$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa File: c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa (raw, json) Hash identifier: /oNTSoA72pjykMq/ypzs8hwCbD2W0yWe1W/IHxcW/4k= Subject key identifier: F7:EF:20:93:40:0A:C8:B6:3F:87:43:8B:18:BE:6B:72:60:03:3F:DD Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B20BDF147547AFA8F6C80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 66.54.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:20:bd:f1:47:54:7a:fa:8f:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=f027d211-e00b-4c56-9788-d3a20302f909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:02:6c:77:73:d3:15:cb:48:87:da:76:18:6f: d6:f4:14:77:cd:93:b3:0f:00:ef:4d:52:89:43:6e: d5:9d:9f:6d:c3:c5:2b:e7:39:42:8d:8a:7c:32:3b: ff:63:1a:33:08:e5:d4:7d:81:0e:5d:ea:54:c3:57: ca:2f:1b:ee:7d:2f:56:71:d9:47:ac:5f:37:97:88: e0:ea:41:b7:61:27:ed:86:92:a8:bc:a0:11:c5:b1: 13:5d:49:80:fe:93:f7:8f:73:f2:58:d0:e7:ee:5a: a3:64:0b:46:6b:38:fa:c3:f7:e6:e1:16:ec:08:70: 16:81:ba:c2:1f:aa:46:4a:30:45:ea:8c:5b:8e:a3: 3d:72:49:49:07:00:7e:ed:ca:b3:99:ba:d3:65:52: 8e:c2:d6:99:31:e0:24:f0:73:a3:ca:be:a6:32:a9: ef:d4:23:18:31:f0:86:7e:69:a5:71:33:52:62:ef: 0f:6d:56:df:b2:85:2d:44:98:80:6f:a7:7a:8d:69: fb:57:28:25:9d:3d:5b:98:b0:3a:6c:c8:74:26:27: 68:13:57:c2:25:b1:aa:a0:8e:ae:a5:30:e1:81:9d: 36:e0:b5:59:07:c1:4c:9b:a1:9f:8e:ef:63:01:64: 15:83:ba:05:fe:9e:e6:b3:a0:cf:9f:5b:68:f6:27: ff:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:20:93:40:0A:C8:B6:3F:87:43:8B:18:BE:6B:72:60:03:3F:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c3d4af1f-8918-30f0-8140-8675c61f3fb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:28:05:74:9c:0f:53:ba:65:ef:e0:b6:31:73:8e:cd:b5:a1: f3:11:27:ea:0e:89:92:e6:fa:53:62:4f:75:06:9b:65:10:61: 77:16:61:9d:5d:2a:74:fc:92:be:66:ac:55:16:09:c4:d0:0c: fd:79:4a:2b:72:68:71:fd:e8:55:40:a2:d1:bd:34:48:25:89: cb:2e:8e:31:f9:4d:9b:22:51:00:84:60:20:b5:83:52:71:a4: 69:88:fc:98:6b:5c:ae:0a:dc:56:0a:a7:03:6b:97:20:09:82: c9:9c:19:07:ca:0b:f3:13:25:db:85:54:a3:20:7a:2d:13:59: c5:b2:5e:d5:7a:53:80:84:9d:02:c0:e1:2d:9d:ec:0c:95:d4: bc:39:f0:64:78:ce:3d:5a:4a:ff:cc:77:07:e1:bc:e5:1f:16: ca:74:8c:bf:7e:9b:fc:82:c9:ef:b5:15:42:a1:cd:9f:2e:e1: ca:f2:6c:16:58:93:54:57:5d:0e:c3:b5:dc:16:43:23:7e:65: a3:c4:f6:3d:47:8f:30:c8:ff:8b:07:22:86:8e:e3:a7:de:8d: b2:3b:cc:c8:70:d2:87:e7:b1:76:99:a6:c2:d6:7a:2a:7f:ba: b5:da:24:7e:d8:4f:b6:35:cd:19:18:91:3f:43:8d:77:f5:d5: 70:44:7b:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyC98UdUevqPbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk ZjAyN2QyMTEtZTAwYi00YzU2LTk3ODgtZDNhMjAzMDJmOTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAJsd3PTFctIh9p2GG/W9BR3zZOzDwDvTVKJ Q27VnZ9tw8Ur5zlCjYp8Mjv/YxozCOXUfYEOXepUw1fKLxvufS9WcdlHrF83l4jg 6kG3YSfthpKovKARxbETXUmA/pP3j3PyWNDn7lqjZAtGazj6w/fm4RbsCHAWgbrC H6pGSjBF6oxbjqM9cklJBwB+7cqzmbrTZVKOwtaZMeAk8HOjyr6mMqnv1CMYMfCG fmmlcTNSYu8PbVbfsoUtRJiAb6d6jWn7VyglnT1bmLA6bMh0JidoE1fCJbGqoI6u pTDhgZ024LVZB8FMm6Gfju9jAWQVg7oF/p7ms6DPn1to9if/9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPfvIJNACsi2P4dDixi+a3JgAz/dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzNkNGFmMWYtODkxOC0z MGYwLTgxNDAtODY3NWM2MWYzZmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHooBXScD1O6Ze/gtjFzjs21ofMRJ+oOiZLm+lNiT3UGm2UQYXcWYZ1d KnT8kr5mrFUWCcTQDP15SityaHH96FVAotG9NEglicsujjH5TZsiUQCEYCC1g1Jx pGmI/JhrXK4K3FYKpwNrlyAJgsmcGQfKC/MTJduFVKMgei0TWcWyXtV6U4CEnQLA 4S2d7AyV1Lw58GR4zj1aSv/MdwfhvOUfFsp0jL9+m/yCye+1FUKhzZ8u4crybBZY k1RXXQ7DtdwWQyN+ZaPE9j1HjzDI/4sHIoaO46fejbI7zMhw0ofnsXaZpsLWeip/ urXaJH7YT7Y1zRkYkT9DjXf11XBEe6E= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:27 2025 by rpki-client