$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5c8dbc-4e12-32a2-b619-041f36132fb0.roa File: 4e5c8dbc-4e12-32a2-b619-041f36132fb0.roa (raw, json) Hash identifier: WlauA3w0VPuYvD5W0jjxSFJE2cFxnCVPslhP5vpiHQo= Subject key identifier: 28:01:CB:8F:46:F0:49:A2:9D:96:31:B4:4A:C2:04:C5:E9:89:45:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848D0ABAD1DD49DF6AE85B549A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5c8dbc-4e12-32a2-b619-041f36132fb0.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 3360 IP address blocks: 2607:f028:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:ad:1d:d4:9d:f6:ae:85:b5:49:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=159b3d41-c0a6-4b53-b554-c138cf230d96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:5a:74:0a:49:6c:48:81:95:5d:23:9f:67: 21:ee:ff:e1:e0:be:3d:d8:b5:bb:ab:5c:22:d3:9b: ac:c5:53:e5:d5:3d:5e:86:e3:12:3a:65:7f:bf:63: 00:13:44:76:41:16:e4:23:2f:1b:33:66:67:b1:c8: 8f:34:92:f2:85:de:68:22:9b:db:61:be:4e:f8:e9: 7a:99:15:60:5a:df:e8:7e:06:4e:6a:e2:0b:cb:18: 16:7c:c0:29:0e:3c:6c:a3:b0:e3:b4:ec:57:c1:32: 17:42:5a:43:9a:7c:bc:cd:a6:12:57:ab:9a:cc:4b: a9:c9:5e:20:1e:f4:e5:5e:d0:b8:54:bd:10:1b:e8: f2:5d:b6:97:db:b9:9e:74:2b:c7:4d:54:41:1e:dc: 61:cd:94:6b:81:40:87:7a:53:31:86:ad:ef:bb:74: 32:64:5b:5a:96:cb:97:5d:f1:8b:f6:8f:d8:b5:3d: 85:4a:ef:01:2b:8b:19:37:92:c2:0b:c9:a3:57:5c: 3b:3d:24:ad:bd:5f:72:b1:84:3a:a1:c6:b3:39:5a: bc:fe:c0:8d:6c:75:69:63:03:58:f6:a7:53:3a:d1: 74:fe:f6:cb:53:d5:e7:f5:b4:77:f0:51:e8:b2:66: 05:84:3e:d3:f9:59:06:de:8a:59:c7:7f:42:96:5f: 56:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:01:CB:8F:46:F0:49:A2:9D:96:31:B4:4A:C2:04:C5:E9:89:45:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4e5c8dbc-4e12-32a2-b619-041f36132fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:99:7b:3d:e7:45:10:6c:32:26:9f:4a:26:73:61:d6:62:83: a8:7f:b9:69:09:88:69:90:95:cf:bc:5f:9e:7e:75:58:0e:30: 22:ae:31:e4:88:a6:26:7b:db:5f:8d:2a:0f:59:86:67:3b:d1: 4f:75:d2:12:bc:12:32:73:fe:85:cd:90:35:b2:49:f9:53:8a: 26:89:4b:c1:7d:46:d1:01:73:a6:db:df:86:ed:2b:7f:15:f6: 3a:a4:87:d5:1a:fe:e9:41:bc:ef:d5:57:c9:08:19:b2:51:8e: 94:4a:16:30:76:50:ad:a0:d7:73:ca:03:ae:98:28:5b:44:16: 09:3d:21:e1:54:82:8a:58:35:0f:48:b3:79:21:5d:2e:82:7d: 94:4f:9a:fb:68:3d:ab:31:4b:ae:4e:34:d8:4b:38:21:7e:d4: 29:0e:5a:bb:3e:6e:a9:14:e0:bd:bc:5a:5a:6f:af:0a:43:ae: 0b:45:f3:84:81:1e:6c:76:0a:cc:42:37:23:fb:df:0e:fb:a3: 12:24:d1:7f:fb:3c:f4:05:d3:68:a3:ea:2f:08:6e:e1:f3:16: 83:b7:a4:54:a0:03:03:ae:28:fc:70:d8:27:da:51:45:6a:13: 4a:e9:50:55:50:98:90:ec:b8:bf:ff:fd:62:4b:fc:33:53:ab: fa:8a:e0:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjQq60d1J32roW1SaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk MTU5YjNkNDEtYzBhNi00YjUzLWI1NTQtYzEzOGNmMjMwZDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52RadApJbEiBlV0jn2ch7v/h4L492LW7q1wi 05usxVPl1T1ehuMSOmV/v2MAE0R2QRbkIy8bM2ZnsciPNJLyhd5oIpvbYb5O+Ol6 mRVgWt/ofgZOauILyxgWfMApDjxso7DjtOxXwTIXQlpDmny8zaYSV6uazEupyV4g HvTlXtC4VL0QG+jyXbaX27medCvHTVRBHtxhzZRrgUCHelMxhq3vu3QyZFtalsuX XfGL9o/YtT2FSu8BK4sZN5LCC8mjV1w7PSStvV9ysYQ6ocazOVq8/sCNbHVpYwNY 9qdTOtF0/vbLU9Xn9bR38FHosmYFhD7T+VkG3opZx39Cll9WRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCgBy49G8EminZYxtErCBMXpiUXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGU1YzhkYmMtNGUxMi0z MmEyLWI2MTktMDQxZjM2MTMyZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE+Zez3nRRBsMiafSiZzYdZig6h/uWkJiGmQlc+8X55+dVgOMCKu MeSIpiZ721+NKg9Zhmc70U910hK8EjJz/oXNkDWySflTiiaJS8F9RtEBc6bb34bt K38V9jqkh9Ua/ulBvO/VV8kIGbJRjpRKFjB2UK2g13PKA66YKFtEFgk9IeFUgopY NQ9Is3khXS6CfZRPmvtoPasxS65ONNhLOCF+1CkOWrs+bqkU4L28WlpvrwpDrgtF 84SBHmx2CsxCNyP73w77oxIk0X/7PPQF02ij6i8IbuHzFoO3pFSgAwOuKPxw2Cfa UUVqE0rpUFVQmJDsuL///WJL/DNTq/qK4NY= -----END CERTIFICATE-----Generated at Fri Mar 14 14:04:07 2025 by rpki-client