$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa File: 395e9672-0d4f-3770-ad00-14197b722cee.roa (raw, json) Hash identifier: 3yyMvy9MgytQtZEmNBuQLoxeJdOPD2ri8Q8zu3ZRMIs= Subject key identifier: BB:B6:C8:62:17:B1:8D:17:42:A1:8F:60:2E:76:D1:AF:4C:29:BC:30 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A3460B4728BC28AF635B4C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 66.54.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:60:b4:72:8b:c2:8a:f6:35:b4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=f58637ff-f4fe-4e34-9ff4-b3c82181bf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:2c:39:17:9e:6a:20:80:7d:30:41:8c:2e:e0: 69:f5:be:51:34:11:fa:5c:07:0d:18:df:e6:8e:8e: b1:2e:84:df:59:60:7e:62:d6:49:7b:27:4b:56:06: de:ec:32:59:6b:02:e9:41:59:e6:3c:cd:fd:04:71: d5:ec:10:00:6b:ff:c6:84:5d:43:57:0d:79:39:12: 33:2d:5c:d2:b4:87:b3:b5:ae:91:3d:87:95:10:95: c5:41:c6:b7:3d:c8:45:d4:4e:60:3f:ec:59:61:8b: 5d:c0:c0:e7:68:c9:87:54:5e:3d:60:fe:80:34:17: ca:61:f3:36:5d:66:a9:f6:af:f7:61:d4:24:c8:1d: fb:84:87:c4:48:97:f2:62:a3:4e:e7:6b:4b:81:d5: f4:ce:cd:6d:c7:58:ec:a7:74:01:cc:2b:f7:ed:3d: 54:cb:52:3c:2e:8d:ab:72:d6:1a:50:8e:48:a4:98: 59:4b:44:e6:5f:fd:83:7c:1c:2f:19:c3:1e:a0:30: 99:bb:e3:dd:68:b9:28:d4:71:db:de:c2:d2:b3:dd: b9:a5:8f:52:78:22:22:35:30:48:da:2e:68:31:9b: 07:eb:c1:7e:80:d3:73:36:ae:78:e2:1e:bd:27:35: 31:b4:48:14:76:7b:23:c6:14:6a:fa:30:b0:30:0d: b5:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:B6:C8:62:17:B1:8D:17:42:A1:8F:60:2E:76:D1:AF:4C:29:BC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/395e9672-0d4f-3770-ad00-14197b722cee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.48.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8a:85:65:56:f4:c1:23:09:f8:15:77:b9:75:62:dd:df:9f: 17:28:dd:57:c9:65:6e:08:8c:a6:23:41:da:16:10:f9:45:84: ca:e8:65:e6:a3:08:4f:0b:81:7a:b5:f3:67:d8:45:8a:a1:a5: cc:1b:bb:43:53:98:06:30:2c:10:df:94:e3:95:6d:37:af:3f: 42:5e:6e:1d:2c:0a:3c:ea:b8:3c:21:01:0e:eb:17:a4:fa:eb: 36:f9:5a:31:13:b8:9c:f7:68:8a:1e:60:31:f6:68:9c:cc:bd: 6a:6a:99:b8:2f:dd:96:7c:91:06:b6:42:a1:73:53:6d:f9:03: 69:84:28:06:6b:8b:5d:f0:22:a1:7d:6b:07:4e:ca:a5:0a:7f: 65:50:ee:06:ff:c6:cb:0e:bf:31:ea:36:07:7a:9b:bc:a7:f6: 94:64:8b:e8:94:3b:9b:d4:07:cd:2e:34:70:bf:a1:f5:f3:08: 9e:37:90:b9:cf:7f:b8:37:05:08:fc:56:5d:e2:a4:2f:4a:12: c1:62:70:1a:60:78:2d:b2:08:83:f1:86:26:af:4f:14:66:5d: d5:f6:3d:26:07:7d:1c:ca:58:b3:3e:9a:23:b7:6f:3c:2f:90: b4:c9:dd:5e:31:08:a9:5d:88:27:9d:1f:93:e2:69:3f:76:f2: 71:e4:38:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGC0covCivY1tMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZjU4NjM3ZmYtZjRmZS00ZTM0LTlmZjQtYjNjODIxODFiZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyw5F55qIIB9MEGMLuBp9b5RNBH6XAcNGN/m jo6xLoTfWWB+YtZJeydLVgbe7DJZawLpQVnmPM39BHHV7BAAa//GhF1DVw15ORIz LVzStIezta6RPYeVEJXFQca3PchF1E5gP+xZYYtdwMDnaMmHVF49YP6ANBfKYfM2 XWap9q/3YdQkyB37hIfESJfyYqNO52tLgdX0zs1tx1jsp3QBzCv37T1Uy1I8Lo2r ctYaUI5IpJhZS0TmX/2DfBwvGcMeoDCZu+PdaLko1HHb3sLSs925pY9SeCIiNTBI 2i5oMZsH68F+gNNzNq544h69JzUxtEgUdnsjxhRq+jCwMA21SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLu2yGIXsY0XQqGPYC520a9MKbwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzk1ZTk2NzItMGQ0Zi0z NzcwLWFkMDAtMTQxOTdiNzIyY2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiKhWVW9MEjCfgVd7l1Yt3fnxco3VfJZW4IjKYjQdoWEPlFhMroZeaj CE8LgXq182fYRYqhpcwbu0NTmAYwLBDflOOVbTevP0Jebh0sCjzquDwhAQ7rF6T6 6zb5WjETuJz3aIoeYDH2aJzMvWpqmbgv3ZZ8kQa2QqFzU235A2mEKAZri13wIqF9 awdOyqUKf2VQ7gb/xssOvzHqNgd6m7yn9pRki+iUO5vUB80uNHC/ofXzCJ43kLnP f7g3BQj8Vl3ipC9KEsFicBpgeC2yCIPxhiavTxRmXdX2PSYHfRzKWLM+miO3bzwv kLTJ3V4xCKldiCedH5PiaT928nHkOCk= -----END CERTIFICATE-----Generated at Sat Apr 26 19:29:11 2025 by rpki-client