$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa File: 0fc7a04e-899b-3caf-8bef-f6987972d566.roa (raw, json) Hash identifier: nCVWUJXqoLnkYjd3PmpBVNS01tJO7f7FMylLD0jWslQ= Subject key identifier: 01:77:FC:7C:C2:6F:41:99:6F:93:71:CE:CF:1E:59:40:AA:95:9C:E2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC3691B7B0694B164DB030 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 2607:f028:101::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:36:91:b7:b0:69:4b:16:4d:b0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=37c4fa59-e8df-4134-a02c-d26a3db6d503 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d9:a0:00:f3:6a:31:aa:b9:ce:74:e9:10:53: 93:3f:98:58:34:d6:07:18:44:22:0b:dc:7c:d5:58: 93:cc:8b:ed:03:48:63:4e:33:50:83:ad:a2:37:8f: 9d:fe:da:60:75:b4:13:d1:e1:0b:8e:d0:69:7f:07: 71:4e:98:a0:1b:0a:62:37:83:6e:2f:ac:46:22:5b: a3:8c:82:f3:11:04:0a:14:8a:56:a4:f6:e3:4d:08: 45:79:a4:9a:cf:be:cc:16:67:33:14:f9:7b:b2:78: b3:f8:de:2b:52:b3:97:a0:14:eb:df:87:36:01:f3: a7:9b:de:35:66:0b:39:8e:c2:47:33:49:05:6f:e7: e9:fb:9e:bb:8e:34:6c:ce:67:5d:a7:c3:aa:87:ce: c6:d7:e3:95:7f:19:ff:62:ba:02:5b:2c:40:0f:5a: 06:d0:2e:80:5b:fc:80:d2:93:c9:c2:e8:25:d5:4d: f9:cc:49:d4:41:43:a5:a5:ca:ce:b0:11:d3:85:fa: 90:aa:08:cb:12:c6:52:4e:1e:25:45:6f:03:40:de: ec:a0:63:46:33:89:f4:92:6a:c2:f1:f6:23:9e:38: 07:d9:f2:09:8b:93:22:36:2b:97:0c:6b:22:af:c1: 6b:d0:dc:0f:42:b7:6c:72:65:39:02:f7:95:2e:9c: 85:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:77:FC:7C:C2:6F:41:99:6F:93:71:CE:CF:1E:59:40:AA:95:9C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0fc7a04e-899b-3caf-8bef-f6987972d566.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:101::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6b:f8:b3:c0:26:b9:5d:fa:66:09:65:83:b4:25:cc:da:74: 46:dc:3b:5e:9f:f7:fb:96:7b:a4:6a:65:3b:6a:a2:a5:b6:e8: b4:e9:d5:6f:ca:f1:98:40:2a:b5:2a:c7:d6:28:f0:98:1e:30: 65:1e:23:36:2d:b9:93:5b:7d:4a:1a:80:6d:cd:7e:af:3a:9d: 22:a5:22:a0:bd:21:af:35:f2:09:69:e5:36:db:83:20:2b:bb: d8:d3:cd:b5:6b:68:8e:2f:23:33:a8:7a:cc:7c:8e:cd:a7:55: 1c:af:a1:e8:ac:85:5d:58:bf:b7:b5:45:18:74:01:60:d4:50: 17:e7:ad:03:b2:c6:a8:0c:dd:9d:7d:7e:57:38:c5:f6:2c:4a: 9b:8f:b3:f8:a9:7d:a6:25:71:3a:78:e8:75:7f:d7:3d:fa:2a: 60:a8:5f:9b:45:59:e1:4a:9d:78:fb:d5:24:9a:7a:f9:17:54: 3e:20:7b:d8:39:79:49:39:25:72:f1:0c:dd:24:93:60:aa:ff: 8f:bf:22:6d:92:ac:61:19:47:ca:9c:c1:e9:fc:02:e6:61:6b: 3c:d6:7c:27:39:ad:66:2d:6d:c4:fe:2f:17:10:f2:73:ef:e2: d7:8a:b7:9a:74:00:7d:1b:b5:78:a4:11:75:a6:e1:72:e6:02: 9b:0f:67:e6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDaRt7BpSxZNsDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MzdjNGZhNTktZThkZi00MTM0LWEwMmMtZDI2YTNkYjZkNTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdmgAPNqMaq5znTpEFOTP5hYNNYHGEQiC9x8 1ViTzIvtA0hjTjNQg62iN4+d/tpgdbQT0eELjtBpfwdxTpigGwpiN4NuL6xGIluj jILzEQQKFIpWpPbjTQhFeaSaz77MFmczFPl7sniz+N4rUrOXoBTr34c2AfOnm941 Zgs5jsJHM0kFb+fp+567jjRszmddp8Oqh87G1+OVfxn/YroCWyxAD1oG0C6AW/yA 0pPJwugl1U35zEnUQUOlpcrOsBHThfqQqgjLEsZSTh4lRW8DQN7soGNGM4n0kmrC 8fYjnjgH2fIJi5MiNiuXDGsir8Fr0NwPQrdscmU5AveVLpyF0wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAF3/HzCb0GZb5Nxzs8eWUCqlZziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGZjN2EwNGUtODk5Yi0z Y2FmLThiZWYtZjY5ODc5NzJkNTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF1r+LPAJrld+mYJZYO0JczadEbcO16f9/uWe6RqZTtqoqW26LTp 1W/K8ZhAKrUqx9Yo8JgeMGUeIzYtuZNbfUoagG3Nfq86nSKlIqC9Ia818glp5Tbb gyAru9jTzbVraI4vIzOoesx8js2nVRyvoeishV1Yv7e1RRh0AWDUUBfnrQOyxqgM 3Z19flc4xfYsSpuPs/ipfaYlcTp46HV/1z36KmCoX5tFWeFKnXj71SSaevkXVD4g e9g5eUk5JXLxDN0kk2Cq/4+/Im2SrGEZR8qcwen8AuZhazzWfCc5rWYtbcT+LxcQ 8nPv4teKt5p0AH0btXikEXWm4XLmApsPZ+Y= -----END CERTIFICATE-----Generated at Thu Apr 10 05:21:12 2025 by rpki-client