$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa File: babe936d-1796-3a70-96b4-b4c58df1c7aa.roa (raw, json) Hash identifier: dCFkXzgJzfrX0dK9hRJXIrRgsss9eE3hIQx2AyeTf0E= Subject key identifier: 17:20:5F:FD:A8:36:B9:BE:50:46:0B:B2:23:48:8F:FD:6C:A3:90:8F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2DAD6EE81D62F3976D78 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2d:ad:6e:e8:1d:62:f3:97:6d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=e823a40c-76d5-4654-95dc-42d45ec72ac2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6e:02:8a:5d:a4:a0:27:6d:37:57:46:7f:8b: ca:32:6f:4f:7b:0c:e9:0c:8f:f2:58:68:f7:b7:65: d9:cc:76:92:28:5c:33:b2:4f:b0:d1:26:1e:c0:e1: 6f:60:f4:99:44:88:9c:e6:0e:c6:23:6c:00:6d:0c: 7c:3f:bb:09:6e:25:b0:18:5a:9e:b4:cd:69:21:5a: be:a2:b5:7e:df:f5:75:74:82:06:8a:11:3d:6c:e9: 6f:c6:3d:16:6d:af:13:93:3d:64:e7:fb:43:cd:4e: 54:25:c4:1a:f9:e9:8d:b1:88:94:b0:39:1e:9d:f1: 5f:ef:62:24:95:4e:dd:f7:0d:38:dc:86:51:5a:af: be:1f:24:9c:5b:42:ec:ea:e3:e0:6b:ce:e8:c3:16: 67:0e:90:f3:ea:a0:95:fb:fb:93:25:6e:c0:0e:b9: fe:04:1b:95:d3:9c:ae:18:53:bc:2c:c3:0c:e7:4b: 2c:bd:82:38:10:6a:7b:f7:b1:1f:8f:66:39:65:af: 9f:97:b9:59:3a:42:93:9f:2c:bb:eb:a8:b5:2d:fa: a5:02:95:06:44:5d:1e:22:23:bc:f3:8a:09:bd:c8: 54:86:d9:47:ca:28:55:0c:7e:73:f3:66:d1:41:cf: aa:8f:96:5f:70:e9:ee:ab:c5:ad:01:7e:d9:1e:48: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:5F:FD:A8:36:B9:BE:50:46:0B:B2:23:48:8F:FD:6C:A3:90:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/babe936d-1796-3a70-96b4-b4c58df1c7aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:142::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:0a:a6:a4:04:e7:50:4e:6e:f8:9c:0b:09:d1:6f:90:8b:b8: 12:91:bb:c8:b1:2b:57:8b:48:5a:e9:c2:e4:40:a3:20:98:3c: 38:0c:e8:b4:3e:07:e6:cd:d9:93:36:f2:cf:4f:7e:7d:93:fa: 42:b2:85:d3:14:34:d9:22:4d:5b:5c:7a:31:69:53:69:c7:ef: 7e:eb:dc:a7:dd:5c:de:35:51:98:2b:9e:70:17:18:16:f3:27: c7:0d:ff:1f:82:13:c3:56:84:e4:39:27:77:aa:7d:db:9a:22: 01:5b:0d:15:0b:a7:0f:4a:b3:8b:87:b4:68:af:fa:57:44:46: 04:8e:b6:9c:28:f9:f2:c3:e9:b0:30:da:4e:5f:6b:76:b3:f6: d6:f1:a5:a3:92:44:f0:dd:05:b1:b8:3b:6a:0b:69:5d:c6:0e: 63:7c:aa:f9:3b:6b:e3:82:86:c0:cd:e7:11:7d:05:52:55:08: 54:e9:13:29:65:75:f9:c5:d8:d6:5f:15:fd:ad:84:d2:4e:9b: 5f:19:50:3a:19:6d:a9:5e:cc:4c:ab:ba:90:b5:b5:6e:c7:08: 97:7b:58:10:79:54:4e:e6:c0:ee:4c:dd:9f:26:a5:66:90:b0: c5:be:90:7c:9e:74:61:7d:5b:90:ae:7c:1d:4c:a9:36:39:65: e1:a3:5e:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC2tbugdYvOXbXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZTgyM2E0MGMtNzZkNS00NjU0LTk1ZGMtNDJkNDVlYzcyYWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW4Cil2koCdtN1dGf4vKMm9PewzpDI/yWGj3 t2XZzHaSKFwzsk+w0SYewOFvYPSZRIic5g7GI2wAbQx8P7sJbiWwGFqetM1pIVq+ orV+3/V1dIIGihE9bOlvxj0Wba8Tkz1k5/tDzU5UJcQa+emNsYiUsDkenfFf72Ik lU7d9w043IZRWq++HyScW0Ls6uPga87owxZnDpDz6qCV+/uTJW7ADrn+BBuV05yu GFO8LMMM50ssvYI4EGp797Efj2Y5Za+fl7lZOkKTnyy766i1LfqlApUGRF0eIiO8 84oJvchUhtlHyihVDH5z82bRQc+qj5ZfcOnuq8WtAX7ZHkgszwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBcgX/2oNrm+UEYLsiNIj/1so5CPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmFiZTkzNmQtMTc5Ni0z YTcwLTk2YjQtYjRjNThkZjFjN2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG8KpqQE51BObvicCwnRb5CLuBKRu8ixK1eLSFrpwuRAoyCYPDgM 6LQ+B+bN2ZM28s9Pfn2T+kKyhdMUNNkiTVtcejFpU2nH737r3KfdXN41UZgrnnAX GBbzJ8cN/x+CE8NWhOQ5J3eqfduaIgFbDRULpw9Ks4uHtGiv+ldERgSOtpwo+fLD 6bAw2k5fa3az9tbxpaOSRPDdBbG4O2oLaV3GDmN8qvk7a+OChsDN5xF9BVJVCFTp EylldfnF2NZfFf2thNJOm18ZUDoZbalezEyrupC1tW7HCJd7WBB5VE7mwO5M3Z8m pWaQsMW+kHyedGF9W5CufB1MqTY5ZeGjXlg= -----END CERTIFICATE-----Generated at Sat Apr 5 16:42:16 2025 by rpki-client