$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa File: 3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa (raw, json) Hash identifier: I3tfIJZHEmUpIpmddJepOGrrziVxmQTkzTq7QoVpAUM= Subject key identifier: DE:2A:BD:6A:FF:ED:5A:78:55:0D:C5:52:8E:98:66:62:A8:25:89:9D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A3460547BC8C28C6F4EF640 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 66.54.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:60:54:7b:c8:c2:8c:6f:4e:f6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=995c2c3c-384e-4a29-87af-5a6227f62f55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:73:d4:f4:4f:1f:86:c6:4a:fd:84:d3:02: 29:8f:d0:3f:b2:e9:81:9b:2f:3c:b6:ce:50:a6:32: ed:0f:8e:4b:b4:40:a4:93:22:22:eb:58:bf:eb:2f: aa:14:63:44:ec:55:38:d9:bc:f4:e4:db:2c:2c:8b: 3d:38:6a:cc:81:09:f6:e5:2f:45:62:ff:bf:d2:a0: 89:63:7e:0e:eb:51:51:31:d7:aa:91:32:28:da:07: 19:2e:a8:07:11:2c:a8:39:2c:88:80:8c:d1:b2:a7: 5d:df:19:f8:84:ff:f7:36:6b:00:dd:5d:c3:0f:cc: 3f:8d:df:d2:f7:c3:f2:79:a3:cd:eb:f1:d5:e8:66: 73:ee:6a:fc:c5:e8:ac:79:fa:bf:f3:33:a9:be:98: 2c:bb:cc:6a:6b:68:b4:de:df:f6:70:f4:c4:fe:08: c1:76:d3:82:14:1b:b2:52:8a:9f:31:67:04:b5:9a: b0:89:8c:70:0f:51:9a:ce:ec:a8:74:23:a9:2a:f8: e4:07:af:9d:0c:8b:ce:27:ac:37:c7:17:5a:01:32: e4:59:ab:3e:87:2e:54:fc:ad:50:b7:23:70:74:34: 26:d2:49:14:5b:9c:3c:a9:ce:75:f0:36:44:e3:65: 9a:21:7d:86:8b:4d:78:e8:d6:c9:58:d6:81:b3:f2: dd:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2A:BD:6A:FF:ED:5A:78:55:0D:C5:52:8E:98:66:62:A8:25:89:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3ecdfac8-c5e2-3ba1-8ee3-2da45c03c577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b9:7b:e6:b0:9d:bd:4c:6c:8e:97:7c:f5:86:44:37:c9:d7: 26:a8:eb:1c:9d:d0:ac:b0:a1:52:c9:dc:19:12:bf:38:12:90: be:ff:82:17:a0:b5:f6:41:57:e2:b7:50:eb:6a:db:90:ea:0c: 8c:87:48:e8:89:a8:40:e7:04:60:72:a3:b9:99:65:16:fb:4b: 88:93:b7:fd:6b:2a:2c:30:c4:da:5b:67:d2:0e:4b:74:d2:6d: 36:2f:58:1b:32:f7:1c:f7:84:e1:34:30:b9:11:39:bf:1b:23: 3e:c8:c6:cf:38:07:c7:f9:b2:ce:a1:f0:5f:07:51:d0:6e:93: 6d:f5:67:01:22:b3:71:09:4b:a7:b5:24:5a:e4:bb:a2:43:1e: 74:a4:0e:66:41:db:0a:ab:91:1b:c6:0a:f3:a2:4a:fc:a3:19: 59:32:d0:05:25:bb:e6:4c:d9:b1:d3:50:bd:35:42:9b:37:e8: 50:b1:74:4c:00:6c:f4:15:ad:1b:d8:f2:75:61:e1:aa:aa:94: 1c:27:b4:8d:6b:ff:fd:fd:e0:82:cd:4c:64:d6:59:a4:84:09: 7d:d2:69:3d:3c:b2:17:be:30:e9:69:81:1f:bd:66:be:3c:e7: 95:f1:83:e1:52:c5:63:05:fb:dc:df:28:81:63:7c:26:97:0f: fc:08:dc:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGBUe8jCjG9O9kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk OTk1YzJjM2MtMzg0ZS00YTI5LTg3YWYtNWE2MjI3ZjYyZjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNRz1PRPH4bGSv2E0wIpj9A/sumBmy88ts5Q pjLtD45LtECkkyIi61i/6y+qFGNE7FU42bz05NssLIs9OGrMgQn25S9FYv+/0qCJ Y34O61FRMdeqkTIo2gcZLqgHESyoOSyIgIzRsqdd3xn4hP/3NmsA3V3DD8w/jd/S 98PyeaPN6/HV6GZz7mr8xeisefq/8zOpvpgsu8xqa2i03t/2cPTE/gjBdtOCFBuy UoqfMWcEtZqwiYxwD1GazuyodCOpKvjkB6+dDIvOJ6w3xxdaATLkWas+hy5U/K1Q tyNwdDQm0kkUW5w8qc518DZE42WaIX2Gi0146NbJWNaBs/LdlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN4qvWr/7Vp4VQ3FUo6YZmKoJYmdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2VjZGZhYzgtYzVlMi0z YmExLThlZTMtMmRhNDVjMDNjNTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB65e+awnb1MbI6XfPWGRDfJ1yao6xyd0KywoVLJ3BkSvzgSkL7/gheg tfZBV+K3UOtq25DqDIyHSOiJqEDnBGByo7mZZRb7S4iTt/1rKiwwxNpbZ9IOS3TS bTYvWBsy9xz3hOE0MLkROb8bIz7Ixs84B8f5ss6h8F8HUdBuk231ZwEis3EJS6e1 JFrku6JDHnSkDmZB2wqrkRvGCvOiSvyjGVky0AUlu+ZM2bHTUL01Qps36FCxdEwA bPQVrRvY8nVh4aqqlBwntI1r//394ILNTGTWWaSECX3SaT08she+MOlpgR+9Zr48 55Xxg+FSxWMF+9zfKIFjfCaXD/wI3Cg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:03:38 2025 by rpki-client