$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa File: a0bf0af7-8d09-3de7-95a4-111482f052a7.roa (raw, json) Hash identifier: tDKe6VbBzLCjWTmaUKSNPtqBpoG156m+pwasmjE2gwM= Subject key identifier: 06:72:94:8A:6B:37:87:64:23:04:14:46:15:7A:BE:B2:E7:FC:7D:72 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC36EAA1A66F86C7BAC300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 3360 IP address blocks: 2607:f028:110::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:36:ea:a1:a6:6f:86:c7:ba:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=e5cc141b-c8b0-4488-8a60-4b414dab952c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e7:96:33:69:91:ad:5b:89:14:98:4f:d5:28: aa:3a:2e:33:04:9d:c8:f3:6f:af:3b:2a:3f:31:fb: 91:f6:10:37:48:e4:a1:ef:70:cc:bb:99:59:38:79: e8:2b:37:26:28:32:bc:c1:08:a9:7c:58:18:36:ac: 46:44:45:46:8e:2a:5a:3d:0b:b5:61:42:37:31:b3: d6:9d:57:50:06:aa:9d:0f:6f:2f:cd:d1:eb:6d:54: 80:a9:d9:bd:1d:bc:30:31:35:0b:d4:f6:1b:ba:8e: e0:b0:db:87:1a:df:79:98:da:1f:69:ad:e5:12:a2: 0a:b3:b9:2b:42:1f:bd:22:8d:e3:23:12:5c:db:55: 82:9c:1b:c1:d9:3b:57:31:e9:fa:50:4e:6f:c1:27: 30:d4:b4:53:40:74:05:77:e5:f1:48:fb:29:b3:25: 07:61:bd:84:f4:dc:01:22:67:92:f7:58:b4:9e:ee: 5e:6b:03:7e:ad:a8:ce:c0:b1:bf:1a:70:d0:ef:fb: ef:12:52:7b:6c:8c:b4:98:c5:55:ad:76:34:3b:96: b0:a6:4e:a3:46:90:96:f3:6b:90:1e:d3:53:14:e7: 22:49:28:b2:6b:4d:41:37:a4:5f:a4:b1:b0:7f:fa: 02:61:12:87:e0:40:79:74:c9:1c:d8:c5:db:e5:66: 5c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:72:94:8A:6B:37:87:64:23:04:14:46:15:7A:BE:B2:E7:FC:7D:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a0bf0af7-8d09-3de7-95a4-111482f052a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:110::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:2d:15:08:4b:e0:25:13:58:88:2a:e1:fd:eb:5b:cd:7b:c2: f6:06:4d:e3:d2:ce:1a:9f:2c:08:25:e8:cc:b4:48:45:73:db: 86:fe:63:b1:b6:2d:c2:cb:be:ab:50:45:32:8b:aa:70:1e:9c: 56:d1:8a:94:28:47:2c:ac:d6:e5:db:d2:36:81:6e:12:e1:fc: b3:ea:ea:31:f8:51:7a:bd:85:13:06:b3:74:e0:25:87:fb:1f: 2a:cc:65:c8:b0:c3:6a:45:db:6e:44:72:67:d0:85:35:ae:7c: c3:78:2b:02:11:f2:ba:d7:99:9e:e2:5f:57:7a:90:17:0e:5d: 1a:b9:f8:c7:69:77:0c:74:ba:d8:45:2f:62:04:42:75:49:5c: 90:04:03:2c:15:65:2a:75:82:66:7d:d2:f6:b7:46:96:8d:f8: 49:a2:33:fd:32:71:cf:ed:d4:c1:48:b2:99:2b:58:ac:fe:b8: 1f:a0:e9:7c:a4:2f:d1:14:b6:21:be:55:fe:c8:a2:8b:c3:95: ae:8d:d3:7a:8f:cd:e7:00:c5:21:53:77:d9:50:57:d0:46:81: 7c:18:37:fb:d7:31:86:a9:68:b5:cd:82:99:09:67:93:a3:77: 46:da:bb:4f:57:cd:4b:2f:32:8c:84:3b:59:ed:7c:e8:c2:9d: c3:d7:0a:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDbqoaZvhse6wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTVjYzE0MWItYzhiMC00NDg4LThhNjAtNGI0MTRkYWI5NTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOeWM2mRrVuJFJhP1SiqOi4zBJ3I82+vOyo/ MfuR9hA3SOSh73DMu5lZOHnoKzcmKDK8wQipfFgYNqxGREVGjipaPQu1YUI3MbPW nVdQBqqdD28vzdHrbVSAqdm9HbwwMTUL1PYbuo7gsNuHGt95mNofaa3lEqIKs7kr Qh+9Io3jIxJc21WCnBvB2TtXMen6UE5vwScw1LRTQHQFd+XxSPspsyUHYb2E9NwB ImeS91i0nu5eawN+rajOwLG/GnDQ7/vvElJ7bIy0mMVVrXY0O5awpk6jRpCW82uQ HtNTFOciSSiya01BN6RfpLGwf/oCYRKH4EB5dMkc2MXb5WZcbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAZylIprN4dkIwQURhV6vrLn/H1yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTBiZjBhZjctOGQwOS0z ZGU3LTk1YTQtMTExNDgyZjA1MmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABMtFQhL4CUTWIgq4f3rW817wvYGTePSzhqfLAgl6My0SEVz24b+ Y7G2LcLLvqtQRTKLqnAenFbRipQoRyys1uXb0jaBbhLh/LPq6jH4UXq9hRMGs3Tg JYf7HyrMZciww2pF225EcmfQhTWufMN4KwIR8rrXmZ7iX1d6kBcOXRq5+Mdpdwx0 uthFL2IEQnVJXJAEAywVZSp1gmZ90va3RpaN+EmiM/0ycc/t1MFIspkrWKz+uB+g 6XykL9EUtiG+Vf7IoovDla6N03qPzecAxSFTd9lQV9BGgXwYN/vXMYapaLXNgpkJ Z5Ojd0bau09XzUsvMoyEO1ntfOjCncPXCqo= -----END CERTIFICATE-----Generated at Sat Apr 5 21:21:10 2025 by rpki-client