$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa File: 42789907-da5f-313f-a7e5-215d3a4c5cf5.roa (raw, json) Hash identifier: halRY9GnDAsEQ/GSpL535R8SkLtbXgMwD+7V8vmoFeQ= Subject key identifier: 5B:7A:7C:A5:8B:4E:33:C6:F8:E3:9D:A8:60:25:3C:DB:FF:F5:4A:D3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB517B668B5E670DCDFA80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 202 IP address blocks: 66.54.16.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:51:7b:66:8b:5e:67:0d:cd:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=772ed572-c74b-4edd-87e9-1c74dd87a392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:e6:bf:59:63:b3:bc:02:72:a1:17:c9:2e:39: 42:8f:55:82:20:fe:e2:a6:8e:4a:4e:f7:5c:5a:82: c4:21:16:59:30:21:12:7c:1e:55:a4:e6:98:06:c7: 8b:a2:7b:71:5f:26:f5:2d:fd:48:ac:fc:70:ab:f1: fc:d1:61:1c:22:08:6e:e6:4a:9c:57:a5:1e:94:32: db:a2:88:01:c8:88:8e:ad:3a:a8:cc:89:47:63:5b: 9b:93:a7:60:97:38:d4:d9:a4:d9:fc:70:67:6d:5f: 9e:33:12:02:b1:37:c8:bc:c1:60:1e:a0:bd:d3:a6: 77:9c:90:61:e4:4c:5c:b1:86:9f:3a:0d:ca:8c:a9: 7a:c6:a0:1d:06:73:4c:60:bd:9f:ed:9d:30:65:f4: 81:36:52:20:04:e3:ae:af:30:2e:e8:1c:87:1e:e5: 10:ab:e0:48:7e:ab:1f:f8:f5:b0:c9:03:94:7d:d4: 7e:6e:15:55:c2:d0:56:f6:05:95:4d:b1:c6:77:d2: 92:87:54:dc:71:8b:4e:58:7c:f3:98:a5:7a:4c:46: e0:d3:ed:15:c6:f5:80:0b:9d:5f:6e:5f:e0:85:9a: 89:e6:45:e7:76:37:eb:68:40:7f:65:42:0b:60:97: 93:15:9d:ee:5b:21:ed:fb:02:d6:f9:f4:73:b0:92: bd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7A:7C:A5:8B:4E:33:C6:F8:E3:9D:A8:60:25:3C:DB:FF:F5:4A:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/42789907-da5f-313f-a7e5-215d3a4c5cf5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:cb:6b:7a:ff:14:b7:f5:11:d5:bb:77:de:a8:78:cd:35:01: d0:e4:64:05:d6:00:db:cc:17:34:d3:bb:8c:60:87:c7:75:c8: de:73:e4:21:6e:2e:90:00:e4:72:e3:84:d5:09:99:af:0e:4a: 7a:57:2e:91:6e:7f:e1:84:9c:2c:7f:51:cf:15:6e:ef:9d:30: fd:e9:36:f5:ea:e4:81:39:8c:f2:90:a9:64:7d:b8:a5:df:e5: fc:ce:4d:30:d5:c4:9b:73:b8:d4:ca:d2:38:78:e4:26:05:2a: a3:17:44:80:30:b5:9b:9e:12:e5:e2:3e:ce:74:f4:93:76:5a: a2:4b:d9:5d:14:0f:3a:6a:0f:1e:ea:d9:b2:9a:f9:4a:42:0f: 1e:a3:bc:7c:a9:cf:66:0d:a1:5b:3f:d7:2b:01:66:53:30:3c: c4:09:61:27:49:cb:d3:35:3d:c5:39:c2:72:40:dd:8b:dd:93: 19:8d:c3:3f:dc:68:ac:06:4b:5b:2a:f5:b0:b7:c1:98:94:95: 84:33:b2:04:36:c3:2c:f0:18:44:33:47:c8:a5:60:fa:4b:cd: 32:b1:18:11:b3:0d:35:d1:20:72:81:3a:2c:60:52:c0:07:ac: 88:75:a4:df:44:51:a1:de:4f:63:46:e1:62:86:6e:ce:24:d2: 44:e5:c2:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1F7ZoteZw3N+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk NzcyZWQ1NzItYzc0Yi00ZWRkLTg3ZTktMWM3NGRkODdhMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Oa/WWOzvAJyoRfJLjlCj1WCIP7ipo5KTvdc WoLEIRZZMCESfB5VpOaYBseLontxXyb1Lf1IrPxwq/H80WEcIghu5kqcV6UelDLb oogByIiOrTqozIlHY1ubk6dglzjU2aTZ/HBnbV+eMxICsTfIvMFgHqC906Z3nJBh 5ExcsYafOg3KjKl6xqAdBnNMYL2f7Z0wZfSBNlIgBOOurzAu6ByHHuUQq+BIfqsf +PWwyQOUfdR+bhVVwtBW9gWVTbHGd9KSh1TccYtOWHzzmKV6TEbg0+0VxvWAC51f bl/ghZqJ5kXndjfraEB/ZUILYJeTFZ3uWyHt+wLW+fRzsJK9KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFt6fKWLTjPG+OOdqGAlPNv/9UrTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNDI3ODk5MDctZGE1Zi0z MTNmLWE3ZTUtMjE1ZDNhNGM1Y2Y1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbLa3r/FLf1EdW7d96oeM01AdDkZAXWANvMFzTTu4xgh8d1yN5z5CFu LpAA5HLjhNUJma8OSnpXLpFuf+GEnCx/Uc8Vbu+dMP3pNvXq5IE5jPKQqWR9uKXf 5fzOTTDVxJtzuNTK0jh45CYFKqMXRIAwtZueEuXiPs509JN2WqJL2V0UDzpqDx7q 2bKa+UpCDx6jvHypz2YNoVs/1ysBZlMwPMQJYSdJy9M1PcU5wnJA3YvdkxmNwz/c aKwGS1sq9bC3wZiUlYQzsgQ2wyzwGEQzR8ilYPpLzTKxGBGzDTXRIHKBOixgUsAH rIh1pN9EUaHeT2NG4WKGbs4k0kTlwr8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:25 2025 by rpki-client