$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30c9cbcc-1003-39d6-a183-40d683485071.roa File: 30c9cbcc-1003-39d6-a183-40d683485071.roa (raw, json) Hash identifier: Z4zeS8FB4L+W1CmgxnllpPMMiGTWLERR18pvahM+xBE= Subject key identifier: 33:26:CA:72:9D:AF:B4:83:26:E6:BB:A0:82:3E:07:63:6B:08:DB:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2152777BE0575EF31140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30c9cbcc-1003-39d6-a183-40d683485071.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 203 IP address blocks: 66.54.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:21:52:77:7b:e0:57:5e:f3:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=1c8edcc5-f1ca-4c45-8a33-9b06c464449c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:c8:b6:75:c6:ba:cc:cd:87:42:eb:c8:2a:c0: 67:90:81:42:61:f9:3d:87:52:92:d3:c0:d4:24:2c: 4f:b6:79:ba:d4:24:d7:34:ea:54:47:ee:d9:73:2b: aa:49:0b:db:bf:cc:19:b3:c1:e0:a2:4d:4d:d9:43: 86:67:6e:b8:fc:bc:39:99:55:b1:73:42:a5:14:94: 89:1f:c4:c6:94:ad:14:1b:85:75:12:56:b2:6e:01: 35:fa:d8:60:70:d2:51:35:72:a1:22:fd:b9:91:f0: bd:1d:00:ac:24:76:1d:88:90:d0:3d:54:f5:ef:5e: 58:36:3a:9f:26:74:04:94:e9:b4:78:5a:57:df:af: 41:74:31:f3:23:e7:9b:26:8e:fc:ff:2c:d6:e5:37: 27:c0:57:d1:af:5a:1e:09:2b:4b:41:a4:49:6f:92: ed:d4:f9:a6:c8:6b:4f:d4:98:4d:54:7b:e7:64:f8: b9:a1:77:86:d1:86:f5:78:59:54:94:eb:2b:33:50: 0e:a8:a6:04:6e:b1:62:c5:ef:f1:b0:29:33:9d:61: 61:28:ff:84:e9:61:65:e3:42:2e:64:1d:e3:b9:b1: d2:f2:56:fe:ab:80:40:6e:2f:62:9a:fe:b0:62:f4: 01:a8:92:30:57:a0:a5:a4:39:84:a2:7b:3c:f0:55: 91:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:26:CA:72:9D:AF:B4:83:26:E6:BB:A0:82:3E:07:63:6B:08:DB:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/30c9cbcc-1003-39d6-a183-40d683485071.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:5c:91:07:f6:08:19:15:51:6e:e6:ca:6b:9e:e9:78:c1:20: 88:46:f8:7f:3a:ab:2f:9c:00:de:f6:25:8a:a6:8d:d2:d9:2f: a3:c7:89:66:ad:ab:73:bc:09:6b:bd:69:85:03:c6:3c:1b:b0: fb:d3:24:c4:5e:e1:83:7a:96:b8:0f:eb:47:06:09:e3:42:ba: 7c:07:68:08:74:72:7a:be:53:32:7d:0b:cc:f0:39:9b:93:35: 9c:3a:c3:3f:e8:0b:fc:be:62:d5:3d:3b:36:39:5b:e5:04:f7: f0:1b:ac:b3:08:2a:39:a8:18:be:ae:c5:a5:0d:14:ce:c0:59: 29:82:6a:92:d7:40:f2:48:ff:4b:1a:92:c5:0d:73:58:4e:59: 25:68:b0:41:dd:3f:31:a5:d7:5d:e0:34:87:d9:d6:31:e6:47: 39:73:c6:b7:92:98:12:83:08:09:20:75:88:b5:51:9b:8c:8a: ab:74:7b:c8:9a:54:ef:dc:78:3d:59:a5:21:c1:be:b4:9c:e5: a4:34:3c:d3:3a:42:a3:33:d1:e0:97:9a:c8:59:8b:74:3d:92: 6b:bb:84:b3:48:07:2b:90:a7:5b:6b:5d:23:0b:b2:d1:c8:bf: c8:da:bb:b1:0a:9e:11:bc:da:e1:1c:fd:ef:66:ea:91:e2:35: e4:39:41:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyFSd3vgV17zEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MWM4ZWRjYzUtZjFjYS00YzQ1LThhMzMtOWIwNmM0NjQ0NDljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ci2dca6zM2HQuvIKsBnkIFCYfk9h1KS08DU JCxPtnm61CTXNOpUR+7ZcyuqSQvbv8wZs8Hgok1N2UOGZ264/Lw5mVWxc0KlFJSJ H8TGlK0UG4V1ElaybgE1+thgcNJRNXKhIv25kfC9HQCsJHYdiJDQPVT1715YNjqf JnQElOm0eFpX369BdDHzI+ebJo78/yzW5TcnwFfRr1oeCStLQaRJb5Lt1PmmyGtP 1JhNVHvnZPi5oXeG0Yb1eFlUlOsrM1AOqKYEbrFixe/xsCkznWFhKP+E6WFl40Iu ZB3jubHS8lb+q4BAbi9imv6wYvQBqJIwV6ClpDmEons88FWRuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMmynKdr7SDJua7oII+B2NrCNsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzBjOWNiY2MtMTAwMy0z OWQ2LWExODMtNDBkNjgzNDg1MDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFpckQf2CBkVUW7mymue6XjBIIhG+H86qy+cAN72JYqmjdLZL6PHiWat q3O8CWu9aYUDxjwbsPvTJMRe4YN6lrgP60cGCeNCunwHaAh0cnq+UzJ9C8zwOZuT NZw6wz/oC/y+YtU9OzY5W+UE9/AbrLMIKjmoGL6uxaUNFM7AWSmCapLXQPJI/0sa ksUNc1hOWSVosEHdPzGl113gNIfZ1jHmRzlzxreSmBKDCAkgdYi1UZuMiqt0e8ia VO/ceD1ZpSHBvrSc5aQ0PNM6QqMz0eCXmshZi3Q9kmu7hLNIByuQp1trXSMLstHI v8jau7EKnhG82uEc/e9m6pHiNeQ5QXI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:32:31 2025 by rpki-client