$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa File: 846c0a01-8222-3467-bb6d-2801d7a21875.roa (raw, json) Hash identifier: 9XYrO8H+LU0Qnyt3AQcD57Y7g5eivCZoUSepaagZpJ4= Subject key identifier: BC:AF:5B:4B:33:22:6E:9E:2E:94:CF:FA:82:69:F1:02:03:90:C3:77 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10AAA0D3432C572A9EA00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 2607:f028:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0a:aa:0d:34:32:c5:72:a9:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=45da8c11-1092-4db0-9d2e-ed025be6aaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:96:1f:e6:d4:58:6c:7f:67:08:fe:6a:54:83: ad:43:00:d3:c9:95:8e:a6:2b:ca:a4:59:dd:dc:16: d2:36:d1:1a:a6:54:ba:d6:1d:03:b5:63:0a:ef:81: 20:0f:a5:ff:66:95:86:6c:cf:55:47:a1:de:5e:d9: f7:c0:9c:de:ad:85:42:70:39:88:3e:62:85:4e:86: 3f:76:03:f2:2c:17:2e:94:68:51:b9:4b:f3:38:5f: 4e:e6:38:17:7e:4b:56:2b:f5:ca:4b:9e:cc:5e:8a: 54:a2:e3:6f:ae:17:48:e5:74:e2:c6:a7:b6:bc:7e: 52:5b:d8:df:53:25:e6:04:af:ae:97:93:39:54:a8: 91:dc:ab:b4:40:79:0b:a2:0f:ec:24:b3:5b:14:84: 97:f8:b5:bc:98:fa:e8:46:73:0c:81:da:e6:bc:94: 73:9f:80:a8:39:7c:54:f9:f7:ac:eb:21:03:1f:db: 1f:ed:f3:d9:fb:22:1a:6b:69:d1:f1:92:c7:61:66: 51:98:68:2b:0e:d8:1e:50:a4:15:88:0d:31:73:69: 71:20:6a:35:e2:1c:b9:b5:3b:8b:3e:a7:eb:fd:21: bd:76:55:56:62:91:19:ba:46:eb:31:62:25:eb:45: 62:32:00:a0:ac:07:50:46:a9:47:0f:da:b7:59:6a: 3f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AF:5B:4B:33:22:6E:9E:2E:94:CF:FA:82:69:F1:02:03:90:C3:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:19:49:a5:14:13:6e:cf:51:4c:e8:c9:e1:a1:d5:d0:27:a8: a6:cc:9b:76:31:9b:2e:15:b9:95:55:54:6f:9f:21:26:86:a3: e5:0b:02:61:10:be:70:59:27:fc:6d:eb:0b:4d:83:70:78:1d: f3:06:84:74:3c:4c:83:a2:b6:3a:b4:ed:b4:20:4f:98:99:d2: 9c:c7:f9:70:2f:ab:79:41:3d:22:77:37:32:02:c8:ce:1d:d6: e2:07:e0:58:60:b0:b4:43:f8:29:f5:e0:17:6f:d8:61:bd:07: 21:16:43:17:ae:ec:f2:ee:40:7d:0f:45:2e:f5:0e:b4:e8:e1: c7:7d:3c:33:b7:9d:de:75:a8:ef:6f:12:60:16:c8:7b:f2:6d: 57:46:28:9d:9a:07:c2:44:78:94:25:f3:e9:3b:8b:70:9d:c4: a8:d1:c9:f6:b2:a7:52:9e:16:2c:ef:cf:54:a1:1b:8f:9a:cb: e7:13:a2:be:0b:a2:1f:23:59:b8:a9:99:43:5d:5c:98:17:3d: 6a:c3:ab:df:fd:01:b3:44:39:aa:ee:7c:cb:e8:1a:71:d9:a4: fe:2e:4a:de:c8:48:b4:82:ec:a6:61:c4:0f:e2:07:c9:c6:9c: 7c:8b:0a:32:de:75:0a:6d:ea:f7:ea:8b:2b:75:eb:8e:54:18: 4b:f2:25:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQqqDTQyxXKp6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NDVkYThjMTEtMTA5Mi00ZGIwLTlkMmUtZWQwMjViZTZhYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZYf5tRYbH9nCP5qVIOtQwDTyZWOpivKpFnd 3BbSNtEaplS61h0DtWMK74EgD6X/ZpWGbM9VR6HeXtn3wJzerYVCcDmIPmKFToY/ dgPyLBculGhRuUvzOF9O5jgXfktWK/XKS57MXopUouNvrhdI5XTixqe2vH5SW9jf UyXmBK+ul5M5VKiR3Ku0QHkLog/sJLNbFISX+LW8mProRnMMgdrmvJRzn4CoOXxU +fes6yEDH9sf7fPZ+yIaa2nR8ZLHYWZRmGgrDtgeUKQViA0xc2lxIGo14hy5tTuL Pqfr/SG9dlVWYpEZukbrMWIl60ViMgCgrAdQRqlHD9q3WWo/iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLyvW0szIm6eLpTP+oJp8QIDkMN3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODQ2YzBhMDEtODIyMi0z NDY3LWJiNmQtMjgwMWQ3YTIxODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGoZSaUUE27PUUzoyeGh1dAnqKbMm3Yxmy4VuZVVVG+fISaGo+UL AmEQvnBZJ/xt6wtNg3B4HfMGhHQ8TIOitjq07bQgT5iZ0pzH+XAvq3lBPSJ3NzIC yM4d1uIH4FhgsLRD+Cn14Bdv2GG9ByEWQxeu7PLuQH0PRS71DrTo4cd9PDO3nd51 qO9vEmAWyHvybVdGKJ2aB8JEeJQl8+k7i3CdxKjRyfayp1KeFizvz1ShG4+ay+cT or4Loh8jWbipmUNdXJgXPWrDq9/9AbNEOarufMvoGnHZpP4uSt7ISLSC7KZhxA/i B8nGnHyLCjLedQpt6vfqiyt1645UGEvyJXs= -----END CERTIFICATE-----Generated at Thu Aug 21 07:59:44 2025 by rpki-client