$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f090-1c79-3ea9-b0bd-e7a34797ace7.roa File: ca49f090-1c79-3ea9-b0bd-e7a34797ace7.roa (raw, json) Hash identifier: fa0uriDUN993Yhst07faMXZp872ZkrG+gQV0sMhADmE= Subject key identifier: 10:E5:85:7E:D3:D9:AC:97:EB:1C:83:7C:7F:31:A0:8C:E5:03:91:BF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849EA67CDB51FDDEA5A6EF19A80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f090-1c79-3ea9-b0bd-e7a34797ace7.roa Signing time: Tue 20 May 2025 12:02:08 +0000 ROA not before: Tue 20 May 2025 12:02:08 +0000 ROA not after: Mon 18 Aug 2025 12:02:08 +0000 asID: 3360 IP address blocks: 130.174.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ea:67:cd:b5:1f:dd:ea:5a:6e:f1:9a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 20 12:02:08 2025 GMT Not After : Aug 18 12:02:08 2025 GMT Subject: CN=86f54e52-c414-4306-b27b-9aa66446fa26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c8:bd:fe:f7:9c:a9:ad:6f:0c:0c:49:3d:dd: 3d:04:41:82:5a:0b:8f:89:3d:0e:eb:2d:2e:5d:6c: 67:00:7e:e8:c5:c9:ed:a1:9c:f5:dc:2b:67:b2:c7: b4:ac:68:19:62:db:b0:68:de:a1:12:1f:4f:db:0b: 95:09:03:c9:b6:a1:75:09:72:e5:fc:8f:d7:59:9b: 91:d8:0a:a6:7f:41:4d:0c:5e:41:0a:72:e8:c2:0d: 3c:ae:9b:63:49:47:e2:dc:80:86:43:65:39:f5:33: c0:a4:d6:54:ed:9b:a5:fc:89:b1:97:ff:03:12:c4: ac:b7:48:62:d6:fc:41:ed:e2:ee:76:a3:2a:43:c7: 66:67:66:15:71:59:7f:fd:6e:73:76:28:ea:b5:52: 5f:8e:3c:d3:ca:ca:fd:b0:2d:71:8e:ab:a9:8c:03: 6b:cb:e1:9e:28:5b:0e:b5:cb:0e:c2:72:22:49:55: 13:37:6f:89:37:3f:6a:68:c0:81:ab:0a:1a:e4:ea: 53:56:ed:e9:e6:1d:13:2b:b9:1f:ca:e4:5b:5d:d3: a2:2c:2a:3f:82:92:ec:c6:fb:4a:2e:3d:42:7a:ad: e7:e1:96:57:a1:3c:fe:c6:e1:a1:82:46:d4:52:60: 88:f3:21:b1:25:ca:07:98:b0:ef:32:37:4b:0b:b2: ff:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:85:7E:D3:D9:AC:97:EB:1C:83:7C:7F:31:A0:8C:E5:03:91:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ca49f090-1c79-3ea9-b0bd-e7a34797ace7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 130.174.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:01:76:38:57:3a:c4:06:0c:99:84:fc:28:cd:33:67:48:18: f0:f5:ad:cb:5e:9d:0d:ed:97:b2:e7:e0:e4:20:e7:7f:f2:cf: 0a:34:e8:5c:69:91:19:f8:60:bd:4c:cd:dd:36:77:8f:35:a6: a4:1d:77:ca:76:bb:63:04:6a:66:4e:6f:66:ab:ea:ff:cc:ab: cb:69:0d:01:bf:86:2a:19:a1:e2:9c:11:d5:cc:5b:b1:9e:89: c0:55:dc:13:73:29:64:2e:bb:e0:3b:80:e6:0d:96:fa:4d:ca: 77:ae:8a:1d:44:5d:0b:a8:60:de:68:4b:8a:d9:7f:fe:77:c2: ae:de:79:d4:34:8e:3d:ef:b9:76:73:ca:7b:c5:94:e4:f9:cf: 6a:7e:bd:41:43:57:ba:93:7d:0d:85:1f:7f:a2:e4:61:80:a2: 03:19:6f:fe:89:80:ec:a5:13:cb:7a:1e:32:c8:37:32:ce:d3: 86:51:d2:8b:0f:2c:47:a6:bc:e3:b2:74:c6:9b:f5:74:0a:d3: 19:1d:8b:23:b5:de:14:a1:ae:6f:cf:ed:90:52:0b:67:d6:66: 21:98:42:0f:36:de:89:c5:39:d8:a3:0e:61:4f:03:da:b0:0b: fd:e0:1b:86:dd:d1:f3:da:8f:0c:17:bc:a7:99:51:6d:9a:50: 5c:c8:21:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqZ821H93qWm7xmoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMDEyMDIwOFoXDTI1MDgxODEyMDIwOFowLzEtMCsGA1UEAxMk ODZmNTRlNTItYzQxNC00MzA2LWIyN2ItOWFhNjY0NDZmYTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvci9/vecqa1vDAxJPd09BEGCWguPiT0O6y0u XWxnAH7oxcntoZz13Ctnsse0rGgZYtuwaN6hEh9P2wuVCQPJtqF1CXLl/I/XWZuR 2Aqmf0FNDF5BCnLowg08rptjSUfi3ICGQ2U59TPApNZU7Zul/Imxl/8DEsSst0hi 1vxB7eLudqMqQ8dmZ2YVcVl//W5zdijqtVJfjjzTysr9sC1xjqupjANry+GeKFsO tcsOwnIiSVUTN2+JNz9qaMCBqwoa5OpTVu3p5h0TK7kfyuRbXdOiLCo/gpLsxvtK Lj1Ceq3n4ZZXoTz+xuGhgkbUUmCI8yGxJcoHmLDvMjdLC7L/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDlhX7T2ayX6xyDfH8xoIzlA5G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2E0OWYwOTAtMWM3OS0z ZWE5LWIwYmQtZTdhMzQ3OTdhY2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgq6FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQBdjhXOsQGDJmE/CjNM2dIGPD1rctenQ3tl7Ln4OQg53/yzwo06Fxp kRn4YL1Mzd02d481pqQdd8p2u2MEamZOb2ar6v/Mq8tpDQG/hioZoeKcEdXMW7Ge icBV3BNzKWQuu+A7gOYNlvpNyneuih1EXQuoYN5oS4rZf/53wq7eedQ0jj3vuXZz ynvFlOT5z2p+vUFDV7qTfQ2FH3+i5GGAogMZb/6JgOylE8t6HjLINzLO04ZR0osP LEemvOOydMab9XQK0xkdiyO13hShrm/P7ZBSC2fWZiGYQg823onFOdijDmFPA9qw C/3gG4bd0fPajwwXvKeZUW2aUFzIIS0= -----END CERTIFICATE-----Generated at Mon Jun 30 22:52:04 2025 by rpki-client