$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa File: a456b193-d802-32ac-b64d-8a5713f1fdf2.roa (raw, json) Hash identifier: NIGAhpNQK3OA+g3p1yK9/UAtq3HC+tCyxHrs0ANemLU= Subject key identifier: E5:66:33:4E:74:2B:DA:08:CA:83:37:5A:EC:EB:0D:0D:27:61:9D:21 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E537E0A481B95B3A3D9660 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 130.174.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:37:e0:a4:81:b9:5b:3a:3d:96:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=68da25da-7734-4a44-90a4-1b14e39761f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:d4:65:25:42:b5:1b:80:0e:2e:50:72:21: 8a:f6:ed:f7:76:f7:ea:50:a2:ef:5d:b9:62:64:27: d3:ca:08:b6:2f:8d:23:2b:23:fe:89:f9:ad:bd:15: 70:45:0b:f6:2e:2c:87:6a:49:e1:83:05:fa:cd:05: b4:3a:2d:02:e1:fd:56:12:51:1b:1f:f9:97:94:74: 39:1d:d9:3f:97:0c:ac:75:df:3a:58:24:f8:ac:0b: 70:3b:66:02:d0:24:97:cb:23:16:9c:e1:d9:5a:dc: 9b:60:f8:87:95:64:c1:f1:f8:4e:f8:48:11:a0:93: c7:91:d8:5a:94:a7:23:b1:8c:b7:7a:37:84:c9:7a: d0:f9:0a:93:8a:a1:0c:dc:78:65:91:39:fa:53:96: 6e:81:cf:00:3b:17:d1:0e:ef:15:52:dd:9a:ae:73: ce:f2:39:d4:48:41:75:a1:3c:4e:7d:82:8c:c7:73: 38:4c:e9:7d:42:a7:92:ee:ba:05:eb:42:f7:c7:9e: c6:64:06:98:4e:5c:d5:05:33:9f:da:7b:7a:f6:82: a1:8f:82:6c:9e:e4:57:96:c6:00:7f:c3:5d:d4:ee: 8d:0d:d8:93:19:62:81:ed:96:45:c7:b8:a3:a1:3e: dc:34:8c:5b:0b:6c:8d:55:2a:0d:fc:9a:61:1b:24: 4c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:66:33:4E:74:2B:DA:08:CA:83:37:5A:EC:EB:0D:0D:27:61:9D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a456b193-d802-32ac-b64d-8a5713f1fdf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:37:4d:ae:2d:5a:1f:fd:f1:2d:3b:f3:1a:b7:0a:00:77:4a: 9d:75:67:d1:35:bf:29:07:71:7a:6c:56:4a:ed:90:c2:34:5f: ee:a5:f3:85:dd:50:ea:d9:bd:a6:b1:9b:65:35:ea:54:f6:c8: 0a:fa:bb:b7:be:97:d7:25:79:44:39:45:4e:f4:98:61:a1:f9: 98:a1:79:e6:6a:e4:ca:a7:91:ec:e5:60:83:9c:36:14:f2:2b: 0a:23:3e:b1:b1:da:0f:f9:08:31:0e:47:98:6e:ba:97:2f:50: da:6c:b1:3c:47:66:58:86:a3:d7:d5:e1:34:75:36:0c:25:92: ab:ef:f4:97:d2:2f:1e:3c:a5:ca:1c:67:ca:18:9c:72:20:f0: 22:6b:60:52:e0:aa:4f:90:fb:62:7c:8a:3b:12:e2:4e:85:d2: e4:a6:cf:5a:ce:65:be:8e:23:c2:00:1d:66:f0:0d:ad:57:ae: bf:ba:87:66:16:7c:64:97:c9:4d:91:d5:b7:13:4f:81:52:ac: c1:d7:ff:46:ad:b8:0f:73:dc:de:aa:a5:87:67:38:36:dc:82: 33:d4:78:6a:b4:b1:a9:0f:4f:f0:1d:f4:b9:d1:b7:87:23:bc: 3e:cf:3c:d8:31:8b:26:4a:09:d7:7d:7a:68:bf:1b:db:d3:74: bd:10:6d:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEny5TfgpIG5Wzo9lmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NjhkYTI1ZGEtNzczNC00YTQ0LTkwYTQtMWIxNGUzOTc2MWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLUZSVCtRuADi5QciGK9u33dvfqUKLvXbli ZCfTygi2L40jKyP+ifmtvRVwRQv2LiyHaknhgwX6zQW0Oi0C4f1WElEbH/mXlHQ5 Hdk/lwysdd86WCT4rAtwO2YC0CSXyyMWnOHZWtybYPiHlWTB8fhO+EgRoJPHkdha lKcjsYy3ejeEyXrQ+QqTiqEM3HhlkTn6U5Zugc8AOxfRDu8VUt2arnPO8jnUSEF1 oTxOfYKMx3M4TOl9QqeS7roF60L3x57GZAaYTlzVBTOf2nt69oKhj4JsnuRXlsYA f8Nd1O6NDdiTGWKB7ZZFx7ijoT7cNIxbC2yNVSoN/JphGyRMSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOVmM050K9oIyoM3WuzrDQ0nYZ0hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTQ1NmIxOTMtZDgwMi0z MmFjLWI2NGQtOGE1NzEzZjFmZGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq5dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAA3Ta4tWh/98S078xq3CgB3Sp11Z9E1vykHcXpsVkrtkMI0X+6l84Xd UOrZvaaxm2U16lT2yAr6u7e+l9cleUQ5RU70mGGh+ZiheeZq5MqnkezlYIOcNhTy KwojPrGx2g/5CDEOR5huupcvUNpssTxHZliGo9fV4TR1Ngwlkqvv9JfSLx48pcoc Z8oYnHIg8CJrYFLgqk+Q+2J8ijsS4k6F0uSmz1rOZb6OI8IAHWbwDa1Xrr+6h2YW fGSXyU2R1bcTT4FSrMHX/0atuA9z3N6qpYdnODbcgjPUeGq0sakPT/Ad9LnRt4cj vD7PPNgxiyZKCdd9emi/G9vTdL0QbUc= -----END CERTIFICATE-----Generated at Mon Jun 30 15:02:42 2025 by rpki-client