$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa File: c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa (raw, json) Hash identifier: nMOAHKn+sG13qcV4XlAq1uk1+xTofN8ZT3TKSsIsdN4= Subject key identifier: 0A:ED:C7:C8:57:D6:7D:5A:46:8E:5B:75:9F:7A:C4:38:7E:73:35:8C Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A345FAACD9C26D6CD3E75C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 202 IP address blocks: 66.54.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5f:aa:cd:9c:26:d6:cd:3e:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=42679b14-2ef1-42f2-9d9c-50bfa9f4f754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:31:bf:68:51:f4:d8:05:0a:b6:10:e1:1b:c9: cd:f6:2b:f2:98:86:d1:44:25:a7:71:42:50:37:76: 22:86:d6:bb:eb:5d:c8:7e:79:33:2e:9a:92:a9:87: bf:fc:4c:77:54:4a:a2:47:55:a0:4e:88:2a:8e:a2: fa:e3:78:df:30:41:1d:c8:e5:f4:41:54:15:3e:19: b5:6c:2f:27:65:02:4c:c9:a9:b0:35:c0:db:a0:f1: 50:54:de:ca:06:53:34:59:6a:c1:94:1d:c2:c5:48: cb:99:51:46:ae:36:6c:e9:a7:01:50:b9:af:96:00: 0f:47:43:30:57:78:ac:ab:77:dc:17:0b:1b:6f:1c: 0b:ff:dd:19:7f:88:0c:8c:09:0b:86:10:5e:01:f2: 6c:b3:3a:ad:5d:3d:e5:a9:2b:3a:23:e9:fd:5a:2f: 06:89:58:bb:75:16:39:c9:48:44:59:64:72:35:08: 0e:22:87:0d:47:f5:be:89:9c:3d:77:57:88:7e:a5: a9:46:6c:32:af:d0:79:51:14:03:d1:85:fd:c0:6b: 3f:a9:01:61:d9:72:00:98:97:61:f8:29:b3:88:61: d0:c4:16:b4:34:e8:db:be:55:e4:8a:30:14:ab:ad: 9e:49:5e:75:2e:06:5b:3a:92:95:cb:9c:ba:8e:87: b1:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:ED:C7:C8:57:D6:7D:5A:46:8E:5B:75:9F:7A:C4:38:7E:73:35:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:65:0a:17:f6:4e:a9:ee:e8:4a:e9:c7:4d:d6:cf:96:f5:a8: cc:8e:f4:06:be:dc:95:a3:57:6a:ff:25:0f:da:5c:bb:d8:47: 47:ea:05:89:41:68:87:cd:a9:20:0e:be:5a:6d:ff:dc:9a:bb: c9:81:9f:11:67:fd:4b:d1:cc:bf:16:60:63:04:d7:d1:ff:c2: c0:e9:49:10:63:3b:4b:62:c9:ad:e2:b3:82:eb:2a:42:01:4b: 30:58:b8:54:3f:6a:2b:8e:7b:a0:3f:2b:00:ee:91:4b:20:7e: bf:25:cd:11:b3:d1:e7:ef:b1:d7:9d:7f:28:82:76:74:0b:3f: ac:37:88:00:0c:25:4e:19:2d:f2:76:1b:11:05:82:24:cb:31: 7c:59:78:b0:69:92:a0:1e:1e:c4:6c:6e:7c:2b:9c:da:61:16: c5:e1:64:e1:ff:53:dc:80:32:24:1e:81:9b:9b:3d:28:24:12: a8:58:69:96:63:8a:23:24:e0:de:bf:be:a0:ed:da:c3:a9:1f: 6c:c9:3e:fe:4a:dd:aa:27:ce:b2:61:3c:54:cd:3c:0c:9c:59: 4c:31:ca:f9:51:7d:fa:5c:ce:35:5e:34:88:63:b0:28:93:d9: b9:66:2d:5f:5b:e8:22:f3:85:fc:20:7c:b8:c2:4a:76:0f:68: 8f:2d:e4:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF+qzZwm1s0+dcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk NDI2NzliMTQtMmVmMS00MmYyLTlkOWMtNTBiZmE5ZjRmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTG/aFH02AUKthDhG8nN9ivymIbRRCWncUJQ N3Yihta7613IfnkzLpqSqYe//Ex3VEqiR1WgTogqjqL643jfMEEdyOX0QVQVPhm1 bC8nZQJMyamwNcDboPFQVN7KBlM0WWrBlB3CxUjLmVFGrjZs6acBULmvlgAPR0Mw V3isq3fcFwsbbxwL/90Zf4gMjAkLhhBeAfJsszqtXT3lqSs6I+n9Wi8GiVi7dRY5 yUhEWWRyNQgOIocNR/W+iZw9d1eIfqWpRmwyr9B5URQD0YX9wGs/qQFh2XIAmJdh +CmziGHQxBa0NOjbvlXkijAUq62eSV51LgZbOpKVy5y6joexKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFArtx8hX1n1aRo5bdZ96xDh+czWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzNkNGFmMWYtODkxOC0z MGYwLTgxNDAtODY3NWM2MWYzZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFllChf2Tqnu6Erpx03Wz5b1qMyO9Aa+3JWjV2r/JQ/aXLvYR0fqBYlB aIfNqSAOvlpt/9yau8mBnxFn/UvRzL8WYGME19H/wsDpSRBjO0tiya3is4LrKkIB SzBYuFQ/aiuOe6A/KwDukUsgfr8lzRGz0efvsdedfyiCdnQLP6w3iAAMJU4ZLfJ2 GxEFgiTLMXxZeLBpkqAeHsRsbnwrnNphFsXhZOH/U9yAMiQegZubPSgkEqhYaZZj iiMk4N6/vqDt2sOpH2zJPv5K3aonzrJhPFTNPAycWUwxyvlRffpczjVeNIhjsCiT 2blmLV9b6CLzhfwgfLjCSnYPaI8t5KE= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:14 2025 by rpki-client