$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa File: 5d42f217-5b0b-33b5-aa80-14a09bf89398.roa (raw, json) Hash identifier: d3Hn8hyPNFtJpS3SLG7a2qApVXh9f8Fjc2xKftbzmgA= Subject key identifier: EE:41:BE:2C:35:7A:CF:33:54:D3:73:36:62:CF:8B:6E:8E:B7:22:36 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584A698B2100A0A542B24AC84D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa Signing time: Sat 05 Jul 2025 01:00:50 +0000 ROA not before: Sat 05 Jul 2025 01:00:50 +0000 ROA not after: Fri 03 Oct 2025 01:00:50 +0000 asID: 202 IP address blocks: 66.54.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 01 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:69:8b:21:00:a0:a5:42:b2:4a:c8:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 5 01:00:50 2025 GMT Not After : Oct 3 01:00:50 2025 GMT Subject: CN=022b31d9-c858-4f8f-a72c-060ccc5d4f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:76:7a:af:1b:68:04:a1:8a:f3:1c:e1:f6:d8: 50:4a:6e:4f:41:27:22:78:3b:97:f5:fd:ba:7a:a0: d6:8d:a8:af:2d:e6:d9:bc:cc:9d:fd:d7:0a:d9:41: cb:ba:1c:84:54:f2:21:9e:58:90:79:ed:0a:73:0d: dc:ea:7c:52:e4:80:2b:77:ae:07:be:0d:1a:85:07: a8:29:c3:c8:75:2b:c9:cf:04:ea:9f:e7:ca:59:d3: 96:f2:0b:2a:c2:e8:2d:a6:8c:e7:4c:2f:92:56:58: 9f:39:0b:29:cb:d5:72:3e:88:c4:2a:93:c4:53:74: 13:57:7c:dd:83:33:b1:f9:72:a8:34:59:4c:a7:5b: 7a:f9:02:00:04:2a:3e:2c:22:b9:43:eb:21:f3:6c: 14:5f:2f:13:af:93:15:5a:a4:3a:2f:b9:83:8a:0c: 58:64:8b:60:d8:74:0a:86:8e:27:f2:0b:2a:73:9e: 66:40:83:ca:f8:70:c7:59:ac:e0:3a:31:b5:46:bd: 6d:72:84:ea:da:a5:eb:09:56:15:48:41:c9:6f:7a: cd:0d:2f:d7:af:8e:dd:46:ef:41:ae:7f:00:ce:c5: 2d:51:87:4f:a3:a8:86:69:af:e3:b8:8e:ba:d9:28: ec:f1:5d:22:a7:47:e2:7e:0e:75:1f:e6:6c:80:46: 9e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:41:BE:2C:35:7A:CF:33:54:D3:73:36:62:CF:8B:6E:8E:B7:22:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d42f217-5b0b-33b5-aa80-14a09bf89398.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:1f:ed:42:73:94:94:80:a0:52:cb:55:95:f9:f0:28:8e:65: 11:ff:91:17:fa:4e:1d:16:1d:c4:80:8c:ca:d6:52:9f:9a:b4: a9:5b:99:c1:d8:c6:e3:b5:69:d8:1f:14:d7:59:23:e2:e0:ce: e3:f1:15:95:6e:22:3b:44:c4:be:43:cc:7e:96:cc:72:c7:9d: 45:cd:57:30:cd:76:ec:45:1f:d5:7d:af:0a:87:fd:13:20:bd: 6c:5a:ea:3c:6b:27:d4:dd:40:d3:e7:5b:c3:1b:af:13:0c:aa: f3:df:d6:77:c0:b5:03:9a:7b:dc:cb:43:3b:0e:57:e5:74:40: 30:f4:28:a4:db:97:42:17:22:9c:96:cd:47:c7:75:f2:7c:65: 7c:7b:9e:62:14:14:20:37:eb:02:c4:e6:3d:1b:6e:30:63:d8: 82:a4:a7:61:fe:79:e3:af:35:46:58:e6:a8:60:66:1f:54:f6: 4a:01:77:ff:06:76:93:1e:93:f1:17:ad:d0:74:6b:4f:45:be: 99:77:20:9d:c7:a4:03:4d:0c:ef:1a:8d:8c:1c:18:b7:e6:68: d5:13:f1:c9:e9:d5:3a:b8:ad:54:1c:8b:12:0f:c5:d8:85:b5: 4d:97:cf:57:d5:a6:d2:e2:80:e0:24:ec:78:9a:d7:5b:a2:43: 1b:37:8b:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppiyEAoKVCskrITYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk MDIyYjMxZDktYzg1OC00ZjhmLWE3MmMtMDYwY2NjNWQ0ZjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHZ6rxtoBKGK8xzh9thQSm5PQScieDuX9f26 eqDWjaivLebZvMyd/dcK2UHLuhyEVPIhnliQee0Kcw3c6nxS5IArd64Hvg0ahQeo KcPIdSvJzwTqn+fKWdOW8gsqwugtpoznTC+SVlifOQspy9VyPojEKpPEU3QTV3zd gzOx+XKoNFlMp1t6+QIABCo+LCK5Q+sh82wUXy8Tr5MVWqQ6L7mDigxYZItg2HQK ho4n8gsqc55mQIPK+HDHWazgOjG1Rr1tcoTq2qXrCVYVSEHJb3rNDS/Xr47dRu9B rn8AzsUtUYdPo6iGaa/juI662Sjs8V0ip0fifg51H+ZsgEaenQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5Bviw1es8zVNNzNmLPi26OtyI2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWQ0MmYyMTctNWIwYi0z M2I1LWFhODAtMTRhMDliZjg5Mzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEf7UJzlJSAoFLLVZX58CiOZRH/kRf6Th0WHcSAjMrWUp+atKlbmcHY xuO1adgfFNdZI+LgzuPxFZVuIjtExL5DzH6WzHLHnUXNVzDNduxFH9V9rwqH/RMg vWxa6jxrJ9TdQNPnW8MbrxMMqvPf1nfAtQOae9zLQzsOV+V0QDD0KKTbl0IXIpyW zUfHdfJ8ZXx7nmIUFCA36wLE5j0bbjBj2IKkp2H+eeOvNUZY5qhgZh9U9koBd/8G dpMek/EXrdB0a09Fvpl3IJ3HpANNDO8ajYwcGLfmaNUT8cnp1Tq4rVQcixIPxdiF tU2Xz1fVptLigOAk7Hia11uiQxs3i6s= -----END CERTIFICATE-----Generated at Wed Jul 30 23:45:54 2025 by rpki-client