$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4db0d18f-d105-38b0-af19-2d74a35f87ad.roa File: 4db0d18f-d105-38b0-af19-2d74a35f87ad.roa (raw, json) Hash identifier: PX5TQ93qajt62vl1Z8lZjMhbqsl6IXYmfiv+THzBylE= Subject key identifier: F4:A2:8E:ED:91:69:F0:5B:E9:9B:9D:3D:75:78:56:2E:B8:2A:EE:CC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC30B0DF715F2254F9AF80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4db0d18f-d105-38b0-af19-2d74a35f87ad.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3356 IP address blocks: 2607:f028:82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:30:b0:df:71:5f:22:54:f9:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=4430747b-41da-4c2d-b9f1-49ebe789703b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7b:f7:6b:8c:eb:1a:d2:d6:c7:7c:13:6f:66: 9c:f1:5f:5d:03:f6:bd:5c:37:18:f5:8b:d4:d0:aa: 18:ca:74:20:39:b2:2a:18:b6:1e:b8:66:10:a7:7b: 64:1c:54:de:a3:2f:e9:0c:b8:8c:bc:69:fe:fc:2c: 9d:e5:f6:e2:d2:ed:ce:d1:85:25:cf:33:6f:b8:ce: 7c:b1:f6:e2:cd:ea:b0:36:17:8d:a2:80:ce:26:82: ee:ef:99:fa:d2:f7:e4:9d:5d:b0:56:01:37:38:a3: a2:8c:f3:87:81:a0:93:41:e6:0d:25:10:8f:a7:ed: 28:9a:69:f5:dc:1b:a7:3a:2f:17:ae:41:34:21:5b: 10:74:3f:8c:db:69:eb:ec:b9:7a:f4:0f:f0:e2:70: 63:1a:e8:31:25:e5:29:61:10:fb:05:18:c9:f4:00: 79:29:49:6d:4a:db:80:65:34:a8:08:6f:5d:f3:a3: 60:9a:2c:1b:7d:9c:57:5b:63:30:fb:02:c5:21:51: 01:b4:62:21:e0:bc:f6:85:95:40:20:f4:64:c1:0c: 85:eb:e8:20:48:b8:ef:9e:4b:85:5a:e7:cc:9f:c0: 26:01:4f:2a:81:d9:65:f9:88:71:7e:91:26:2b:48: ed:a5:3c:d0:e0:9f:15:c1:e6:1a:02:6e:63:72:37: ce:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:A2:8E:ED:91:69:F0:5B:E9:9B:9D:3D:75:78:56:2E:B8:2A:EE:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4db0d18f-d105-38b0-af19-2d74a35f87ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:82::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ee:c6:95:db:93:b2:2b:8d:47:f9:7f:17:eb:90:cc:11:85: f3:9a:c7:fc:2c:d8:81:9b:3f:be:77:1c:56:66:2a:b1:29:07: d4:62:09:a4:70:92:da:ca:4a:b1:c9:cb:f0:4d:7c:62:20:d0: 0b:f6:c8:7d:45:19:34:07:f4:cb:0a:1a:c9:1d:d3:48:6c:a0: 5d:2c:a3:6b:4e:56:99:0a:3c:53:fb:18:86:12:b0:5a:76:ee: 3f:96:ef:78:26:7d:1d:84:3b:11:d7:d9:70:45:5a:74:c6:4d: f8:fe:b8:4f:de:2b:52:5f:d3:71:49:40:5d:d9:e4:c0:11:7b: 1d:42:fc:f3:7a:2c:68:1d:b7:51:63:36:8b:31:12:c2:b5:b6: 6e:12:35:42:2a:79:2c:64:6f:48:6d:ce:8a:b0:50:cd:96:39: 6c:67:f8:9a:d1:1d:d4:ab:89:29:f4:e9:f1:1b:d0:be:96:fe: b6:77:39:9b:07:59:df:6e:a7:ff:8f:d1:2b:1e:3f:93:d2:90: af:f8:76:5e:da:45:ed:29:3b:f1:36:1d:10:e3:a1:4b:61:a7: 80:30:0e:43:d8:4f:8b:d2:7a:13:5e:e5:1a:d4:f6:eb:5b:2c: 13:06:87:ea:cb:e3:9e:b3:91:e8:ca:92:3d:ef:f9:3d:f5:b9: a0:a3:aa:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDCw33FfIlT5r4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk NDQzMDc0N2ItNDFkYS00YzJkLWI5ZjEtNDllYmU3ODk3MDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3v3a4zrGtLWx3wTb2ac8V9dA/a9XDcY9YvU 0KoYynQgObIqGLYeuGYQp3tkHFTeoy/pDLiMvGn+/Cyd5fbi0u3O0YUlzzNvuM58 sfbizeqwNheNooDOJoLu75n60vfknV2wVgE3OKOijPOHgaCTQeYNJRCPp+0ommn1 3BunOi8XrkE0IVsQdD+M22nr7Ll69A/w4nBjGugxJeUpYRD7BRjJ9AB5KUltStuA ZTSoCG9d86NgmiwbfZxXW2Mw+wLFIVEBtGIh4Lz2hZVAIPRkwQyF6+ggSLjvnkuF WufMn8AmAU8qgdll+YhxfpEmK0jtpTzQ4J8VweYaAm5jcjfOpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPSiju2RafBb6ZudPXV4Vi64Ku7MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGRiMGQxOGYtZDEwNS0z OGIwLWFmMTktMmQ3NGEzNWY4N2FkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABDuxpXbk7IrjUf5fxfrkMwRhfOax/ws2IGbP753HFZmKrEpB9Ri CaRwktrKSrHJy/BNfGIg0Av2yH1FGTQH9MsKGskd00hsoF0so2tOVpkKPFP7GIYS sFp27j+W73gmfR2EOxHX2XBFWnTGTfj+uE/eK1Jf03FJQF3Z5MARex1C/PN6LGgd t1FjNosxEsK1tm4SNUIqeSxkb0htzoqwUM2WOWxn+JrRHdSriSn06fEb0L6W/rZ3 OZsHWd9up/+P0SseP5PSkK/4dl7aRe0pO/E2HRDjoUthp4AwDkPYT4vSehNe5RrU 9utbLBMGh+rL456zkejKkj3v+T31uaCjqlk= -----END CERTIFICATE-----Generated at Fri Mar 14 13:39:38 2025 by rpki-client