$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa File: 2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa (raw, json) Hash identifier: z+Kvtrk3FkGynyRzGOWRQbJqxiKbOZKXcWcGQVIkVyo= Subject key identifier: B6:DC:98:58:62:9D:5B:8E:F7:8B:FE:84:57:6A:63:BB:20:B8:67:69 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2AB70E8EA04D1EC83800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2a:b7:0e:8e:a0:4d:1e:c8:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=0bebb861-7d67-4825-8107-a26e38b70d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:8f:fb:bc:46:a2:d6:12:43:c9:f2:a5:38:26: d4:5e:24:b6:fb:04:08:0a:e9:b6:d7:2e:28:6b:0f: 89:60:0e:16:6b:46:d6:0f:60:b0:0f:5f:a9:33:9f: 1a:3a:1e:b6:99:87:d4:22:a7:5d:fa:1d:5d:b0:76: 1d:00:e1:59:5a:dc:c2:88:7b:4d:df:2e:d2:db:f8: bd:2d:ca:a4:b8:c2:5d:00:d9:c1:e1:50:cc:b9:db: 32:96:91:96:29:ec:1c:cc:83:45:6a:48:03:34:e2: fd:f8:a7:28:dd:81:73:93:a9:08:e3:e2:ab:8d:49: b3:50:37:ae:85:b7:7c:98:71:88:20:7f:59:96:b0: 0d:08:da:da:61:ca:15:00:ec:4a:78:01:ce:f7:2c: 58:dd:30:95:61:17:58:43:1f:7c:5b:b9:d8:fc:8b: 6e:52:d8:ae:1a:09:f4:bc:76:d2:7e:48:9e:0f:71: 2f:d4:e6:65:ae:57:e7:36:bc:88:ff:c9:35:26:25: 11:dd:63:b1:bc:28:91:9b:c4:7d:b1:70:f0:6c:cc: bc:ac:d7:22:2f:fe:6f:ec:af:93:11:47:71:82:20: 50:59:16:6b:5e:e2:39:5c:ed:44:d4:91:be:66:f1: b6:18:54:b3:b1:38:99:23:f8:f3:b8:c5:1b:e2:3e: 33:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DC:98:58:62:9D:5B:8E:F7:8B:FE:84:57:6A:63:BB:20:B8:67:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:27:84:90:85:a5:c8:f3:76:8b:24:b8:22:92:cd:37:0d:14: 48:c1:7e:73:68:c6:63:b1:b3:8d:cf:a5:3e:1c:44:f6:2e:7f: 22:14:22:f6:e5:6a:19:18:dd:30:4a:cf:d8:b8:6f:8b:4e:35: 3e:fd:90:a0:0c:f6:99:a0:e6:56:96:b1:52:65:a4:09:99:6e: 59:ec:1b:24:89:94:ea:c6:95:a3:05:ca:e0:a5:93:51:4e:92: 12:11:3b:9f:0c:7e:a0:b3:3b:db:52:82:e0:ee:f7:b4:0c:46: da:8d:22:97:ad:8d:4b:54:e4:db:fc:c2:06:b3:64:1a:11:37: 4e:81:b1:bf:7d:42:ce:14:27:22:3f:32:45:3b:29:5c:c1:7a: 3f:5b:07:2b:7b:34:12:e7:8c:13:67:ce:07:9d:6c:98:b9:07: e0:db:0f:c0:97:1c:8c:44:96:8c:ad:81:8b:b7:04:59:63:c1: 97:a5:24:a2:ba:4b:be:db:1c:db:41:fb:d9:c5:92:62:54:f5: 6c:8c:39:2c:78:22:21:c1:a4:04:3c:d2:d3:95:37:bf:98:69: db:b9:08:80:78:c4:aa:eb:98:e6:db:66:ca:e6:0a:f8:4b:38: 78:e5:af:2c:79:f9:0b:b1:d7:01:59:e8:99:25:e8:a5:0d:34: 65:73:c4:60 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrCq3Do6gTR7IOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MGJlYmI4NjEtN2Q2Ny00ODI1LTgxMDctYTI2ZTM4YjcwZDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgo/7vEai1hJDyfKlOCbUXiS2+wQICum21y4o aw+JYA4Wa0bWD2CwD1+pM58aOh62mYfUIqdd+h1dsHYdAOFZWtzCiHtN3y7S2/i9 LcqkuMJdANnB4VDMudsylpGWKewczINFakgDNOL9+Kco3YFzk6kI4+KrjUmzUDeu hbd8mHGIIH9ZlrANCNraYcoVAOxKeAHO9yxY3TCVYRdYQx98W7nY/ItuUtiuGgn0 vHbSfkieD3Ev1OZlrlfnNryI/8k1JiUR3WOxvCiRm8R9sXDwbMy8rNciL/5v7K+T EUdxgiBQWRZrXuI5XO1E1JG+ZvG2GFSzsTiZI/jzuMUb4j4zOQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLbcmFhinVuO94v+hFdqY7sguGdpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjg5NWE1ZWMtNDUxYS0z ZjJiLWI5ZmMtMzdlYmY1MmRmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHknhJCFpcjzdoskuCKSzTcNFEjBfnNoxmOxs43PpT4cRPYufyIU IvblahkY3TBKz9i4b4tONT79kKAM9pmg5laWsVJlpAmZblnsGySJlOrGlaMFyuCl k1FOkhIRO58MfqCzO9tSguDu97QMRtqNIpetjUtU5Nv8wgazZBoRN06Bsb99Qs4U JyI/MkU7KVzBej9bByt7NBLnjBNnzgedbJi5B+DbD8CXHIxEloytgYu3BFljwZel JKK6S77bHNtB+9nFkmJU9WyMOSx4IiHBpAQ80tOVN7+Yadu5CIB4xKrrmObbZsrm CvhLOHjlryx5+Qux1wFZ6Jkl6KUNNGVzxGA= -----END CERTIFICATE-----Generated at Fri Mar 14 09:27:23 2025 by rpki-client