$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa File: a02a9680-a97a-37ef-9732-9c4697176902.roa (raw, json) Hash identifier: ZB/XzxwLqV5t7Vu/binMWDN1pfRgdyYUWefxbhhT6QQ= Subject key identifier: 87:FC:91:A1:BA:80:B5:65:0C:AE:BD:67:B0:EB:99:07:18:2F:82:A5 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E53E630DE4195977A8D5E0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 3356 IP address blocks: 2607:f028:21::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:3e:63:0d:e4:19:59:77:a8:d5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=3b7f878f-5e7f-46a5-9c5f-960172a38b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ec:e3:51:a6:40:42:12:96:d7:56:0d:8f:56: 61:92:4c:f5:f5:46:51:b7:6b:18:c0:df:c5:19:2f: 0e:91:94:61:52:17:7b:c5:73:ae:df:a8:10:cb:3a: 08:98:e5:4e:82:fb:db:71:4b:37:75:74:ef:4f:0a: 93:13:30:d7:f5:65:fa:78:8d:9b:71:cc:fa:a9:dc: 2b:12:2e:1d:06:f9:85:38:22:ca:75:89:ee:a6:ee: b3:67:57:ee:dd:d2:26:fc:2c:4a:e6:8e:84:3e:59: be:d4:21:ac:bb:3f:d6:09:bb:44:57:e6:5f:d3:33: 6a:be:13:11:7a:62:1b:01:fd:ce:c7:e3:c0:b5:ee: c7:71:19:fd:4c:1e:2f:0d:77:00:a7:53:3f:2d:87: 69:a5:5f:e2:9a:cb:63:5c:16:63:0e:3f:bb:b0:1b: 85:54:1d:99:db:36:26:1f:f3:5b:e1:2e:36:31:34: 0e:91:5c:ef:ee:dc:54:e5:fd:56:64:bd:4e:e4:de: df:e3:a2:ac:f7:db:65:27:ff:f2:2b:59:d4:ef:7f: 88:58:16:4f:53:df:55:9e:6a:a2:21:a8:97:55:b0: 67:65:61:37:bd:8a:a8:e7:c7:cb:2e:ba:a7:83:be: 7f:da:0e:9d:82:fc:73:37:30:b3:d7:9c:0a:7d:9b: 33:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:91:A1:BA:80:B5:65:0C:AE:BD:67:B0:EB:99:07:18:2F:82:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a02a9680-a97a-37ef-9732-9c4697176902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:21::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d4:3d:fe:8b:82:f5:7a:88:90:00:c5:e0:a7:9a:f5:1a:48: 51:f1:24:2f:51:cc:d5:61:48:a2:38:04:88:ee:74:91:57:3f: f8:94:d3:ed:b6:2a:bd:e4:46:ae:fc:0b:5a:ce:ed:1a:b9:71: 04:cf:06:00:c1:06:17:78:28:05:cf:90:fa:c6:c9:62:ad:0c: 83:60:41:4d:c3:13:63:92:75:14:54:c9:94:c8:2b:17:18:5b: f3:d0:6f:33:d9:02:1d:e1:d6:bf:23:c3:e5:17:8e:0e:f0:40: 95:c9:ce:53:58:a6:3c:57:fc:7d:46:6b:e7:48:55:94:ee:2d: 23:2c:e8:7d:ff:5d:eb:c4:ed:b8:52:fe:61:5e:37:70:83:78: a7:d6:b7:04:70:b2:cc:74:8e:a2:8f:a8:72:8d:51:5d:26:d2: f8:6c:28:92:7b:d3:27:86:8e:68:fb:46:ed:64:05:d2:06:74: 94:cb:46:66:a8:da:54:35:8c:17:d1:58:37:1c:cd:68:63:19: b9:ae:1f:f8:94:7a:f9:ba:09:58:af:ce:0b:1f:57:ed:14:a6: 58:15:d6:56:35:56:8b:dd:64:f7:2a:f6:02:00:d0:29:57:1f: 48:59:fb:4c:9e:4d:7d:f7:69:48:3b:b8:61:19:84:53:45:6f: 12:ab:8f:42 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5T5jDeQZWXeo1eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk M2I3Zjg3OGYtNWU3Zi00NmE1LTljNWYtOTYwMTcyYTM4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOzjUaZAQhKW11YNj1Zhkkz19UZRt2sYwN/F GS8OkZRhUhd7xXOu36gQyzoImOVOgvvbcUs3dXTvTwqTEzDX9WX6eI2bccz6qdwr Ei4dBvmFOCLKdYnupu6zZ1fu3dIm/CxK5o6EPlm+1CGsuz/WCbtEV+Zf0zNqvhMR emIbAf3Ox+PAte7HcRn9TB4vDXcAp1M/LYdppV/imstjXBZjDj+7sBuFVB2Z2zYm H/Nb4S42MTQOkVzv7txU5f1WZL1O5N7f46Ks99tlJ//yK1nU73+IWBZPU99Vnmqi IaiXVbBnZWE3vYqo58fLLrqng75/2g6dgvxzNzCz15wKfZszCwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIf8kaG6gLVlDK69Z7DrmQcYL4KlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTAyYTk2ODAtYTk3YS0z N2VmLTk3MzItOWM0Njk3MTc2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAfUPf6LgvV6iJAAxeCnmvUaSFHxJC9RzNVhSKI4BIjudJFXP/iU 0+22Kr3kRq78C1rO7Rq5cQTPBgDBBhd4KAXPkPrGyWKtDINgQU3DE2OSdRRUyZTI KxcYW/PQbzPZAh3h1r8jw+UXjg7wQJXJzlNYpjxX/H1Ga+dIVZTuLSMs6H3/XevE 7bhS/mFeN3CDeKfWtwRwssx0jqKPqHKNUV0m0vhsKJJ70yeGjmj7Ru1kBdIGdJTL Rmao2lQ1jBfRWDcczWhjGbmuH/iUevm6CVivzgsfV+0UplgV1lY1VovdZPcq9gIA 0ClXH0hZ+0yeTX33aUg7uGEZhFNFbxKrj0I= -----END CERTIFICATE-----Generated at Sat Jun 7 19:53:47 2025 by rpki-client