$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae911dce-99b2-35e1-990d-0311c193bc69.roa File: ae911dce-99b2-35e1-990d-0311c193bc69.roa (raw, json) Hash identifier: zkirqT/H+roIMN4uIwXNDm8bsFuCZGNk/YG6aQiBKjc= Subject key identifier: 3F:DD:73:7C:4D:37:8F:AF:1C:5C:32:9E:6A:A1:4B:14:6E:EE:F6:62 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A345FD03A7B3EF89C1F7580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae911dce-99b2-35e1-990d-0311c193bc69.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 5714 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5f:d0:3a:7b:3e:f8:9c:1f:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=5929c33e-bcf5-4175-8eff-3fbff35712e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:36:83:84:7f:07:ec:8c:e4:50:b8:2f:4f:34: 70:eb:c0:1c:3a:f3:49:94:1b:ee:4d:47:a1:09:06: 6d:66:71:29:20:27:ef:6a:c4:d6:02:88:f2:15:65: 36:c7:b5:7c:95:54:e6:3f:57:06:34:15:bb:1e:b3: d6:8a:43:2b:0f:38:ab:8c:6e:c7:06:81:0b:8b:b5: cd:23:38:bb:53:31:be:98:ae:78:0d:47:8e:fa:da: 01:1a:c1:b8:04:bb:02:49:2e:7d:f4:aa:8f:c4:10: 95:2e:84:ce:1e:3a:1f:76:1d:82:b8:49:81:c4:45: 22:c4:37:c5:98:90:3d:30:e6:73:09:be:f7:47:19: 27:f2:57:2e:14:2a:c7:1a:65:ba:5e:39:3f:75:03: f8:35:50:33:23:7b:7c:37:66:f5:e3:ba:d5:07:11: 34:e0:92:71:da:65:97:e8:2f:e3:36:51:83:14:e5: d4:5d:3d:90:b5:3e:d9:14:11:88:b9:c3:8d:87:15: 7c:2e:d4:e2:b8:30:ab:d4:18:46:e0:92:6a:e5:57: 0d:37:8c:9e:bf:a5:4e:df:12:fc:bc:8c:cf:6e:a2: c1:86:47:ab:fc:04:ee:c2:82:10:cb:8d:d5:e3:89: a3:7e:88:4a:42:dd:a9:dd:72:f5:78:61:82:fd:62: ef:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DD:73:7C:4D:37:8F:AF:1C:5C:32:9E:6A:A1:4B:14:6E:EE:F6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/ae911dce-99b2-35e1-990d-0311c193bc69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9b:0a:67:46:e0:06:83:fc:7c:99:b3:e0:b8:eb:b3:a5:05: 92:ee:9c:73:46:d9:97:92:53:d5:40:27:dc:2f:1c:1f:2f:8b: 52:74:b3:b8:6d:7c:5b:6f:35:dd:2d:e7:89:3c:38:d2:d9:bb: 3e:50:4e:a6:69:2c:2a:df:0b:97:cb:40:69:3f:ca:35:1a:12: 81:1e:4c:60:40:63:f4:51:20:de:a4:d2:35:3b:e8:ff:60:34: f6:e9:5a:09:cb:04:76:ad:70:c1:13:8d:7b:d0:2c:69:31:32: 0e:26:53:8f:2b:ef:31:36:1e:3f:da:40:79:6a:99:14:54:a3: 5b:74:13:1c:cb:dd:47:04:a3:be:ac:29:64:26:3c:a9:5e:ce: c6:01:95:57:68:04:8e:1d:c8:1b:63:fe:76:15:5c:e7:d1:78: 52:9e:fc:cb:90:8e:7f:42:36:4f:c9:39:d6:be:ec:5e:4c:b5: 30:74:32:df:b5:c1:5a:7b:69:fa:99:0c:56:db:82:18:66:53: 44:b9:99:f3:e5:4a:11:7f:f5:7a:0b:e9:12:40:b1:9c:f7:ca: 7b:d3:31:5a:ee:93:5e:34:14:a6:b5:9d:14:19:fc:27:b0:b4: b9:9c:79:11:cf:ac:8c:fd:fb:4a:88:36:27:cf:e0:21:01:eb: 03:48:88:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF/QOns++JwfdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NTkyOWMzM2UtYmNmNS00MTc1LThlZmYtM2ZiZmYzNTcxMmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDaDhH8H7IzkULgvTzRw68AcOvNJlBvuTUeh CQZtZnEpICfvasTWAojyFWU2x7V8lVTmP1cGNBW7HrPWikMrDzirjG7HBoELi7XN Izi7UzG+mK54DUeO+toBGsG4BLsCSS599KqPxBCVLoTOHjofdh2CuEmBxEUixDfF mJA9MOZzCb73Rxkn8lcuFCrHGmW6Xjk/dQP4NVAzI3t8N2b147rVBxE04JJx2mWX 6C/jNlGDFOXUXT2QtT7ZFBGIucONhxV8LtTiuDCr1BhG4JJq5VcNN4yev6VO3xL8 vIzPbqLBhker/ATuwoIQy43V44mjfohKQt2p3XL1eGGC/WLvTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/dc3xNN4+vHFwynmqhSxRu7vZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYWU5MTFkY2UtOTliMi0z NWUxLTk5MGQtMDMxMWMxOTNiYzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqbCmdG4AaD/HyZs+C467OlBZLunHNG2ZeSU9VAJ9wvHB8vi1J0s7ht fFtvNd0t54k8ONLZuz5QTqZpLCrfC5fLQGk/yjUaEoEeTGBAY/RRIN6k0jU76P9g NPbpWgnLBHatcMETjXvQLGkxMg4mU48r7zE2Hj/aQHlqmRRUo1t0ExzL3UcEo76s KWQmPKlezsYBlVdoBI4dyBtj/nYVXOfReFKe/MuQjn9CNk/JOda+7F5MtTB0Mt+1 wVp7afqZDFbbghhmU0S5mfPlShF/9XoL6RJAsZz3ynvTMVruk140FKa1nRQZ/Cew tLmceRHPrIz9+0qINifP4CEB6wNIiFQ= -----END CERTIFICATE-----Generated at Sun Apr 27 00:19:42 2025 by rpki-client