$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa File: b06820e1-fa20-3f02-8591-f608a88a8249.roa (raw, json) Hash identifier: 5rgL9eH9KKQqlCsn71+kv+j2OHZLpqCjtnMJu1U9eww= Subject key identifier: 11:95:EF:32:C9:3E:B9:82:EF:0F:25:78:75:F6:57:99:A3:87:D0:22 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC30EA5B0BAF323550A100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 2607:f028:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:30:ea:5b:0b:af:32:35:50:a1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=9a65600e-a4d5-49cf-9052-10f26ef6e70e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:49:33:32:05:8e:df:3a:d0:d3:0c:56:e8:b2: 0b:d1:22:4d:dd:0d:fd:1a:95:ef:87:aa:b0:5b:5e: 65:a5:04:34:04:20:f5:db:5a:d4:c1:9d:f5:e5:eb: 3b:25:98:d3:24:e6:54:d9:f4:71:39:36:b7:0a:a0: 4c:29:f8:c6:2f:e2:92:5e:3c:00:cb:f6:f1:a7:11: d1:f6:26:4f:c5:23:e9:dd:a9:b9:38:d4:4e:26:7e: 49:f0:4f:1b:cc:cd:52:29:a9:24:21:83:20:82:41: 34:75:bb:e6:a4:22:37:1f:da:ff:f7:31:9e:89:9f: 35:4c:d6:e2:1f:c8:ad:2a:f3:d3:ba:28:b1:1b:eb: 4a:7d:bd:06:b3:67:60:1c:b3:f9:62:fc:73:26:d7: 50:25:5f:19:db:19:d0:0d:8e:89:92:bb:84:4e:87: 05:11:92:31:0f:a5:b0:3e:d5:6a:85:82:93:27:34: 2a:06:23:fb:2c:92:08:04:25:6a:dd:b5:64:6a:a1: fc:9a:b5:52:2d:b3:1a:55:ca:c4:60:4d:ca:10:d1: 86:8c:39:06:15:c6:65:60:73:02:f1:94:e7:bc:71: 75:ac:55:9d:af:1e:05:2e:8f:e0:fc:66:84:0f:5e: 6a:b1:53:03:d4:bf:c7:34:3d:4c:02:79:80:63:a8: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:95:EF:32:C9:3E:B9:82:EF:0F:25:78:75:F6:57:99:A3:87:D0:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:04:ed:cd:15:2e:3b:0b:08:b9:d2:ba:99:0d:44:aa:cb:d5: 24:3f:4b:40:74:b0:f1:5e:3e:e9:d3:7e:a6:2f:ef:79:2d:56: 25:6f:9e:bc:7f:ef:41:c3:27:2c:b6:d2:2c:72:59:17:27:1d: b9:c9:2f:69:f8:f2:13:5b:d5:7a:44:2d:96:a8:99:e3:a5:e7: cb:d3:c0:d1:2f:b1:24:86:6f:9b:a1:67:dc:e5:8d:06:2f:7d: 1e:a8:a7:ff:eb:60:c6:47:66:88:4b:87:78:c9:64:29:33:2d: 8b:02:d9:9b:72:4a:36:43:df:f8:db:38:2f:bf:fb:3f:aa:f7: db:62:c3:0d:f4:96:a9:b6:b3:08:d0:c2:bc:9c:3a:81:04:25: 43:5a:64:e9:bf:3b:71:ea:e6:7e:b3:c8:4f:6b:9f:ed:cf:91: 8a:0d:cb:80:8c:2d:37:2d:a3:f7:d2:8a:a7:9d:ec:9f:b2:98: c2:d1:9b:4c:99:0b:15:26:6e:a9:70:35:d4:fa:07:ac:71:51: c1:f6:4b:39:63:56:03:f9:25:a0:47:e4:5d:d1:33:b1:2a:13: 4b:4b:50:a0:f9:ba:a7:7f:09:c9:3d:2b:2e:98:b1:7b:c0:7a: b2:e7:fd:0d:f4:40:c0:44:77:96:b4:b1:03:a8:72:05:64:5a: 86:50:28:17 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrDDqWwuvMjVQoQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OWE2NTYwMGUtYTRkNS00OWNmLTkwNTItMTBmMjZlZjZlNzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUkzMgWO3zrQ0wxW6LIL0SJN3Q39GpXvh6qw W15lpQQ0BCD121rUwZ315es7JZjTJOZU2fRxOTa3CqBMKfjGL+KSXjwAy/bxpxHR 9iZPxSPp3am5ONROJn5J8E8bzM1SKakkIYMggkE0dbvmpCI3H9r/9zGeiZ81TNbi H8itKvPTuiixG+tKfb0Gs2dgHLP5YvxzJtdQJV8Z2xnQDY6JkruETocFEZIxD6Ww PtVqhYKTJzQqBiP7LJIIBCVq3bVkaqH8mrVSLbMaVcrEYE3KENGGjDkGFcZlYHMC 8ZTnvHF1rFWdrx4FLo/g/GaED15qsVMD1L/HND1MAnmAY6hocQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBGV7zLJPrmC7w8leHX2V5mjh9AiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjA2ODIwZTEtZmEyMC0z ZjAyLTg1OTEtZjYwOGE4OGE4MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHME7c0VLjsLCLnSupkNRKrL1SQ/S0B0sPFePunTfqYv73ktViVv nrx/70HDJyy20ixyWRcnHbnJL2n48hNb1XpELZaomeOl58vTwNEvsSSGb5uhZ9zl jQYvfR6op//rYMZHZohLh3jJZCkzLYsC2ZtySjZD3/jbOC+/+z+q99tiww30lqm2 swjQwrycOoEEJUNaZOm/O3Hq5n6zyE9rn+3PkYoNy4CMLTcto/fSiqed7J+ymMLR m0yZCxUmbqlwNdT6B6xxUcH2SzljVgP5JaBH5F3RM7EqE0tLUKD5uqd/Cck9Ky6Y sXvAerLn/Q30QMBEd5a0sQOocgVkWoZQKBc= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:29 2025 by rpki-client