$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa File: 349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa (raw, json) Hash identifier: q0PmVXfVkfi8O1WnnAZ/Zx01WAnas0fFw3lqudfkgrI= Subject key identifier: 32:8F:62:A7:5F:9D:2B:99:72:45:AE:6D:A3:95:99:E5:B0:04:C1:8B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2E1E33E1BF7D272354C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 2607:f028:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2e:1e:33:e1:bf:7d:27:23:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=e2690dc9-4e5b-49e5-a639-be3a62b0f86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:54:7f:d3:b3:a7:65:47:e7:15:e7:11:bc:3e: 86:8d:3c:a8:1f:e7:ca:39:78:c7:7e:3b:8d:8c:63: c4:18:c7:16:6f:3f:62:31:d0:0f:a4:94:ab:1e:2b: 15:47:59:a4:73:af:10:5e:a6:c0:f3:43:4a:0a:f9: f8:9e:f6:2d:c2:47:7a:fa:31:4f:03:20:98:ce:81: 72:d3:58:36:3e:a5:e7:7a:3a:d5:3c:48:6d:e7:61: 10:44:d1:12:cd:8c:f4:37:91:d1:e1:54:36:77:80: c1:b1:30:a9:7c:bb:6a:fc:d4:06:bf:37:cf:8e:34: 5b:a8:50:18:01:d7:9c:5b:42:f4:ae:25:51:3f:2a: a1:bb:ff:a1:9b:95:76:82:86:8b:da:c1:cc:76:b4: 2b:57:f5:6c:0e:28:15:ed:2f:75:01:35:81:f1:41: ec:23:92:42:5f:a0:64:20:09:2f:46:f2:a2:4e:27: 40:55:32:37:ee:a0:5b:4b:fc:a2:ed:62:fb:72:61: 90:11:a6:88:b0:de:6a:1d:89:3b:e7:36:3d:a4:3a: 32:ac:23:62:d6:c2:26:66:55:71:e2:a7:e5:9d:63: 17:6b:6e:d3:e6:0b:06:44:0d:b5:91:a7:71:51:ca: 95:5a:56:c7:ce:f6:db:c6:e1:9f:7c:a7:76:e7:a9: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:8F:62:A7:5F:9D:2B:99:72:45:AE:6D:A3:95:99:E5:B0:04:C1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/349b3d5f-f6c1-3d8b-9d01-62a4402f9d65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:d5:c8:49:08:e7:b6:2f:03:8f:3b:e8:1a:ce:41:03:81:bd: 66:69:76:20:c2:02:4c:39:66:14:e1:7c:d1:46:91:0f:64:3d: 69:cc:55:70:8b:1f:a6:07:27:39:9b:74:ff:37:04:72:1b:96: 87:35:db:9e:34:62:71:ba:ef:cf:1f:74:09:5a:6c:95:5d:c9: 7f:42:89:ae:66:98:01:80:f1:f8:0b:85:b0:3f:3d:30:aa:69: 51:17:c1:96:72:1f:61:9f:45:d7:61:8d:6b:75:cc:19:8e:98: 49:4f:86:ac:f6:e2:20:29:a4:b5:82:d4:b8:1c:18:90:24:fa: 15:95:5c:9d:61:8c:3d:88:e4:5e:4f:1f:1a:6c:73:3d:cd:42: cd:11:e5:58:84:79:97:b3:dd:12:26:fc:2d:ea:1e:49:f8:45: f3:e9:00:61:93:63:c9:8b:29:e4:d0:83:04:1b:29:81:df:ce: 2b:b7:04:fa:32:66:e7:6c:59:fa:ff:89:20:5f:8a:e3:07:a4: fd:ef:3e:28:c8:95:b5:3c:7f:62:ff:0c:5c:9d:b0:b8:08:b2: 68:51:14:df:de:ae:ca:b8:e0:b5:58:a9:69:92:0d:81:f4:a1: 7b:e3:f7:27:b3:e5:e7:b8:49:04:67:0a:70:52:ef:fe:37:dd: 01:aa:7a:87 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC4eM+G/fScjVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTI2OTBkYzktNGU1Yi00OWU1LWE2MzktYmUzYTYyYjBmODZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVR/07OnZUfnFecRvD6GjTyoH+fKOXjHfjuN jGPEGMcWbz9iMdAPpJSrHisVR1mkc68QXqbA80NKCvn4nvYtwkd6+jFPAyCYzoFy 01g2PqXnejrVPEht52EQRNESzYz0N5HR4VQ2d4DBsTCpfLtq/NQGvzfPjjRbqFAY AdecW0L0riVRPyqhu/+hm5V2goaL2sHMdrQrV/VsDigV7S91ATWB8UHsI5JCX6Bk IAkvRvKiTidAVTI37qBbS/yi7WL7cmGQEaaIsN5qHYk75zY9pDoyrCNi1sImZlVx 4qflnWMXa27T5gsGRA21kadxUcqVWlbHzvbbxuGffKd256luXQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDKPYqdfnSuZckWubaOVmeWwBMGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzQ5YjNkNWYtZjZjMS0z ZDhiLTlkMDEtNjJhNDQwMmY5ZDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADbVyEkI57YvA4876BrOQQOBvWZpdiDCAkw5ZhThfNFGkQ9kPWnM VXCLH6YHJzmbdP83BHIbloc12540YnG6788fdAlabJVdyX9Cia5mmAGA8fgLhbA/ PTCqaVEXwZZyH2GfRddhjWt1zBmOmElPhqz24iAppLWC1LgcGJAk+hWVXJ1hjD2I 5F5PHxpscz3NQs0R5ViEeZez3RIm/C3qHkn4RfPpAGGTY8mLKeTQgwQbKYHfziu3 BPoyZudsWfr/iSBfiuMHpP3vPijIlbU8f2L/DFydsLgIsmhRFN/ersq44LVYqWmS DYH0oXvj9yez5ee4SQRnCnBS7/433QGqeoc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:19:46 2025 by rpki-client