$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa File: de308c09-33a0-3977-8524-c4c7b3a7d053.roa (raw, json) Hash identifier: AsJYXRKACrEZG8rohpyqfojXFQoUQnmaOx8L1V4d5vU= Subject key identifier: D6:AB:56:34:7A:D0:05:1F:B0:0A:48:2F:C1:64:94:C3:06:0D:04:5E Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A346031D0A51EFB3A405680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 3360 IP address blocks: 66.54.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:60:31:d0:a5:1e:fb:3a:40:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=e53dbd4b-6aaa-443c-a2cf-1e1c33f5b3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8d:8d:f7:1c:ff:63:11:d8:d1:72:3d:eb:dc: ea:ec:7b:29:96:c9:f9:67:44:3e:65:ad:a7:2d:38: aa:e4:62:f3:16:d1:0f:ee:8f:8f:3f:c9:29:d2:c0: 2f:2b:a1:3b:39:e3:07:f4:06:bd:5e:46:21:e6:2a: 8f:27:f7:34:8b:15:75:c2:fc:44:58:6e:d1:36:e0: ef:ad:0f:09:64:68:3a:8e:4a:f6:2c:df:ef:2d:ee: a4:74:58:37:68:bd:1a:31:05:ed:21:f8:71:f2:47: 71:98:65:79:da:bf:8b:c6:fc:55:16:39:df:d0:90: fe:f2:a9:87:ec:00:ee:09:13:bd:f1:b5:bb:af:d5: 00:73:ed:a7:86:be:3f:da:92:4d:18:9e:cf:f9:06: b1:be:eb:64:e0:18:ce:1d:75:01:26:ea:5a:7d:f5: bf:47:4b:a1:af:95:0e:92:6a:b7:c8:90:0c:17:68: 45:99:8b:25:77:cb:5a:07:8d:69:f9:89:62:cc:03: 42:41:3b:46:8d:76:81:cf:c1:f3:e9:e5:e7:99:22: 77:d7:91:02:f6:b5:a6:90:5a:4a:74:ca:b5:73:ad: d6:b0:5b:79:74:cd:ae:e7:15:c6:0e:c3:75:72:f1: ee:2a:44:76:24:cf:34:d1:10:f3:e6:49:ca:45:37: 14:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:AB:56:34:7A:D0:05:1F:B0:0A:48:2F:C1:64:94:C3:06:0D:04:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/de308c09-33a0-3977-8524-c4c7b3a7d053.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:ce:63:b6:f7:f7:64:63:82:9c:3b:79:18:c5:9a:8a:95:95: fa:f0:d5:1f:a9:e7:c2:bc:e1:e5:6f:68:ee:38:53:d9:e7:6a: 99:3a:cb:db:c3:06:8f:57:f0:7a:4f:f0:a5:c2:25:c2:56:07: 70:7b:31:20:18:90:8a:67:95:1b:bb:65:5d:6e:d3:c3:b7:47: 73:50:09:ba:dd:3d:6c:32:66:b3:de:68:d8:99:1e:91:fe:50: d9:2a:0b:63:0b:17:92:73:79:12:a0:47:3f:51:bb:d4:28:fd: 7f:9d:ba:ee:2d:5b:bd:bb:c0:af:1b:86:49:bc:11:83:ba:ad: 63:73:95:50:23:d4:af:ce:ae:63:18:0f:a0:c0:75:7f:22:bc: a0:1f:59:96:30:a7:8a:69:bf:58:5f:e2:95:37:09:30:19:d6: f2:87:82:11:b5:5d:74:3c:5b:3a:d3:96:e9:f1:cd:ad:a9:92: 92:45:81:20:dc:e7:da:16:75:f7:4c:ff:30:08:c4:ba:2d:65: 58:c0:5d:72:70:28:36:65:9b:b5:9c:08:33:1c:01:6e:7f:8f: d7:90:f3:7a:58:e6:fe:df:53:f0:de:f3:11:a5:25:4d:7e:f0: 72:7e:63:d9:1f:7c:a2:74:c6:76:ca:9b:1a:e7:0f:47:84:4d: 29:01:b1:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNGAx0KUe+zpAVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ZTUzZGJkNGItNmFhYS00NDNjLWEyY2YtMWUxYzMzZjViM2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI2N9xz/YxHY0XI969zq7Hsplsn5Z0Q+Za2n LTiq5GLzFtEP7o+PP8kp0sAvK6E7OeMH9Aa9XkYh5iqPJ/c0ixV1wvxEWG7RNuDv rQ8JZGg6jkr2LN/vLe6kdFg3aL0aMQXtIfhx8kdxmGV52r+LxvxVFjnf0JD+8qmH 7ADuCRO98bW7r9UAc+2nhr4/2pJNGJ7P+Qaxvutk4BjOHXUBJupaffW/R0uhr5UO kmq3yJAMF2hFmYsld8taB41p+YlizANCQTtGjXaBz8Hz6eXnmSJ315EC9rWmkFpK dMq1c63WsFt5dM2u5xXGDsN1cvHuKkR2JM800RDz5knKRTcUkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNarVjR60AUfsApIL8FklMMGDQReMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZGUzMDhjMDktMzNhMC0z OTc3LTg1MjQtYzRjN2IzYTdkMDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvOY7b392Rjgpw7eRjFmoqVlfrw1R+p58K84eVvaO44U9nnapk6y9vD Bo9X8HpP8KXCJcJWB3B7MSAYkIpnlRu7ZV1u08O3R3NQCbrdPWwyZrPeaNiZHpH+ UNkqC2MLF5JzeRKgRz9Ru9Qo/X+duu4tW727wK8bhkm8EYO6rWNzlVAj1K/OrmMY D6DAdX8ivKAfWZYwp4ppv1hf4pU3CTAZ1vKHghG1XXQ8WzrTlunxza2pkpJFgSDc 59oWdfdM/zAIxLotZVjAXXJwKDZlm7WcCDMcAW5/j9eQ83pY5v7fU/De8xGlJU1+ 8HJ+Y9kffKJ0xnbKmxrnD0eETSkBsRI= -----END CERTIFICATE-----Generated at Sun Apr 27 20:17:35 2025 by rpki-client