$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa File: 2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa (raw, json) Hash identifier: Sw8D0PAzbakQz6wPZlUrJAVrmN6fi6gz5S1vvhT1B9k= Subject key identifier: 3B:AD:E2:5A:5A:8B:F7:0A:D9:FE:3F:69:B1:2B:C5:FE:74:A1:EC:65 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B210E26AD5CC757B41820 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:21:0e:26:ad:5c:c7:57:b4:18:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=47dc962a-c68b-4ceb-8fe0-fd0b61c07feb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:79:c0:4a:23:f3:b3:cc:10:a7:58:37:d0:b8: d2:8e:34:b0:a1:5b:dd:2f:6f:6f:57:ec:02:d1:ae: 22:b5:0a:e8:d5:02:e2:f4:99:c5:d9:c1:b2:f3:e9: 9f:f7:85:58:01:d1:f5:d2:45:5a:7c:68:76:9b:d9: 5f:d6:9a:b3:86:d1:ba:96:95:06:11:b2:69:2e:c2: 78:07:e5:8c:56:d9:65:19:1a:20:f0:47:e8:8e:70: d1:49:c5:65:cd:73:d4:68:bd:f5:56:81:37:41:de: 16:99:3f:c8:68:ef:89:0c:85:08:51:23:e7:bd:bf: 15:2c:8f:81:30:43:88:b1:31:58:d4:11:40:ed:e8: 21:36:a5:e7:f7:cb:94:0f:8f:4a:04:7d:64:88:07: 7d:f9:45:31:5d:8c:d8:6b:c5:4f:4e:2d:38:ef:c6: b4:40:67:f7:23:ea:3c:ae:31:d1:0e:0b:d6:8f:8d: 33:3b:a7:a5:7f:bf:23:5c:f0:b7:ff:e6:07:51:fb: d4:c0:3f:11:68:c2:92:90:7d:d5:7c:3c:6d:4a:af: bd:33:8e:47:65:18:1c:23:78:3a:05:9b:72:65:90: a3:a5:46:c3:3b:e8:86:43:84:27:4a:d3:26:2d:4a: 3b:86:9e:6e:94:9d:86:24:df:a0:c9:1d:3b:3e:a0: 79:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:AD:E2:5A:5A:8B:F7:0A:D9:FE:3F:69:B1:2B:C5:FE:74:A1:EC:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2aa41ac1-6065-3e18-962d-b559ca1f1a83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:0e:bc:3c:4d:1a:e6:48:8b:7e:15:a4:94:41:fc:1a:a1:3f: 31:96:ba:82:36:56:e8:e6:39:c4:4f:b1:0a:bd:b2:be:6d:96: db:29:32:65:2b:c6:17:31:db:c1:87:e2:ec:2c:80:db:7d:2b: df:3f:c8:62:b8:85:95:90:9f:1f:11:70:45:b5:05:9d:cf:e5: 6c:97:1e:25:b2:c7:b9:24:4e:75:26:06:88:f2:53:fe:b7:f0: 3b:90:64:a4:f4:34:12:fc:0a:59:70:3c:84:fe:f2:fd:39:ee: ed:5c:eb:3f:19:bb:0b:cb:15:6d:92:58:14:17:60:65:f5:c5: 90:da:e8:97:84:05:53:8d:04:af:35:4d:23:05:46:1c:a1:1e: d5:95:5c:58:a6:50:75:57:7e:97:d5:dc:d2:09:70:ff:10:47: a1:98:0c:a5:8a:49:3f:d6:5b:46:48:38:94:04:5c:7f:8c:4a: f6:06:7e:94:d6:e4:3b:19:44:bb:1e:bd:23:50:72:f9:a0:eb: 77:40:e1:2e:2b:0b:a8:25:ea:32:3e:03:d8:43:f5:87:50:27: c9:20:db:db:a4:3b:19:be:8c:43:05:43:30:fe:c5:ee:c2:94: 60:d8:64:be:75:be:94:0e:61:2b:b5:72:04:01:d8:68:e5:89: ed:e2:32:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyEOJq1cx1e0GCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk NDdkYzk2MmEtYzY4Yi00Y2ViLThmZTAtZmQwYjYxYzA3ZmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXnASiPzs8wQp1g30LjSjjSwoVvdL29vV+wC 0a4itQro1QLi9JnF2cGy8+mf94VYAdH10kVafGh2m9lf1pqzhtG6lpUGEbJpLsJ4 B+WMVtllGRog8EfojnDRScVlzXPUaL31VoE3Qd4WmT/IaO+JDIUIUSPnvb8VLI+B MEOIsTFY1BFA7eghNqXn98uUD49KBH1kiAd9+UUxXYzYa8VPTi0478a0QGf3I+o8 rjHRDgvWj40zO6elf78jXPC3/+YHUfvUwD8RaMKSkH3VfDxtSq+9M45HZRgcI3g6 BZtyZZCjpUbDO+iGQ4QnStMmLUo7hp5ulJ2GJN+gyR07PqB5mwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDut4lpai/cK2f4/abErxf50oexlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmFhNDFhYzEtNjA2NS0z ZTE4LTk2MmQtYjU1OWNhMWYxYTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUOvDxNGuZIi34VpJRB/BqhPzGWuoI2VujmOcRPsQq9sr5tltspMmUr xhcx28GH4uwsgNt9K98/yGK4hZWQnx8RcEW1BZ3P5WyXHiWyx7kkTnUmBojyU/63 8DuQZKT0NBL8CllwPIT+8v057u1c6z8ZuwvLFW2SWBQXYGX1xZDa6JeEBVONBK81 TSMFRhyhHtWVXFimUHVXfpfV3NIJcP8QR6GYDKWKST/WW0ZIOJQEXH+MSvYGfpTW 5DsZRLsevSNQcvmg63dA4S4rC6gl6jI+A9hD9YdQJ8kg29ukOxm+jEMFQzD+xe7C lGDYZL51vpQOYSu1cgQB2Gjlie3iMtE= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:34 2025 by rpki-client