$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa File: 1220970a-8457-3184-855a-d35cd08bc00a.roa (raw, json) Hash identifier: CV1rIHQqcZchU6K3qqHNfmc92YgaxcvW7cvh0TyeGWc= Subject key identifier: 87:D7:00:D6:19:DB:68:15:77:BF:6F:86:F5:54:82:C4:90:98:10:E3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2DCF17EA5E11ED567D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3360 IP address blocks: 2607:f028:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2d:cf:17:ea:5e:11:ed:56:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=b146ad4e-9ea5-4292-ba28-d5363731fdc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e2:bb:17:00:d1:d9:3f:95:8b:52:59:cb:fc: b4:15:f0:ed:72:63:32:e7:7f:97:93:0f:e2:cc:6c: 78:ea:30:ba:b7:9c:87:13:67:95:3b:b5:09:19:34: 3c:91:fc:fc:1e:4a:6d:46:b2:78:ec:b7:aa:89:2e: 5b:ca:e1:1b:5c:97:74:90:9b:fd:af:e3:21:5f:42: 66:e6:11:f6:c6:be:9e:52:2e:7f:1d:36:1a:3b:0f: 32:d0:e2:ca:db:9e:d9:26:4d:1f:3f:79:32:b0:7c: d1:7e:c3:c0:e6:94:c1:91:39:0f:79:12:6a:eb:8e: 0b:bc:7c:85:a9:b1:35:0d:34:9d:e3:14:17:30:56: 57:bb:f3:40:ef:59:ad:b5:19:f8:7d:52:d9:de:d4: 94:38:ea:ae:c0:2d:7d:b3:7f:e4:cc:c7:4f:82:96: 87:c1:bb:e4:1e:75:1d:c4:db:0f:57:38:50:5a:78: 78:3d:02:2d:6a:61:6f:2b:8b:88:ed:ce:db:4d:2c: a0:83:3d:62:20:18:b1:6b:4b:f0:51:1b:13:f0:51: 26:68:9e:3e:f8:f1:dd:a1:22:66:d3:ce:40:bd:90: 30:ec:b1:19:2d:46:9f:04:3b:f1:ac:45:e2:d3:b5: 05:86:2a:cd:22:b0:f8:af:e7:de:44:95:b5:7e:32: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D7:00:D6:19:DB:68:15:77:BF:6F:86:F5:54:82:C4:90:98:10:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:d8:21:77:63:c8:be:a3:6d:99:e8:17:ff:90:57:81:54:21: 81:14:77:32:59:5a:55:9f:0e:d7:b8:3b:1e:75:7a:69:f0:74: c3:6d:26:2f:25:26:7d:b7:03:3c:b3:87:8b:92:9e:5c:bb:ec: 90:bd:bf:44:89:3d:58:d6:9f:60:01:73:38:b5:8f:25:00:9c: 00:67:29:11:b6:34:24:1b:ca:50:bd:e7:22:5b:e7:d8:0a:b8: da:fd:31:bc:7d:bd:08:93:aa:53:da:73:95:4e:12:3c:3f:4f: ed:a8:52:29:f9:46:b9:ac:3a:c5:2f:9f:b2:d5:1e:20:75:bf: a0:5d:17:13:8b:b5:27:ae:c7:ac:1b:08:b1:ef:42:b8:35:86: 3c:c5:95:ee:c9:53:97:de:19:f0:6e:9b:86:91:98:de:fb:01: 2b:69:54:01:aa:77:a8:3a:84:05:a4:93:8f:e9:9c:d3:78:ca: 18:20:31:59:40:57:25:6a:03:3b:f3:64:77:9a:b4:73:6d:44: 7d:90:bb:52:8e:19:3f:96:c5:4d:e6:95:01:b5:0d:96:03:8f: 62:96:32:3a:ca:0f:36:d0:d6:53:95:05:34:4e:57:42:22:f9: 7a:dc:f7:60:34:12:7a:4c:66:b1:11:30:86:8b:12:c0:17:3e: 1b:c3:d2:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC3PF+peEe1WfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YjE0NmFkNGUtOWVhNS00MjkyLWJhMjgtZDUzNjM3MzFmZGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguK7FwDR2T+Vi1JZy/y0FfDtcmMy53+Xkw/i zGx46jC6t5yHE2eVO7UJGTQ8kfz8HkptRrJ47LeqiS5byuEbXJd0kJv9r+MhX0Jm 5hH2xr6eUi5/HTYaOw8y0OLK257ZJk0fP3kysHzRfsPA5pTBkTkPeRJq644LvHyF qbE1DTSd4xQXMFZXu/NA71mttRn4fVLZ3tSUOOquwC19s3/kzMdPgpaHwbvkHnUd xNsPVzhQWnh4PQItamFvK4uI7c7bTSyggz1iIBixa0vwURsT8FEmaJ4++PHdoSJm 085AvZAw7LEZLUafBDvxrEXi07UFhirNIrD4r+feRJW1fjLWzQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIfXANYZ22gVd79vhvVUgsSQmBDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTIyMDk3MGEtODQ1Ny0z MTg0LTg1NWEtZDM1Y2QwOGJjMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADzYIXdjyL6jbZnoF/+QV4FUIYEUdzJZWlWfDte4Ox51emnwdMNt Ji8lJn23Azyzh4uSnly77JC9v0SJPVjWn2ABczi1jyUAnABnKRG2NCQbylC95yJb 59gKuNr9Mbx9vQiTqlPac5VOEjw/T+2oUin5RrmsOsUvn7LVHiB1v6BdFxOLtSeu x6wbCLHvQrg1hjzFle7JU5feGfBum4aRmN77AStpVAGqd6g6hAWkk4/pnNN4yhgg MVlAVyVqAzvzZHeatHNtRH2Qu1KOGT+WxU3mlQG1DZYDj2KWMjrKDzbQ1lOVBTRO V0Ii+Xrc92A0EnpMZrERMIaLEsAXPhvD0kk= -----END CERTIFICATE-----Generated at Sun Apr 6 06:05:02 2025 by rpki-client