$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa File: 2a135386-d97c-3dc6-8e81-a83bebd128a0.roa (raw, json) Hash identifier: DEDB1ogWBS6HRYGDvc3QZ9irMFrEH3ubagS+a7Bz0NU= Subject key identifier: BF:64:97:FF:1C:50:A9:51:E5:85:BD:54:09:6B:28:23:83:41:E8:46 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A345EE8BE94F6D2AA351BC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 66.54.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5e:e8:be:94:f6:d2:aa:35:1b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=c9e1feec-94ed-4b3f-b5fa-97e97b024567 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:58:8d:e0:c1:c1:c2:31:b4:9e:24:12:2a:a9: 64:7f:8d:33:f5:58:c0:b5:c9:ab:2a:66:e0:08:ef: 56:c1:77:84:d6:11:78:58:8d:1a:5c:58:86:4c:8b: 9f:ec:c8:b7:55:1b:79:52:70:22:ad:6d:c1:83:18: aa:cb:c1:f4:ac:d8:82:0c:e8:58:88:53:a9:70:65: 06:e9:6d:69:59:44:68:5c:6b:a8:7b:f5:19:47:48: 68:2f:a0:16:ed:16:62:80:7a:e9:91:62:cf:86:24: b2:8c:ad:cb:4d:80:86:d9:cc:56:f2:40:3c:76:b1: 81:b0:e7:6a:7b:f9:64:08:00:68:45:62:27:ba:82: dd:d0:7a:5f:c1:e9:eb:de:e8:24:7b:41:7f:76:f1: 47:e0:6e:27:fa:da:b4:12:c6:cf:34:d5:53:4a:7a: 94:ad:6d:a2:7d:96:ba:75:57:be:34:35:6e:2d:99: 2c:d0:10:25:f9:82:23:b5:d1:75:8a:d1:10:f9:de: 51:89:75:21:64:54:82:38:7b:27:33:ab:fd:6a:4a: 10:72:9f:8a:23:e4:ce:06:e0:56:02:b9:6a:e2:f7: 4e:5c:b0:2b:9c:8d:ff:4c:eb:a6:5a:2e:24:a3:23: a7:9a:97:3a:34:95:c7:24:d5:0c:94:52:95:16:b3: 52:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:64:97:FF:1C:50:A9:51:E5:85:BD:54:09:6B:28:23:83:41:E8:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2a135386-d97c-3dc6-8e81-a83bebd128a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:06:f6:1d:30:23:58:df:60:26:8f:b9:1d:1d:d7:54:7e:4d: dc:fe:dc:d0:b2:89:40:2a:07:56:2d:9a:99:be:53:b7:43:58: a0:c9:97:d3:ca:84:98:95:fa:92:4f:24:ce:36:c9:01:c7:87: 6a:af:ee:22:9c:e0:a2:98:83:54:9f:3e:73:cd:97:12:37:1d: 4a:1b:3b:3e:98:15:2c:28:48:54:f1:45:bd:bb:82:a4:65:a1: 78:56:8b:85:29:88:fd:11:7b:4e:96:e1:f5:32:0c:ea:c8:62: 24:ec:d6:86:63:a6:04:b2:81:d3:99:f2:da:e6:4b:16:82:a1: fc:08:82:35:57:bf:a2:e4:18:2e:c6:e4:e6:07:f9:8e:9a:2f: f9:00:36:61:58:0c:c8:dc:09:b1:a2:86:05:24:90:9d:71:18: 65:fb:07:59:28:5a:45:a3:0a:c0:4d:49:4a:89:5e:66:c1:9d: fe:2f:a9:5a:7c:c4:f6:de:47:9f:0b:19:65:59:57:bd:0e:ed: 99:ba:05:6a:18:71:45:32:a7:17:e7:ef:e2:23:2c:ab:ba:61: bf:45:a9:17:bf:26:f4:43:28:d2:17:06:95:72:1b:08:a6:77: 32:1e:d3:a2:9d:21:1f:00:4e:c1:b5:80:3c:7d:bb:d2:96:20: 23:5b:66:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF7ovpT20qo1G8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk YzllMWZlZWMtOTRlZC00YjNmLWI1ZmEtOTdlOTdiMDI0NTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11iN4MHBwjG0niQSKqlkf40z9VjAtcmrKmbg CO9WwXeE1hF4WI0aXFiGTIuf7Mi3VRt5UnAirW3Bgxiqy8H0rNiCDOhYiFOpcGUG 6W1pWURoXGuoe/UZR0hoL6AW7RZigHrpkWLPhiSyjK3LTYCG2cxW8kA8drGBsOdq e/lkCABoRWInuoLd0Hpfwenr3ugke0F/dvFH4G4n+tq0EsbPNNVTSnqUrW2ifZa6 dVe+NDVuLZks0BAl+YIjtdF1itEQ+d5RiXUhZFSCOHsnM6v9akoQcp+KI+TOBuBW Arlq4vdOXLArnI3/TOumWi4koyOnmpc6NJXHJNUMlFKVFrNSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9kl/8cUKlR5YW9VAlrKCODQehGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmExMzUzODYtZDk3Yy0z ZGM2LThlODEtYTgzYmViZDEyOGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoG9h0wI1jfYCaPuR0d11R+Tdz+3NCyiUAqB1Ytmpm+U7dDWKDJl9PK hJiV+pJPJM42yQHHh2qv7iKc4KKYg1SfPnPNlxI3HUobOz6YFSwoSFTxRb27gqRl oXhWi4UpiP0Re06W4fUyDOrIYiTs1oZjpgSygdOZ8trmSxaCofwIgjVXv6LkGC7G 5OYH+Y6aL/kANmFYDMjcCbGihgUkkJ1xGGX7B1koWkWjCsBNSUqJXmbBnf4vqVp8 xPbeR58LGWVZV70O7Zm6BWoYcUUypxfn7+IjLKu6Yb9FqRe/JvRDKNIXBpVyGwim dzIe06KdIR8ATsG1gDx9u9KWICNbZtU= -----END CERTIFICATE-----Generated at Thu May 8 23:34:44 2025 by rpki-client