVEoQYDewXl8eS7I7AJdsNX1fYAz5QsNhi YJOTa93LN/44TgxoLPgYMCOECVOuJgQ= -----END CERTIFICATE-----Generated at Tue Jul 1 02:38:48 2025 by rpki-client