$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3c3a9ea-119f-31dd-873c-9ae9503d343d.roa File: e3c3a9ea-119f-31dd-873c-9ae9503d343d.roa (raw, json) Hash identifier: lTjUvt9ZWl+MhQ8DeCBM0+14R1BrDj3CJDFHoSc8EaQ= Subject key identifier: E5:39:6B:1D:CE:F9:A0:1C:19:60:14:82:6D:EA:33:78:61:D7:49:04 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848AAFB50C904A49302D3273140 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3c3a9ea-119f-31dd-873c-9ae9503d343d.roa Signing time: Sun 26 Jan 2025 02:00:38 +0000 ROA not before: Sun 26 Jan 2025 02:00:38 +0000 ROA not after: Sat 26 Apr 2025 01:00:38 +0000 asID: 5714 IP address blocks: 66.54.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:aa:fb:50:c9:04:a4:93:02:d3:27:31:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 26 02:00:38 2025 GMT Not After : Apr 26 01:00:38 2025 GMT Subject: CN=10de2a5a-ebd8-43aa-acae-c059f3ab5cd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:f3:9e:58:6f:89:cd:15:c9:f9:57:21:fc: 66:30:bb:e2:2f:55:61:03:23:94:3c:e8:f1:8a:48: de:df:a8:09:01:84:bc:ff:df:c8:9a:d0:1f:2d:f2: 30:9a:f3:5d:c8:83:ee:2d:84:84:74:84:90:22:9e: 2a:42:f6:f0:41:16:12:cf:6d:63:f5:06:f1:74:6e: 07:08:cb:1b:f3:59:c4:7b:65:82:9c:ca:29:a8:68: d7:9b:29:b8:e4:b8:50:48:ad:42:e7:33:1b:10:a3: db:9c:a9:1c:0f:e8:a3:6b:65:32:a2:5f:fe:77:f4: df:bb:c1:af:28:0c:7a:ab:07:31:c8:a0:50:a6:29: 7f:57:40:91:7d:39:0f:8f:cd:9d:4b:7c:9c:63:e1: 59:fe:a2:69:5e:eb:e9:51:e1:ac:02:c7:03:15:8f: 45:ac:e3:a4:40:39:42:10:08:3b:80:0f:ec:b0:f1: 5d:fa:5f:96:50:c8:49:4f:6c:c2:5a:5e:b8:6f:84: d2:6b:6e:80:88:cf:20:59:50:91:9a:52:07:92:11: 7f:d8:8e:33:b5:a1:a3:ef:62:e7:c1:19:f6:5c:95: df:85:2b:53:fb:d1:57:0e:20:95:28:33:30:8e:18: a7:c6:58:92:ba:4f:cc:09:ed:58:f8:58:b3:0b:c5: 9e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:39:6B:1D:CE:F9:A0:1C:19:60:14:82:6D:EA:33:78:61:D7:49:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/e3c3a9ea-119f-31dd-873c-9ae9503d343d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv4: 66.54.4.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:f4:35:d0:ee:1c:06:47:be:db:e8:d2:4e:17:4e:eb:3f:87: 1b:24:de:fe:87:87:9f:3d:aa:49:fb:89:f3:69:75:33:ed:c3: f4:29:d5:fa:1c:96:62:52:8b:b0:00:a0:d3:df:7a:2d:24:fb: d0:a8:7a:35:2a:89:e3:f9:5b:d6:45:22:bb:e3:cb:ed:df:68: 33:59:b3:81:2a:b3:10:c1:ba:56:07:5d:67:64:10:3d:61:a5: 11:06:9e:9c:f9:01:6c:b2:f9:c2:d0:74:5c:49:07:8b:62:8d: a4:fe:dc:40:e1:d8:9e:9d:a5:91:80:09:b3:8d:43:e6:8a:43: 58:a1:95:4f:a6:ba:64:c5:c8:ad:a4:dc:86:8f:f0:35:58:3e: ad:28:4b:a9:71:f2:01:7c:d2:30:24:8b:e4:57:0d:6f:eb:30: 5a:3c:e8:f8:6b:34:7d:90:90:d3:a1:c7:d3:1e:3c:23:77:22: 6b:2b:69:8c:de:1f:52:74:7b:12:ff:4b:f3:54:0e:ec:33:a4: f5:d1:39:bf:d5:c7:7e:77:d5:88:49:1a:6f:ef:a8:96:3e:4f: 1d:5d:31:af:4c:36:b3:8a:6a:3e:e5:ae:33:bc:dd:ca:d6:d2: 76:7b:fb:d5:c7:f2:ae:1e:f6:f5:11:6c:6f:a9:02:88:f0:28: 72:ba:27:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiq+1DJBKSTAtMnMUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDEyNjAyMDAzOFoXDTI1MDQyNjAxMDAzOFowLzEtMCsGA1UEAxMk MTBkZTJhNWEtZWJkOC00M2FhLWFjYWUtYzA1OWYzYWI1Y2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLnznlhvic0VyflXIfxmMLviL1VhAyOUPOjx ikje36gJAYS8/9/ImtAfLfIwmvNdyIPuLYSEdISQIp4qQvbwQRYSz21j9QbxdG4H CMsb81nEe2WCnMopqGjXmym45LhQSK1C5zMbEKPbnKkcD+ija2Uyol/+d/Tfu8Gv KAx6qwcxyKBQpil/V0CRfTkPj82dS3ycY+FZ/qJpXuvpUeGsAscDFY9FrOOkQDlC EAg7gA/ssPFd+l+WUMhJT2zCWl64b4TSa26AiM8gWVCRmlIHkhF/2I4ztaGj72Ln wRn2XJXfhStT+9FXDiCVKDMwjhinxliSuk/MCe1Y+FizC8WeJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOU5ax3O+aAcGWAUgm3qM3hh10kEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZTNjM2E5ZWEtMTE5Zi0z MWRkLTg3M2MtOWFlOTUwM2QzNDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQjYEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv0NdDuHAZHvtvo0k4XTus/hxsk3v6Hh589qkn7ifNpdTPtw/Qp1foc lmJSi7AAoNPfei0k+9CoejUqieP5W9ZFIrvjy+3faDNZs4EqsxDBulYHXWdkED1h pREGnpz5AWyy+cLQdFxJB4tijaT+3EDh2J6dpZGACbONQ+aKQ1ihlU+mumTFyK2k 3IaP8DVYPq0oS6lx8gF80jAki+RXDW/rMFo86PhrNH2QkNOhx9MePCN3ImsraYze H1J0exL/S/NUDuwzpPXROb/Vx3531YhJGm/vqJY+Tx1dMa9MNrOKaj7lrjO83crW 0nZ7+9XH8q4e9vURbG+pAojwKHK6J3M= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:59 2025 by rpki-client