$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa File: 2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa (raw, json) Hash identifier: 3jh0d+7BUooHatImjHwwaKJYxT/FKAlh+kZXP01pqIQ= Subject key identifier: 50:93:0F:A0:F0:41:0A:6A:07:FE:63:07:55:10:D9:AA:E0:AE:2D:26 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2AF2260BF3A844051740 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 2607:f028:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2a:f2:26:0b:f3:a8:44:05:17:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=b51cea3a-22e2-4bc7-b986-0daa3f452bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:2c:c2:46:9b:30:14:ec:b1:de:09:4c:3f:b5: 7d:d3:d9:8e:51:fe:0a:29:eb:b9:44:0a:7e:59:ae: 5f:f4:da:95:45:ea:1c:7a:22:89:9c:f4:d2:8e:78: 1d:d2:25:72:35:b3:7a:92:00:b2:59:16:8d:a2:c6: 43:0c:ff:77:87:fe:56:9c:c3:1c:2e:31:22:7e:95: c3:2b:f7:89:61:be:1b:97:3d:0e:42:04:f0:f3:97: 19:d0:53:1b:c0:16:35:1c:26:7b:ec:9e:c5:f3:0e: f9:a6:d7:28:97:18:71:0f:6d:f6:1f:19:e2:ed:88: 89:71:3f:24:70:8b:1f:dd:ad:97:91:2b:54:39:37: 0d:2b:4f:62:e4:f9:33:4a:33:f5:eb:d6:0d:7f:32: aa:db:72:db:73:b1:ae:52:f1:fe:db:b5:80:31:fc: ca:4b:1f:97:7e:5a:7f:61:bb:b3:17:7a:fa:fc:8f: d0:19:ad:4e:dd:64:4b:2e:55:38:52:0b:c7:20:41: 18:ae:a9:2a:e3:d4:80:6d:bf:9e:75:06:b3:87:44: 44:d6:cb:d0:9d:41:7f:5d:15:81:0e:cb:d1:fe:7b: 15:29:3c:8b:7d:bc:4b:a0:30:a1:09:b5:a9:ad:fc: ec:27:7e:3f:c9:67:b8:03:ac:af:f3:0d:5f:0c:b4: 6d:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:93:0F:A0:F0:41:0A:6A:07:FE:63:07:55:10:D9:AA:E0:AE:2D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:74:5c:9d:d2:da:ad:8c:cb:69:d1:67:d7:47:14:8f:4d:1a: 43:6a:33:d4:d4:60:39:d2:a5:74:43:5e:65:85:98:82:cd:1e: a1:42:20:e5:7a:ab:e1:76:1c:27:34:d3:ed:48:5e:35:47:f9: 99:80:fa:9d:f6:e0:f7:ba:18:02:ef:4e:cc:d0:02:18:b3:1d: ed:95:97:88:1a:1d:3e:4b:8f:a2:f7:44:ba:30:30:61:c0:90: a7:db:ab:42:77:cb:98:17:ec:f8:67:8a:25:aa:0d:dc:93:21: 7c:37:fa:64:c2:e7:01:57:e2:9a:c9:76:1d:f0:49:99:90:a2: 6c:e9:c8:db:81:2e:8a:45:03:99:99:d4:0e:77:1f:61:f5:7e: 72:27:1e:7d:fd:a3:5a:43:1e:30:70:77:ff:c7:c0:7e:87:15: c2:a9:19:87:fa:a6:fc:68:47:82:bb:d0:11:cc:c4:4a:bb:72: 2d:ca:06:63:4e:80:01:fc:ec:3f:a2:57:d3:f1:5c:29:2d:5a: 87:d2:99:e7:7a:d0:12:a2:3f:ed:5a:95:8e:0d:c1:5b:92:93: 6f:86:85:ba:c4:aa:b3:a3:af:44:0b:ce:7c:1b:be:a2:2d:69: 42:90:db:7c:fb:21:4f:d5:d2:cf:62:3c:07:29:86:dd:29:7f: 21:09:a7:c0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrCryJgvzqEQFF0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YjUxY2VhM2EtMjJlMi00YmM3LWI5ODYtMGRhYTNmNDUyYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2izCRpswFOyx3glMP7V909mOUf4KKeu5RAp+ Wa5f9NqVReoceiKJnPTSjngd0iVyNbN6kgCyWRaNosZDDP93h/5WnMMcLjEifpXD K/eJYb4blz0OQgTw85cZ0FMbwBY1HCZ77J7F8w75ptcolxhxD232Hxni7YiJcT8k cIsf3a2XkStUOTcNK09i5PkzSjP169YNfzKq23Lbc7GuUvH+27WAMfzKSx+Xflp/ YbuzF3r6/I/QGa1O3WRLLlU4UgvHIEEYrqkq49SAbb+edQazh0RE1svQnUF/XRWB DsvR/nsVKTyLfbxLoDChCbWprfzsJ34/yWe4A6yv8w1fDLRt5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFCTD6DwQQpqB/5jB1UQ2argri0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRhZTBiYzAtOGY0YS0z N2FhLWE5NTItYjcyZDI5NWUyNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGx0XJ3S2q2My2nRZ9dHFI9NGkNqM9TUYDnSpXRDXmWFmILNHqFC IOV6q+F2HCc00+1IXjVH+ZmA+p324Pe6GALvTszQAhizHe2Vl4gaHT5Lj6L3RLow MGHAkKfbq0J3y5gX7PhniiWqDdyTIXw3+mTC5wFX4prJdh3wSZmQomzpyNuBLopF A5mZ1A53H2H1fnInHn39o1pDHjBwd//HwH6HFcKpGYf6pvxoR4K70BHMxEq7ci3K BmNOgAH87D+iV9PxXCktWofSmed60BKiP+1alY4NwVuSk2+GhbrEqrOjr0QLznwb vqItaUKQ23z7IU/V0s9iPAcpht0pfyEJp8A= -----END CERTIFICATE-----Generated at Sat Apr 5 11:15:55 2025 by rpki-client