$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa File: 5d42f217-5b0b-33b5-aa80-14a09bf89398.roa (raw, json) Hash identifier: zGLwssR2MdWPlEEYHUZtWdmYpGdN0MaUhLPj5Sk+VHw= Subject key identifier: 2C:36:E5:7E:38:A9:D9:77:E6:51:13:14:C8:4B:DE:33:59:BE:2F:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346002A69A8DC7AD35C080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:60:02:a6:9a:8d:c7:ad:35:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=6e5fcf58-b9b0-41af-be97-aba1692dd5d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:94:84:55:8b:85:02:6f:ee:7e:e6:e1:13:5c: 4a:28:d8:fa:92:f5:2b:98:3e:d9:29:23:61:53:87: 70:95:1b:9e:54:1d:e8:9a:0e:42:51:c4:ae:81:a7: c7:73:68:f6:fd:78:11:02:f0:f3:b6:5a:a9:ab:ae: ac:69:5a:38:0e:ba:93:0e:82:00:4c:69:16:79:18: 6c:d1:ef:67:4f:a5:4a:11:26:9c:43:1d:28:52:d8: d1:b3:dc:9c:e3:81:f2:dc:5a:3f:ca:97:e0:e1:6a: d1:26:ca:87:f3:70:43:34:cc:b3:5e:5b:b8:3c:02: 6b:a0:1e:c4:09:e1:07:d9:6d:7f:03:af:f5:82:01: 0b:f3:5c:41:98:6d:32:62:be:78:83:7b:c6:06:7b: 41:92:60:57:2b:55:f0:ee:b2:20:a1:ca:2e:f1:5c: 5e:0b:3c:25:af:65:d5:4a:52:8c:4d:c7:af:12:78: 64:c5:2a:65:65:7c:1d:e0:ce:7d:ed:38:f2:bf:3a: 13:10:4f:d2:cf:a5:4f:4d:c7:b5:67:c2:28:2d:7a: f8:53:f0:8b:16:3d:90:f8:e2:d7:3f:1b:5b:03:e4: e1:53:3a:81:6c:00:3c:3b:b4:d4:82:19:6e:fa:09: aa:f5:d6:eb:49:6e:05:dd:0a:ac:d6:bd:a6:10:89: fd:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:36:E5:7E:38:A9:D9:77:E6:51:13:14:C8:4B:DE:33:59:BE:2F:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:1d:8c:9f:5e:c5:ea:4e:15:c9:4d:72:fb:eb:32:fb:43:64: 02:71:ff:d4:37:e1:86:c7:35:a9:6b:67:64:c1:f2:d4:d8:e8: 9e:fd:43:63:6b:3e:fc:c2:3d:c1:69:86:f8:d1:7a:00:1b:8d: 48:ef:b0:8f:35:2d:1b:43:73:df:c8:fb:f0:65:af:55:88:8d: ad:d1:40:41:2f:0e:eb:f6:32:37:d5:e7:a7:d3:8f:69:4f:a2: 47:ae:00:5e:8c:c0:b4:4d:27:b8:37:81:d0:f4:80:a0:76:d0: d1:f8:b1:bc:08:c4:fd:33:e6:c7:32:86:1a:ac:1a:6f:0b:ce: 0f:60:73:a9:a9:79:09:10:60:0c:e6:4c:e3:9a:a7:1a:f6:6b: 15:3f:ba:da:1d:fc:99:e6:f7:43:49:6f:42:8a:81:d3:1d:50: fe:c9:e3:f8:80:6f:36:e6:bb:e9:a4:2e:7b:3c:5d:16:45:17: 5a:0f:80:36:cc:cf:02:f6:1b:9c:f4:95:40:fb:93:c8:7f:9c: 13:66:3a:f3:8a:cc:11:33:74:f2:94:59:57:70:7d:2a:e4:86: 10:7c:90:e2:cb:1c:06:0f:f6:dd:49:3e:6f:84:bc:b9:fc:92: 4a:cf:94:65:e4:dd:88:e5:ad:87:be:d0:b4:ab:85:37:82:6f: b1:3d:f7:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGACppqNx601wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NmU1ZmNmNTgtYjliMC00MWFmLWJlOTctYWJhMTY5MmRkNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpSEVYuFAm/ufubhE1xKKNj6kvUrmD7ZKSNh U4dwlRueVB3omg5CUcSugafHc2j2/XgRAvDztlqpq66saVo4DrqTDoIATGkWeRhs 0e9nT6VKESacQx0oUtjRs9yc44Hy3Fo/ypfg4WrRJsqH83BDNMyzXlu4PAJroB7E CeEH2W1/A6/1ggEL81xBmG0yYr54g3vGBntBkmBXK1Xw7rIgocou8VxeCzwlr2XV SlKMTcevEnhkxSplZXwd4M597TjyvzoTEE/Sz6VPTce1Z8IoLXr4U/CLFj2Q+OLX PxtbA+ThUzqBbAA8O7TUghlu+gmq9dbrSW4F3Qqs1r2mEIn94QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCw25X44qdl35lETFMhL3jNZvi/iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWQ0MmYyMTctNWIwYi0z M2I1LWFhODAtMTRhMDliZjg5Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgdjJ9exepOFclNcvvrMvtDZAJx/9Q34YbHNalrZ2TB8tTY6J79Q2Nr PvzCPcFphvjRegAbjUjvsI81LRtDc9/I+/Blr1WIja3RQEEvDuv2MjfV56fTj2lP okeuAF6MwLRNJ7g3gdD0gKB20NH4sbwIxP0z5scyhhqsGm8Lzg9gc6mpeQkQYAzm TOOapxr2axU/utod/Jnm90NJb0KKgdMdUP7J4/iAbzbmu+mkLns8XRZFF1oPgDbM zwL2G5z0lUD7k8h/nBNmOvOKzBEzdPKUWVdwfSrkhhB8kOLLHAYP9t1JPm+EvLn8 kkrPlGXk3YjlrYe+0LSrhTeCb7E99/U= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:46 2025 by rpki-client