$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa File: 2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa (raw, json) Hash identifier: Z107sV0jaZPUdNR6fLbIzNKCHFtpRxNxgOYH7Hdrv10= Subject key identifier: 23:5C:C6:FE:55:63:BF:C1:FC:0C:45:CF:4B:2A:90:56:BE:17:B7:5D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC3150439474F4C6A17800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:31:50:43:94:74:f4:c6:a1:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=769b572b-9869-4e02-8bca-7873112cb03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3d:12:a6:10:00:d0:3b:15:89:57:13:d4:08: 25:49:cd:b8:46:ab:0c:80:b2:0b:d2:77:25:9f:dc: 86:aa:83:5c:46:91:02:e2:fb:8f:3c:fa:b2:c7:b4: 54:7d:5a:51:f0:68:e9:ee:d0:7b:00:eb:42:ae:05: 4b:b1:6d:89:b1:de:ab:45:2e:e5:66:bb:2b:45:b9: 50:93:2c:a7:d6:dc:b2:17:ff:13:04:e5:7a:3b:6f: f1:98:14:86:f6:61:1b:ac:08:09:31:b2:5f:ea:95: 9d:29:05:c8:4e:38:6c:3a:ae:19:f5:24:c2:3a:21: c7:be:92:84:3c:60:fc:ef:ba:b0:f4:bd:d9:a9:53: 09:17:87:02:e9:41:4d:73:b9:eb:3d:14:5f:19:a7: 89:e7:33:ba:09:83:b3:36:65:61:bc:6f:a0:98:00: 87:c2:4c:e8:a5:62:2f:6f:15:e0:79:36:e8:f7:7a: 21:8b:08:cc:13:ae:82:27:a0:25:4f:4e:e7:e0:2d: e9:18:83:c3:7b:58:94:44:5c:a6:2f:1c:5a:34:5d: 9e:fe:b2:91:33:63:8b:10:a2:a8:59:d5:84:be:d7: ae:ad:08:3a:d8:9c:86:15:d0:28:4a:43:93:f0:c5: c3:cc:d0:2b:ee:dc:09:03:a8:b9:e9:c5:73:eb:e7: 34:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:C6:FE:55:63:BF:C1:FC:0C:45:CF:4B:2A:90:56:BE:17:B7:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:33:2e:ff:11:e9:8b:e2:55:16:d0:3c:57:72:03:69:c9:6e: 42:d2:59:4f:4c:ea:c8:f0:f6:12:b8:19:08:70:60:10:8e:a5: 8a:84:7e:17:a6:31:b8:80:a8:19:a6:ca:53:d5:51:89:d6:34: fa:cc:cf:f5:97:68:58:86:f5:25:d6:be:90:07:19:83:f2:a4: a6:d2:f6:d2:be:4e:0e:a4:9f:35:ea:04:ba:17:87:fc:ba:9c: 9e:ad:67:f1:a3:93:f3:86:40:ab:cd:25:b3:06:a5:59:0f:bc: a1:85:b6:e9:e1:46:e3:00:73:33:6c:98:6d:1b:18:ba:50:95: 52:3e:bb:4f:d8:61:55:0d:63:91:9e:fd:a1:ca:c0:49:1f:7d: e3:39:60:a4:08:d0:11:e0:a8:04:a2:24:59:d9:bc:d7:1f:6e: eb:62:4b:ea:cb:07:24:87:48:df:52:87:8f:5f:ed:c6:16:1a: 4b:c0:75:c0:5a:e8:4a:88:d3:6f:7d:f1:17:13:a9:55:86:88: 5a:29:54:4f:88:e2:02:95:e0:61:0d:9c:30:0e:d1:ed:a0:b4: 29:0b:c8:d4:31:5a:c0:7c:a9:e6:c0:81:63:c0:6e:83:7c:1d: ba:5e:38:61:54:a6:85:37:ed:2f:cb:00:d8:3e:80:f3:23:5f: 2b:06:fd:ab -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDFQQ5R09MaheAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NzY5YjU3MmItOTg2OS00ZTAyLThiY2EtNzg3MzExMmNiMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D0SphAA0DsViVcT1AglSc24RqsMgLIL0ncl n9yGqoNcRpEC4vuPPPqyx7RUfVpR8Gjp7tB7AOtCrgVLsW2Jsd6rRS7lZrsrRblQ kyyn1tyyF/8TBOV6O2/xmBSG9mEbrAgJMbJf6pWdKQXITjhsOq4Z9STCOiHHvpKE PGD877qw9L3ZqVMJF4cC6UFNc7nrPRRfGaeJ5zO6CYOzNmVhvG+gmACHwkzopWIv bxXgeTbo93ohiwjME66CJ6AlT07n4C3pGIPDe1iURFymLxxaNF2e/rKRM2OLEKKo WdWEvteurQg62JyGFdAoSkOT8MXDzNAr7twJA6i56cVz6+c07QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNcxv5VY7/B/AxFz0sqkFa+F7ddMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmNmOThkYzAtMzkzZC0z YzUwLWFiMjMtYjY4OGU5Njc1ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAEzLv8R6YviVRbQPFdyA2nJbkLSWU9M6sjw9hK4GQhwYBCOpYqE fhemMbiAqBmmylPVUYnWNPrMz/WXaFiG9SXWvpAHGYPypKbS9tK+Tg6knzXqBLoX h/y6nJ6tZ/Gjk/OGQKvNJbMGpVkPvKGFtunhRuMAczNsmG0bGLpQlVI+u0/YYVUN Y5Ge/aHKwEkffeM5YKQI0BHgqASiJFnZvNcfbutiS+rLBySHSN9Sh49f7cYWGkvA dcBa6EqI02998RcTqVWGiFopVE+I4gKV4GENnDAO0e2gtCkLyNQxWsB8qebAgWPA boN8HbpeOGFUpoU37S/LANg+gPMjXysG/as= -----END CERTIFICATE-----Generated at Fri Mar 14 13:39:43 2025 by rpki-client