$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa File: c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa (raw, json) Hash identifier: N1VDOoVGI8qa60oNlRitHP6JNYoTUEOWhV8XTEjw5Gk= Subject key identifier: 51:C2:92:D3:A3:DF:29:38:6A:44:23:0C:2E:82:8E:7C:4B:A5:CB:DA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB51D3BF19878D112825C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 3356 IP address blocks: 66.54.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:51:d3:bf:19:87:8d:11:28:25:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=a84ce818-0654-42bf-b7cc-6a688a2b2c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:d9:10:2d:9a:1b:c8:f7:02:9e:d5:f0:23:11: 96:66:cc:04:42:ec:ff:52:1c:f9:eb:6b:29:42:fc: e2:bc:43:94:e1:c6:11:62:05:af:b1:58:3f:fc:a2: d3:54:6e:3a:5d:81:84:a3:df:4f:ae:3b:7e:ca:94: 6b:d7:3b:14:08:64:13:dd:74:68:5d:9d:d1:1b:13: 64:81:87:64:6d:87:7f:e7:ea:41:42:e3:d5:2c:b0: 8a:9e:10:dd:06:a7:ba:89:7f:6a:3d:a5:d5:0a:63: 29:1c:dc:0c:2b:45:19:c7:fc:02:66:21:ff:e3:51: 3d:42:d4:cc:41:ad:d3:c1:ef:3e:51:22:ac:13:e8: a7:69:3d:74:7d:ed:29:96:77:2b:dd:c8:17:c4:ee: 25:97:c4:9b:56:e7:ec:70:43:29:e3:73:9c:91:27: eb:d6:38:89:b0:7b:ab:0f:2a:ce:72:52:0d:4d:9c: 59:9d:6f:ec:2b:45:9f:c9:c3:e0:b6:90:47:0b:2b: 41:23:94:ff:5a:bc:7f:81:2b:e0:bb:14:28:5e:cc: 6f:ff:4c:e5:d0:ee:c9:b7:0a:36:8e:e4:5e:5d:d2: 1d:c2:36:0f:49:cc:81:71:52:b8:a4:f9:e5:a1:d4: f8:9e:f0:5c:c1:c1:ac:97:91:6c:db:a8:87:35:8f: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C2:92:D3:A3:DF:29:38:6A:44:23:0C:2E:82:8E:7C:4B:A5:CB:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c4d680ea-39f1-3c1c-8caa-52da1ec4a06a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:d3:55:1c:b0:46:ef:fe:8a:04:4f:a6:06:84:21:3c:08:72: 35:53:d6:10:65:bc:84:a3:a0:1d:8d:f0:a5:53:0b:db:68:b0: bf:00:17:f8:07:3a:38:f3:1b:c5:8c:69:41:5e:1b:56:dd:09: 9c:46:87:a0:a7:04:d3:84:7d:e3:f2:ac:f8:88:30:89:47:97: e5:dc:ba:a7:c2:94:e7:a0:1b:bb:cb:5e:19:04:10:5c:7c:b2: 59:64:dc:71:cf:24:e5:6c:3e:1f:13:e7:b6:75:5d:f9:d1:be: e7:75:27:e6:81:83:4f:e6:13:8f:4c:e3:3a:47:e0:50:a7:6c: 8c:ff:6c:b9:e4:54:73:a6:d2:a1:cd:a6:1e:64:a5:cf:6d:cd: 82:80:63:df:32:e0:1f:a5:a1:57:56:26:e4:af:b4:79:64:f6: f3:1c:b4:25:b8:a1:b5:19:92:10:e3:99:ec:84:c4:d2:7d:7c: 10:97:b1:cc:9a:c3:cb:76:21:f7:27:30:f3:f5:49:d4:78:f1: ea:a5:64:a6:89:88:c4:39:63:dd:34:5d:98:78:34:63:2d:24: 33:f8:8a:29:21:ee:8d:78:ca:01:59:77:92:3d:9f:33:5f:a9: 64:e9:34:5f:e8:17:2f:43:32:c3:af:d6:de:b5:a8:15:8c:8b: cd:c9:5d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1HTvxmHjREoJcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk YTg0Y2U4MTgtMDY1NC00MmJmLWI3Y2MtNmE2ODhhMmIyYzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09kQLZobyPcCntXwIxGWZswEQuz/Uhz562sp QvzivEOU4cYRYgWvsVg//KLTVG46XYGEo99Prjt+ypRr1zsUCGQT3XRoXZ3RGxNk gYdkbYd/5+pBQuPVLLCKnhDdBqe6iX9qPaXVCmMpHNwMK0UZx/wCZiH/41E9QtTM Qa3Twe8+USKsE+inaT10fe0plncr3cgXxO4ll8SbVufscEMp43OckSfr1jiJsHur DyrOclINTZxZnW/sK0WfycPgtpBHCytBI5T/Wrx/gSvguxQoXsxv/0zl0O7Jtwo2 juReXdIdwjYPScyBcVK4pPnlodT4nvBcwcGsl5Fs26iHNY9Y0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFHCktOj3yk4akQjDC6CjnxLpcvaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzRkNjgwZWEtMzlmMS0z YzFjLThjYWEtNTJkYTFlYzRhMDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnTVRywRu/+igRPpgaEITwIcjVT1hBlvISjoB2N8KVTC9tosL8AF/gH OjjzG8WMaUFeG1bdCZxGh6CnBNOEfePyrPiIMIlHl+XcuqfClOegG7vLXhkEEFx8 sllk3HHPJOVsPh8T57Z1XfnRvud1J+aBg0/mE49M4zpH4FCnbIz/bLnkVHOm0qHN ph5kpc9tzYKAY98y4B+loVdWJuSvtHlk9vMctCW4obUZkhDjmeyExNJ9fBCXscya w8t2IfcnMPP1SdR48eqlZKaJiMQ5Y900XZh4NGMtJDP4iikh7o14ygFZd5I9nzNf qWTpNF/oFy9DMsOv1t61qBWMi83JXXk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:04 2025 by rpki-client