$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/159e7d30-06ad-3ec8-bd6f-967df1182f7a.roa File: 159e7d30-06ad-3ec8-bd6f-967df1182f7a.roa (raw, json) Hash identifier: bU0VnWKelpSArl8dHUsBMZ9YUNGrdSXoADb3v/mF1f0= Subject key identifier: 5A:22:D5:30:92:5A:99:2E:FB:ED:33:D8:03:50:2F:E9:C5:2A:05:D4 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848D0ABACA1B07EC54EBF6BF780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/159e7d30-06ad-3ec8-bd6f-967df1182f7a.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 3360 IP address blocks: 2607:f028:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ac:a1:b0:7e:c5:4e:bf:6b:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=715d6129-1f91-4499-a5cc-58b852ad99b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:b6:c4:74:2b:3f:89:c3:22:a0:b2:b9:50: f7:06:23:19:60:66:7d:21:35:55:b9:ee:66:d5:e5: ec:aa:2a:6f:de:97:89:05:cf:77:cc:b0:ee:1a:78: 56:48:33:19:34:cf:b5:32:87:96:20:d2:9d:a4:63: b7:a9:b5:b8:74:1f:b6:fb:9d:d3:1a:a4:5e:64:e4: 9c:26:d2:2e:df:74:70:5e:cb:43:a9:2e:aa:60:a1: c4:7a:02:72:58:a7:9a:ec:ef:e3:8d:0d:ba:4d:21: 7d:33:67:3a:f8:98:82:13:c9:e9:ae:25:38:92:be: 7a:ce:88:dc:b8:e2:31:b1:8f:b1:06:12:28:7e:cd: 49:c1:70:2d:4f:64:ce:dd:2e:f4:fa:aa:89:13:2a: d8:e8:9b:ed:3f:0b:96:61:23:01:dd:79:8d:d5:8b: 00:4e:ee:57:ff:f9:d0:28:80:d1:57:85:b2:f8:80: c0:85:88:69:11:9c:71:d5:db:26:ce:80:08:69:65: c9:df:ad:e7:50:04:70:08:3f:c7:43:0e:ff:0f:e8: 39:35:37:3f:60:ad:d7:a2:de:b0:96:98:48:91:cd: 82:2f:d3:59:64:f3:e2:36:81:cc:15:56:69:59:b6: db:cd:a0:31:b4:3a:dd:84:24:4e:cf:79:5e:dc:05: 9f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:D5:30:92:5A:99:2E:FB:ED:33:D8:03:50:2F:E9:C5:2A:05:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/159e7d30-06ad-3ec8-bd6f-967df1182f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:1::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b2:38:20:94:dd:6c:b7:25:9e:64:d6:d1:9b:b7:e2:b3:17: ae:be:92:4b:b1:24:94:80:0c:bc:c1:6e:04:a1:b9:90:a1:1d: 5c:0e:6c:39:a6:53:4a:bc:97:a3:92:c9:8d:cd:41:2c:6d:3e: 8d:de:4b:5f:e0:11:0c:fb:40:eb:25:c4:e5:a4:66:70:bc:3c: a7:0e:13:70:01:57:ae:71:92:08:71:5c:87:47:7d:28:e5:83: d3:c4:ea:23:ca:93:03:b6:53:03:1b:07:c7:86:6d:28:9c:1f: 33:5e:d6:01:f4:84:c3:47:d9:92:df:c3:89:c8:a9:19:bb:5b: 5c:27:57:99:35:c4:2e:d5:f6:f5:d6:ca:0e:88:f2:b4:3f:33: 64:25:de:f6:ec:47:4b:8c:89:a8:69:2e:b9:01:df:23:76:6b: ce:71:1f:25:30:27:2a:b1:3f:47:73:5e:4b:0d:1f:0e:e0:45: fc:e3:00:7d:7d:99:45:5e:ff:da:11:55:05:d3:df:f5:4b:c8: 86:95:bb:45:c1:61:a9:59:e8:0c:28:ed:77:1b:39:9f:f9:07: 97:27:82:68:06:df:df:90:1b:4d:37:72:b2:b2:9a:e7:38:42: e0:1c:29:94:a2:c7:f7:f0:9d:4f:89:49:20:be:08:bc:3c:c5: bb:72:a9:70 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq6yhsH7FTr9r94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NzE1ZDYxMjktMWY5MS00NDk5LWE1Y2MtNThiODUyYWQ5OWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLy2xHQrP4nDIqCyuVD3BiMZYGZ9ITVVue5m 1eXsqipv3peJBc93zLDuGnhWSDMZNM+1MoeWINKdpGO3qbW4dB+2+53TGqReZOSc JtIu33RwXstDqS6qYKHEegJyWKea7O/jjQ26TSF9M2c6+JiCE8npriU4kr56zojc uOIxsY+xBhIofs1JwXAtT2TO3S70+qqJEyrY6JvtPwuWYSMB3XmN1YsATu5X//nQ KIDRV4Wy+IDAhYhpEZxx1dsmzoAIaWXJ363nUARwCD/HQw7/D+g5NTc/YK3Xot6w lphIkc2CL9NZZPPiNoHMFVZpWbbbzaAxtDrdhCROz3le3AWfHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFoi1TCSWpku++0z2ANQL+nFKgXUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTU5ZTdkMzAtMDZhZC0z ZWM4LWJkNmYtOTY3ZGYxMTgyZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC2yOCCU3Wy3JZ5k1tGbt+KzF66+kkuxJJSADLzBbgShuZChHVwO bDmmU0q8l6OSyY3NQSxtPo3eS1/gEQz7QOslxOWkZnC8PKcOE3ABV65xkghxXIdH fSjlg9PE6iPKkwO2UwMbB8eGbSicHzNe1gH0hMNH2ZLfw4nIqRm7W1wnV5k1xC7V 9vXWyg6I8rQ/M2Ql3vbsR0uMiahpLrkB3yN2a85xHyUwJyqxP0dzXksNHw7gRfzj AH19mUVe/9oRVQXT3/VLyIaVu0XBYalZ6Awo7XcbOZ/5B5cngmgG39+QG003crKy muc4QuAcKZSix/fwnU+JSSC+CLw8xbtyqXA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:03 2025 by rpki-client