$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa File: 98a28125-0165-31f7-a265-0615bd186c6e.roa (raw, json) Hash identifier: GeK3RTI1VS4qVojBd2O6gXELsGPp54kCWoUo3mhG2fA= Subject key identifier: E6:77:51:9F:37:B3:03:71:77:F8:8B:C8:1C:13:9A:A0:06:FF:51:C4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F17FCDB30DB23B38B243EE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 3356 IP address blocks: 130.174.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:cd:b3:0d:b2:3b:38:b2:43:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=501f60fc-2fe9-4946-a762-a90fe6c6720e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:29:b5:37:50:9b:31:cf:c0:e3:ce:6a:de:d0: 3e:b3:4e:6c:86:b3:38:23:f5:c2:d0:52:c2:3e:87: c8:84:d5:d1:cf:de:61:b7:88:7b:26:5f:c1:a5:cc: da:a2:0b:be:b6:57:4b:64:7d:c2:c5:a4:a1:9c:19: ad:64:9a:25:3b:18:2f:77:7b:99:15:fc:11:31:e3: 40:c7:07:89:fe:d6:bd:7f:e3:66:ab:3d:b5:a4:11: 49:ff:53:20:c9:de:ab:75:c7:28:8e:60:8a:9e:f8: 08:35:50:98:42:53:6e:f6:5b:9b:a2:ef:75:ea:7d: bc:e6:58:97:9d:ca:87:1d:76:26:f0:43:b7:47:77: 1b:52:eb:55:77:d0:81:89:54:e1:a5:2f:87:42:0b: c6:42:e2:ea:20:34:51:26:58:2f:d7:02:8c:fb:9f: 67:73:db:ef:47:5c:ff:7d:0e:a4:02:6f:a4:33:88: 2d:ad:53:f3:f9:98:f3:a4:ce:b8:66:f6:a4:b9:d0: 0f:ac:f6:c8:9e:04:72:0a:b7:de:71:a8:d6:d5:55: 45:dd:14:1b:64:03:fe:6c:36:6a:4b:46:f1:57:52: 97:29:64:71:fe:0c:7b:00:16:39:8e:86:4d:fb:e7: 63:8f:11:c9:63:65:48:77:8f:d9:c5:43:60:fd:e3: 4e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:77:51:9F:37:B3:03:71:77:F8:8B:C8:1C:13:9A:A0:06:FF:51:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/98a28125-0165-31f7-a265-0615bd186c6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:4e:6f:39:5a:85:0f:58:8f:03:f6:50:1a:77:83:30:81:f2: fa:37:d5:0a:14:74:d6:0d:70:61:ee:ac:1b:ca:75:cf:c6:00: 3a:7e:55:db:db:18:ee:86:03:92:d2:78:6d:1c:c3:6a:65:37: 28:d7:66:1d:2b:10:23:3f:b8:1e:1b:bf:67:25:e6:bb:41:00: 96:6b:c2:41:51:9d:fb:25:cd:e1:e9:f4:05:48:ee:05:d3:84: b1:66:6c:84:d7:fa:08:3f:6c:80:c3:16:12:5a:4a:6d:38:90: 2e:59:0e:9b:6d:e0:2a:ea:13:75:f2:87:58:5e:41:33:81:ba: 8e:3e:0d:6b:4a:9a:80:5f:6b:50:88:01:8e:80:15:7a:0b:36: b0:2b:95:20:db:e2:05:bd:4b:2f:ff:31:cb:0e:06:58:22:c1: f1:18:fd:88:48:9a:c6:15:22:c5:95:0d:ac:6c:91:32:27:f7: 60:2d:2f:ba:11:ac:f5:6a:a1:86:40:c8:9c:fe:fb:8c:0e:df: 75:79:9a:d5:0f:70:9d:b1:5d:66:a0:40:1d:40:18:59:da:a5: de:a6:31:e0:7f:85:b8:a8:96:77:9b:e2:e4:02:91:68:44:a7: 55:18:95:d9:ea:e7:63:6a:d7:f1:39:b4:7e:09:7b:69:21:d6: e7:45:52:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf82zDbI7OLJD7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NTAxZjYwZmMtMmZlOS00OTQ2LWE3NjItYTkwZmU2YzY3MjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCm1N1CbMc/A485q3tA+s05shrM4I/XC0FLC PofIhNXRz95ht4h7Jl/Bpczaogu+tldLZH3CxaShnBmtZJolOxgvd3uZFfwRMeNA xweJ/ta9f+Nmqz21pBFJ/1Mgyd6rdccojmCKnvgINVCYQlNu9lubou916n285liX ncqHHXYm8EO3R3cbUutVd9CBiVThpS+HQgvGQuLqIDRRJlgv1wKM+59nc9vvR1z/ fQ6kAm+kM4gtrVPz+ZjzpM64ZvakudAPrPbIngRyCrfecajW1VVF3RQbZAP+bDZq S0bxV1KXKWRx/gx7ABY5joZN++djjxHJY2VId4/ZxUNg/eNOSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOZ3UZ83swNxd/iLyBwTmqAG/1HEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOThhMjgxMjUtMDE2NS0z MWY3LWEyNjUtMDYxNWJkMTg2YzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq4yMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1ObzlahQ9YjwP2UBp3gzCB8vo31QoUdNYNcGHurBvKdc/GADp+Vdvb GO6GA5LSeG0cw2plNyjXZh0rECM/uB4bv2cl5rtBAJZrwkFRnfslzeHp9AVI7gXT hLFmbITX+gg/bIDDFhJaSm04kC5ZDptt4CrqE3Xyh1heQTOBuo4+DWtKmoBfa1CI AY6AFXoLNrArlSDb4gW9Sy//McsOBlgiwfEY/YhImsYVIsWVDaxskTIn92AtL7oR rPVqoYZAyJz++4wO33V5mtUPcJ2xXWagQB1AGFnapd6mMeB/hbiolneb4uQCkWhE p1UYldnq52Nq1/E5tH4Je2kh1udFUiA= -----END CERTIFICATE-----Generated at Tue Jul 1 15:06:44 2025 by rpki-client