$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa File: 99e02d27-062b-33ce-b3e1-14abadc05be0.roa (raw, json) Hash identifier: mp5krnmYniJzfN/7KYFdmg+RbHISJxd96M1OMNzQipI= Subject key identifier: 45:0C:55:FA:3B:75:24:AF:DF:02:73:E2:6E:4C:62:C4:64:82:AA:D6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584834557743CB6AD1310DC3285B Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:77:43:cb:6a:d1:31:0d:c3:28:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=9bbeeb8a-b58d-47c1-a1e6-026723a63c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:60:e2:d5:10:09:c5:46:a9:fe:a1:69:db:76: 4c:4f:dc:f2:02:86:24:00:1a:e2:3a:a4:fb:12:78: d2:7b:bc:0a:61:00:dd:df:77:f0:4e:f9:56:14:a2: ba:32:48:6f:c6:ec:19:80:e9:c4:06:f2:2d:10:2e: 57:b1:33:24:29:66:e8:45:bb:73:aa:1d:38:62:51: ea:e2:f1:4e:11:a2:50:b1:87:cc:44:25:ce:e6:41: a4:2e:42:04:47:4e:73:14:d4:2d:99:ea:59:7e:32: aa:b0:26:3b:be:24:f3:3e:48:69:f4:90:9b:94:18: b9:62:57:00:06:65:b0:62:2a:26:d5:06:e6:b9:11: 13:ce:ab:18:18:6a:12:f0:26:ac:52:db:5c:7e:54: e0:58:3b:59:77:aa:f3:8f:24:a0:28:a6:20:5d:30: 4f:37:dd:5b:88:e9:7d:4d:56:a7:b4:7a:dd:f4:03: 9d:70:d3:33:f6:16:5f:73:aa:ef:88:99:86:ff:81: 79:81:4b:a5:df:8a:58:ee:7d:00:7c:34:32:6c:7c: aa:8f:96:55:20:1b:8a:26:29:00:c7:58:96:47:68: c1:1b:f8:d2:f9:73:72:f5:38:7e:76:2c:4a:e3:d8: f9:98:7e:6c:8a:09:29:f4:4e:51:3f:a3:ea:b5:0d: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0C:55:FA:3B:75:24:AF:DF:02:73:E2:6E:4C:62:C4:64:82:AA:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/99e02d27-062b-33ce-b3e1-14abadc05be0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8e:26:db:94:c3:fc:9a:61:a9:ba:c8:b4:f6:d0:fe:5e:8b: e4:4a:06:a7:7d:0d:30:5c:9b:e6:e9:01:db:1a:05:dc:08:2f: a7:c4:95:46:86:4b:ce:98:87:6e:ee:71:5b:10:d7:a6:28:39: 07:c6:cd:ab:69:43:19:75:43:0a:ee:72:f4:c3:80:a9:b2:b6: 32:b0:15:66:5c:e6:9a:89:3c:56:84:cb:6b:86:c3:0f:bd:11: 98:0c:c5:3d:12:c7:91:60:19:aa:45:ad:df:00:65:a0:fc:c2: a5:83:12:b0:57:d0:53:8f:84:72:cf:c3:3d:91:f4:f7:ef:28: 7a:62:67:0c:fa:53:f7:d5:4a:8d:2c:32:dd:bc:4d:8f:77:e5: b7:ff:87:72:5e:38:63:83:96:39:e3:c6:3d:6a:e4:6d:aa:d0: 51:90:d2:df:fc:18:eb:b9:1a:56:c2:b3:10:03:1c:1f:79:a3: 63:b5:3d:5c:c3:3e:ec:a1:1f:27:71:2b:5b:33:94:f2:04:e8: 8e:e9:43:1a:1d:d5:e9:0b:aa:76:c0:95:7f:2f:2a:a7:01:a1: 9f:1f:3b:a6:5c:23:0f:d7:4b:99:09:c8:d2:66:6f:03:4a:97: 07:7b:c4:c9:2a:65:05:cc:30:d5:24:eb:82:08:c1:a4:61:78: 96:c6:24:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VXdDy2rRMQ3DKFswDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk OWJiZWViOGEtYjU4ZC00N2MxLWExZTYtMDI2NzIzYTYzYzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWDi1RAJxUap/qFp23ZMT9zyAoYkABriOqT7 EnjSe7wKYQDd33fwTvlWFKK6MkhvxuwZgOnEBvItEC5XsTMkKWboRbtzqh04YlHq 4vFOEaJQsYfMRCXO5kGkLkIER05zFNQtmepZfjKqsCY7viTzPkhp9JCblBi5YlcA BmWwYiom1QbmuRETzqsYGGoS8CasUttcflTgWDtZd6rzjySgKKYgXTBPN91biOl9 TVantHrd9AOdcNMz9hZfc6rviJmG/4F5gUul34pY7n0AfDQybHyqj5ZVIBuKJikA x1iWR2jBG/jS+XNy9Th+dixK49j5mH5sigkp9E5RP6PqtQ3FswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEUMVfo7dSSv3wJz4m5MYsRkgqrWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTllMDJkMjctMDYyYi0z M2NlLWIzZTEtMTRhYmFkYzA1YmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACaOJtuUw/yaYam6yLT20P5ei+RKBqd9DTBcm+bpAdsaBdwIL6fE lUaGS86Yh27ucVsQ16YoOQfGzatpQxl1QwrucvTDgKmytjKwFWZc5pqJPFaEy2uG ww+9EZgMxT0Sx5FgGapFrd8AZaD8wqWDErBX0FOPhHLPwz2R9PfvKHpiZwz6U/fV So0sMt28TY935bf/h3JeOGODljnjxj1q5G2q0FGQ0t/8GOu5GlbCsxADHB95o2O1 PVzDPuyhHydxK1szlPIE6I7pQxod1ekLqnbAlX8vKqcBoZ8fO6ZcIw/XS5kJyNJm bwNKlwd7xMkqZQXMMNUk64IIwaRheJbGJI4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:53 2025 by rpki-client