$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa File: 4200f42a-72f5-310d-bd4e-143e66d1251c.roa (raw, json) Hash identifier: z/aVr9kG0cbrXj1p9nET8rBuGVQJX8geSunWqysppuw= Subject key identifier: 7D:2F:6A:8A:5B:72:04:E4:D9:88:88:59:BE:07:52:23:88:70:67:BE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB523D7B5289AFC0FB8180 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:52:3d:7b:52:89:af:c0:fb:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=b4bf4c9d-7357-449c-a534-95faae42ff6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bd:e5:82:8e:f5:cb:9c:93:a8:c0:81:fe:66: fc:1d:1e:2f:07:54:e2:d2:56:38:e2:4c:cf:d0:95: ef:4f:58:49:20:29:bf:53:22:56:62:65:56:66:28: 3a:23:4e:1d:7f:b9:72:60:fe:7e:ed:eb:83:82:88: a8:c7:b3:c0:55:87:95:05:41:c9:78:ac:99:df:24: 88:80:13:3c:35:33:55:c4:86:c1:f6:96:4f:da:f0: 3d:85:ce:8e:1e:09:af:48:a3:be:3f:ed:b1:5a:1a: c3:2a:58:83:78:08:fe:df:50:40:65:f5:a0:43:9a: 0e:1f:e4:76:13:04:93:81:4a:a7:cc:38:04:2f:7c: 52:3e:f6:1c:a7:db:1f:33:45:15:07:42:c7:04:ba: 07:de:01:d5:43:9f:d1:9a:59:e2:b3:ea:1d:21:e0: 6b:4e:9c:76:77:fc:4e:11:c0:7f:c0:fd:c9:b9:10: 32:e7:a5:71:64:e8:a6:54:11:aa:af:ff:fd:18:5a: 78:48:3c:e9:a8:8b:4f:78:b9:c0:52:26:61:c2:39: 7e:3c:04:ba:6b:7b:1b:20:a0:97:01:a0:c5:51:8c: 89:91:1c:6f:1b:a7:fb:43:52:4b:eb:b7:2b:5a:4e: 3c:5f:b0:88:c6:a0:29:09:61:4e:f7:24:db:93:38: 2d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:2F:6A:8A:5B:72:04:E4:D9:88:88:59:BE:07:52:23:88:70:67:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4200f42a-72f5-310d-bd4e-143e66d1251c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f6:98:7a:21:8d:57:a0:d9:04:8b:1e:84:be:8f:a8:9d:af: 7d:13:48:6a:cf:1f:05:a1:57:e3:9e:71:7a:51:de:01:35:37: b9:e5:36:9a:5c:0b:14:98:44:d6:bb:22:9e:b9:5c:71:e7:2e: 1a:4d:7a:1c:0d:19:c7:41:a2:5b:36:1e:e8:04:ae:6b:dd:ca: 44:df:28:20:cb:f0:48:0a:7f:d8:69:44:4a:4e:f5:10:58:ac: 9f:ac:28:6e:41:8e:2a:fa:10:76:f4:52:4f:b0:84:16:dc:68: 8c:5f:02:41:bb:5d:5b:41:cf:a4:f6:f2:b4:60:e0:fa:fc:8e: 63:26:56:fe:3a:0f:53:d8:c2:43:96:87:9e:2e:a0:94:fc:c3: 0b:d3:3f:da:58:e3:8a:a7:5c:7b:3e:c7:91:a2:c7:f0:4d:63: b6:9b:b6:7e:4a:fe:04:f9:ed:b7:57:45:9b:4b:c4:03:af:42: 7a:3d:d8:fe:b4:fb:8e:e4:e5:3d:f4:43:78:b3:95:91:e6:46: 1d:e6:31:ae:e0:e2:e6:72:b7:4b:40:57:2e:03:d9:29:68:76: b9:65:74:e7:7a:d8:1c:04:d9:25:3f:74:93:04:5e:d4:b4:76: b5:23:3b:9b:05:48:61:16:e6:d0:28:32:29:0b:85:cc:90:92: 9f:a0:a0:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1I9e1KJr8D7gYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YjRiZjRjOWQtNzM1Ny00NDljLWE1MzQtOTVmYWFlNDJmZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL3lgo71y5yTqMCB/mb8HR4vB1Ti0lY44kzP 0JXvT1hJICm/UyJWYmVWZig6I04df7lyYP5+7euDgoiox7PAVYeVBUHJeKyZ3ySI gBM8NTNVxIbB9pZP2vA9hc6OHgmvSKO+P+2xWhrDKliDeAj+31BAZfWgQ5oOH+R2 EwSTgUqnzDgEL3xSPvYcp9sfM0UVB0LHBLoH3gHVQ5/Rmlnis+odIeBrTpx2d/xO EcB/wP3JuRAy56VxZOimVBGqr//9GFp4SDzpqItPeLnAUiZhwjl+PAS6a3sbIKCX AaDFUYyJkRxvG6f7Q1JL67crWk48X7CIxqApCWFO9yTbkzgtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH0vaopbcgTk2YiIWb4HUiOIcGe+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDIwMGY0MmEtNzJmNS0z MTBkLWJkNGUtMTQzZTY2ZDEyNTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADP2mHohjVeg2QSLHoS+j6idr30TSGrPHwWhV+OecXpR3gE1N7nlNppc CxSYRNa7Ip65XHHnLhpNehwNGcdBols2HugErmvdykTfKCDL8EgKf9hpREpO9RBY rJ+sKG5Bjir6EHb0Uk+whBbcaIxfAkG7XVtBz6T28rRg4Pr8jmMmVv46D1PYwkOW h54uoJT8wwvTP9pY44qnXHs+x5Gix/BNY7abtn5K/gT57bdXRZtLxAOvQno92P60 +47k5T30Q3izlZHmRh3mMa7g4uZyt0tAVy4D2SlodrlldOd62BwE2SU/dJMEXtS0 drUjO5sFSGEW5tAoMikLhcyQkp+goKs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:25 2025 by rpki-client