$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa File: f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa (raw, json) Hash identifier: 8ce/QcOFXo6ujYGl9mnu0I7lk70vxqNAos0PrLxcXUs= Subject key identifier: 47:56:AF:F6:CA:25:20:60:EC:CF:2A:D7:5C:58:45:15:8F:C6:D7:EF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F432858498A345F670CACBD8194A29F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa Signing time: Wed 16 Apr 2025 01:00:48 +0000 ROA not before: Wed 16 Apr 2025 01:00:48 +0000 ROA not after: Tue 15 Jul 2025 01:00:48 +0000 asID: 203 IP address blocks: 66.54.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8a:34:5f:67:0c:ac:bd:81:94:a2:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 16 01:00:48 2025 GMT Not After : Jul 15 01:00:48 2025 GMT Subject: CN=870f2fab-ac7a-41e5-bddf-41f452a2d18d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a5:c6:dc:26:1f:43:fe:5f:b3:e6:7c:cd:3e: 2f:12:be:82:7b:54:cc:c1:05:39:4f:6f:6e:9a:b5: 8b:e9:f3:b7:6f:a6:16:04:eb:d9:f1:25:73:5c:2f: b5:19:d0:b1:65:0c:94:cc:6c:bd:fc:99:4d:49:1c: 5b:65:57:22:1f:43:32:5c:70:01:44:8d:6f:67:c4: a6:bd:98:26:9a:d9:92:2a:7b:b1:8d:b2:9e:94:2c: 8a:70:5c:63:88:df:94:af:7f:4c:be:8f:c4:22:6e: eb:37:34:ec:88:c9:4e:56:ea:e2:b9:53:6a:12:39: 64:b0:65:77:a4:e6:00:ea:3a:b9:90:2f:9c:02:30: e0:a0:d4:19:00:7c:c4:d1:b6:4f:c9:44:68:29:c7: 1b:2e:cb:41:9d:49:c0:d5:a9:1e:83:eb:28:e9:d5: ca:0e:bf:6f:7c:aa:d4:64:8d:25:bd:a0:07:21:1b: 7a:6d:f4:7d:5e:4a:6b:3d:09:40:79:6f:09:2d:de: 0d:6b:a2:cb:66:09:ec:32:8f:04:7d:56:1d:b7:8b: 8d:84:90:39:9b:d2:1d:b6:f5:ac:c4:d1:a2:63:4f: 54:ae:4c:94:77:4b:4c:3b:34:c4:5e:74:98:b7:7a: 6e:0d:2c:b5:64:b3:0f:f7:2b:ea:c5:e9:94:56:9c: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:56:AF:F6:CA:25:20:60:EC:CF:2A:D7:5C:58:45:15:8F:C6:D7:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f07e52a1-fb1b-36a6-baa6-cf2a2d3de5f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:6f:ce:30:85:f3:f6:8f:5b:e2:12:06:b1:7e:a3:3e:da:8e: 5a:3f:4e:32:f9:76:ab:79:b3:8a:e8:46:24:a4:d7:0e:89:64: 32:08:2a:dd:68:d2:51:e8:a4:98:b5:55:f9:e8:18:07:a0:70: e5:02:d2:98:90:a6:7f:ee:84:c6:35:f9:88:d1:d7:97:a6:b2: 70:46:cb:55:19:1f:8b:ad:70:92:0d:ec:ea:1b:91:af:66:c9: 87:c0:53:05:5f:53:bc:a3:6a:ab:f3:1e:3f:f8:95:a0:89:5f: a0:ed:bc:84:60:fb:d9:54:46:2b:24:db:31:07:b4:17:dd:c5: 8f:7f:81:49:0a:15:2d:46:f6:3d:47:58:98:e7:90:19:3c:0d: db:38:94:d8:e9:93:35:35:2f:01:d9:92:91:9f:de:17:b4:ff: 06:ed:5b:b8:56:26:b8:2a:9c:ec:a7:36:a6:50:ff:56:9e:b9: fe:a8:0b:ba:36:39:b1:e0:b1:ed:bc:85:1a:6f:d3:18:bd:d0: d0:11:c8:99:e5:b4:bf:a7:2e:ef:b7:7b:15:5f:b5:8f:bc:ac: 13:78:d8:3c:58:2c:0f:45:65:cd:41:59:3a:e5:0d:a4:3f:6e: 53:a0:a0:2c:87:0c:8d:b5:38:16:71:37:43:68:3a:7d:2a:69: fd:62:48:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF9nDKy9gZSinwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk ODcwZjJmYWItYWM3YS00MWU1LWJkZGYtNDFmNDUyYTJkMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKXG3CYfQ/5fs+Z8zT4vEr6Ce1TMwQU5T29u mrWL6fO3b6YWBOvZ8SVzXC+1GdCxZQyUzGy9/JlNSRxbZVciH0MyXHABRI1vZ8Sm vZgmmtmSKnuxjbKelCyKcFxjiN+Ur39Mvo/EIm7rNzTsiMlOVuriuVNqEjlksGV3 pOYA6jq5kC+cAjDgoNQZAHzE0bZPyURoKccbLstBnUnA1akeg+so6dXKDr9vfKrU ZI0lvaAHIRt6bfR9XkprPQlAeW8JLd4Na6LLZgnsMo8EfVYdt4uNhJA5m9IdtvWs xNGiY09UrkyUd0tMOzTEXnSYt3puDSy1ZLMP9yvqxemUVpwOwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEdWr/bKJSBg7M8q11xYRRWPxtfvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjA3ZTUyYTEtZmIxYi0z NmE2LWJhYTYtY2YyYTJkM2RlNWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1vzjCF8/aPW+ISBrF+oz7ajlo/TjL5dqt5s4roRiSk1w6JZDIIKt1o 0lHopJi1VfnoGAegcOUC0piQpn/uhMY1+YjR15emsnBGy1UZH4utcJIN7Oobka9m yYfAUwVfU7yjaqvzHj/4laCJX6DtvIRg+9lURisk2zEHtBfdxY9/gUkKFS1G9j1H WJjnkBk8Dds4lNjpkzU1LwHZkpGf3he0/wbtW7hWJrgqnOynNqZQ/1aeuf6oC7o2 ObHgse28hRpv0xi90NARyJnltL+nLu+3exVftY+8rBN42DxYLA9FZc1BWTrlDaQ/ blOgoCyHDI21OBZxN0NoOn0qaf1iSDg= -----END CERTIFICATE-----Generated at Sat Apr 26 19:15:26 2025 by rpki-client