$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa File: 1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa (raw, json) Hash identifier: 0VHVMfrUQKoxOXiMu5F9EDcgTCZTVu5vQoZshAqYggk= Subject key identifier: 8E:3D:13:17:E0:FE:B5:28:FF:7E:B5:F3:D0:F9:43:BC:B4:25:DA:88 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2F55624A9DE3F39EE080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2f:55:62:4a:9d:e3:f3:9e:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=5ff1f708-af86-4821-8a39-68dd508c24b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:6f:4f:c6:36:12:2d:07:7c:46:83:29:41: 3a:20:2e:dd:84:3f:ab:5e:af:86:90:59:22:f9:e2: cc:16:54:36:df:67:da:db:ed:4e:71:b2:10:2a:37: 09:98:3f:52:bd:86:0e:9a:18:54:80:66:97:00:83: c2:ae:0b:09:46:26:96:07:70:6b:40:4b:2a:55:a5: 49:fa:7d:81:88:e1:a8:47:02:19:50:ee:76:8e:8f: a1:ef:1b:8c:07:c5:c5:13:a9:77:e9:5b:9f:75:5a: 26:64:81:1f:1b:6b:78:ef:99:a5:65:b6:a3:d8:ce: e5:5d:38:fe:b8:09:cc:ed:14:fc:4c:11:61:e8:d4: ae:61:cd:47:d2:ee:35:8c:e8:a6:33:b3:c4:e2:00: 75:7a:71:37:99:91:b5:e2:cb:13:55:b7:04:f7:94: f5:65:a1:d2:58:d0:44:35:ba:ba:20:54:1c:56:bb: 7b:1b:94:9d:95:5a:a2:5c:c9:9c:f4:e4:6a:12:b0: 0a:2e:81:13:25:c3:2f:78:82:56:36:c1:35:7e:93: 81:98:6d:a3:d3:c7:b3:44:86:ff:f3:24:ca:e1:ee: 7c:dd:5a:9d:f9:95:b4:00:fe:25:0a:3f:6a:02:6c: 92:19:35:3c:1b:16:a3:94:9a:de:b2:7f:38:a6:f4: 9f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:3D:13:17:E0:FE:B5:28:FF:7E:B5:F3:D0:F9:43:BC:B4:25:DA:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:9c:4d:b7:79:e7:97:98:35:80:25:d2:0e:e7:49:84:ce:b5: 31:0c:16:aa:02:05:2a:35:e5:3e:38:28:95:bb:6b:86:70:dc: ee:63:c4:c0:33:38:8b:92:a7:20:d3:98:62:83:55:c7:42:cb: 8e:14:d9:a8:35:b4:3c:a7:06:04:e4:4a:e8:60:2a:f5:77:6f: bc:07:2e:ba:ab:33:62:23:23:3c:ac:54:0c:01:e7:55:ce:84: 73:e0:75:d7:8a:05:06:81:66:f2:15:28:af:b7:5e:94:32:98: 43:38:47:c4:8b:03:2a:26:fe:4b:7c:68:13:3f:21:e9:9a:c3: 95:a9:2e:c7:dc:5b:aa:3d:39:64:79:ff:e0:0e:f2:72:17:d0: bf:e8:2d:2b:51:7e:02:0f:76:08:c1:4d:30:a3:9a:11:53:dd: e0:4c:35:15:af:d1:3c:2d:2c:fe:b2:3c:f1:2f:32:85:5c:2b: 62:34:5b:73:32:55:fc:5a:a2:ad:b6:42:74:be:bf:be:28:c5: c1:3d:82:d0:a8:2b:d6:10:b5:10:89:35:e9:84:6e:b0:f2:ef: 04:d3:3a:82:7f:70:20:4b:09:f3:a9:08:dc:c9:11:b2:81:09: 19:2a:92:92:79:37:87:51:46:67:4a:cf:3d:ee:62:a8:3b:70: b5:66:db:c2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC9VYkqd4/Oe4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NWZmMWY3MDgtYWY4Ni00ODIxLThhMzktNjhkZDUwOGMyNGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8FvT8Y2Ei0HfEaDKUE6IC7dhD+rXq+GkFki +eLMFlQ232fa2+1OcbIQKjcJmD9SvYYOmhhUgGaXAIPCrgsJRiaWB3BrQEsqVaVJ +n2BiOGoRwIZUO52jo+h7xuMB8XFE6l36VufdVomZIEfG2t475mlZbaj2M7lXTj+ uAnM7RT8TBFh6NSuYc1H0u41jOimM7PE4gB1enE3mZG14ssTVbcE95T1ZaHSWNBE Nbq6IFQcVrt7G5SdlVqiXMmc9ORqErAKLoETJcMveIJWNsE1fpOBmG2j08ezRIb/ 8yTK4e583Vqd+ZW0AP4lCj9qAmySGTU8GxajlJresn84pvSfOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI49Exfg/rUo/36189D5Q7y0JdqIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWNhOWY1Y2ItNmNjMC0z MDlkLWFiNjAtM2Y1MGE4ZGZiMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFGcTbd555eYNYAl0g7nSYTOtTEMFqoCBSo15T44KJW7a4Zw3O5j xMAzOIuSpyDTmGKDVcdCy44U2ag1tDynBgTkSuhgKvV3b7wHLrqrM2IjIzysVAwB 51XOhHPgddeKBQaBZvIVKK+3XpQymEM4R8SLAyom/kt8aBM/Iemaw5WpLsfcW6o9 OWR5/+AO8nIX0L/oLStRfgIPdgjBTTCjmhFT3eBMNRWv0TwtLP6yPPEvMoVcK2I0 W3MyVfxaoq22QnS+v74oxcE9gtCoK9YQtRCJNemEbrDy7wTTOoJ/cCBLCfOpCNzJ EbKBCRkqkpJ5N4dRRmdKzz3uYqg7cLVm28I= -----END CERTIFICATE-----Generated at Fri Mar 14 11:28:48 2025 by rpki-client