$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5a2a94-f7bf-36c8-bb16-b95b83ee5659.roa File: 4e5a2a94-f7bf-36c8-bb16-b95b83ee5659.roa (raw, json) Hash identifier: Y3tdzn+A9fXhD3gwdhrcE1QUZ8XVdvCYV+3zD/24QXk= Subject key identifier: 61:93:37:84:E5:CD:03:BC:57:3E:72:8F:9E:3B:78:FF:B2:ED:EF:56 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E546A295A4C62C8B8E8880 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5a2a94-f7bf-36c8-bb16-b95b83ee5659.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 130.174.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:46:a2:95:a4:c6:2c:8b:8e:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=4aac9b96-9701-42ca-a6ac-c00c301dc64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:86:f2:b7:93:2e:58:83:ce:26:bd:f7:00: 9b:13:08:b4:38:6d:df:63:03:59:5d:e2:11:ef:7d: 5b:11:2f:0c:35:67:95:f8:e1:22:90:8c:30:40:03: ca:6d:72:94:67:5a:c2:56:f7:f9:cf:22:17:0d:d5: 2f:6c:1e:55:ca:13:4c:3a:ad:d0:fe:f9:a5:c9:42: ef:bf:d0:bb:05:eb:e2:34:41:7a:f0:57:71:52:d2: a8:1b:08:3f:54:f4:06:71:1d:36:74:e0:f3:8f:1e: 39:f2:a7:6b:a9:a7:2d:f2:2a:60:61:7c:c4:6d:86: 92:02:95:89:4a:9e:55:82:37:60:73:e1:4a:a4:04: 70:47:39:4f:b6:92:00:7b:0d:4c:f8:45:c6:5b:6b: cf:f3:f3:fb:ce:fa:8d:94:a8:e7:cc:22:af:10:cd: 0d:bb:04:12:5a:63:e3:67:26:f0:f4:b2:64:9b:d3: dc:b9:fa:13:a2:41:d2:26:3c:e3:f9:8c:f7:c3:a8: 0c:35:ae:14:3a:7d:7e:53:bf:e0:b3:16:35:f9:9a: 39:c5:1d:26:7e:71:44:54:48:5c:55:9b:02:14:e7: 6e:13:a4:93:24:d1:3a:6f:6a:f7:53:aa:f7:32:67: a5:3d:5e:a4:42:88:a8:2c:9c:4e:ca:e7:71:e8:68: 14:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:93:37:84:E5:CD:03:BC:57:3E:72:8F:9E:3B:78:FF:B2:ED:EF:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5a2a94-f7bf-36c8-bb16-b95b83ee5659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:f6:2a:6f:79:1d:bc:cf:0d:1d:73:8e:3a:db:98:6a:7c:14: 72:0e:ce:98:8e:d7:1a:c5:60:ac:3c:39:fb:19:9d:d8:e1:4f: 1c:78:7e:46:ae:2e:3d:39:11:3f:8d:6a:df:49:e8:a9:b3:fb: ce:7a:e4:4e:7a:1a:2d:c9:34:a8:6a:1c:3b:bc:3a:15:56:d2: 29:46:32:0b:ea:53:c9:58:03:6f:4a:7d:02:ce:5d:07:bb:d5: ba:5d:9c:43:c4:86:db:e5:c2:98:3d:ab:28:6b:3a:e9:d8:80: 57:7a:50:f7:26:a0:90:6b:4a:df:2b:b4:8d:ed:8d:4f:0f:46: 1d:b2:b1:5d:22:d3:24:7f:70:0a:8f:75:0e:6a:03:66:f2:98: 7d:88:45:dc:e8:72:bb:21:5a:7f:78:60:79:7d:21:db:08:89: 53:10:60:9e:3c:08:f7:9c:68:98:51:40:aa:4f:26:80:db:6c: a6:4c:a3:1b:7a:c7:c0:71:d1:65:59:34:23:e3:02:80:37:0b: 8a:50:7b:79:34:5b:4b:b2:51:63:9c:75:01:11:9e:84:ac:c8: 43:4f:cb:8f:32:64:18:05:33:9b:24:e0:4d:ca:5c:af:52:ef: 6e:20:a6:9e:6c:14:3b:7f:f9:00:91:b2:95:5c:00:74:69:74: 9a:ee:fc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5UailaTGLIuOiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NGFhYzliOTYtOTcwMS00MmNhLWE2YWMtYzAwYzMwMWRjNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohGG8reTLliDzia99wCbEwi0OG3fYwNZXeIR 731bES8MNWeV+OEikIwwQAPKbXKUZ1rCVvf5zyIXDdUvbB5VyhNMOq3Q/vmlyULv v9C7BeviNEF68FdxUtKoGwg/VPQGcR02dODzjx458qdrqact8ipgYXzEbYaSApWJ Sp5Vgjdgc+FKpARwRzlPtpIAew1M+EXGW2vP8/P7zvqNlKjnzCKvEM0NuwQSWmPj Zybw9LJkm9PcufoTokHSJjzj+Yz3w6gMNa4UOn1+U7/gsxY1+Zo5xR0mfnFEVEhc VZsCFOduE6STJNE6b2r3U6r3MmelPV6kQoioLJxOyudx6GgUnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGTN4TlzQO8Vz5yj547eP+y7e9WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGU1YTJhOTQtZjdiZi0z NmM4LWJiMTYtYjk1YjgzZWU1NjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGj2Km95HbzPDR1zjjrbmGp8FHIOzpiO1xrFYKw8OfsZndjhTxx4fkau Lj05ET+Nat9J6Kmz+8565E56Gi3JNKhqHDu8OhVW0ilGMgvqU8lYA29KfQLOXQe7 1bpdnEPEhtvlwpg9qyhrOunYgFd6UPcmoJBrSt8rtI3tjU8PRh2ysV0i0yR/cAqP dQ5qA2bymH2IRdzocrshWn94YHl9IdsIiVMQYJ48CPecaJhRQKpPJoDbbKZMoxt6 x8Bx0WVZNCPjAoA3C4pQe3k0W0uyUWOcdQERnoSsyENPy48yZBgFM5sk4E3KXK9S 724gpp5sFDt/+QCRspVcAHRpdJru/G4= -----END CERTIFICATE-----Generated at Tue Jul 1 08:59:51 2025 by rpki-client