$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa File: caed1a73-2386-3e15-9598-454e430ce7c9.roa (raw, json) Hash identifier: 8yVWM4T3qvSzfs9LZZP7XIdp63qIWswxaatZilsgwAU= Subject key identifier: BD:9C:39:5B:72:43:9E:C1:9A:38:42:0F:A0:32:A1:36:6B:4B:8D:49 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285848345577060806F0A6051DDC00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa Signing time: Sat 14 Dec 2024 14:00:52 +0000 ROA not before: Sat 14 Dec 2024 14:00:52 +0000 ROA not after: Fri 14 Mar 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:34:55:77:06:08:06:f0:a6:05:1d:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Dec 14 14:00:52 2024 GMT Not After : Mar 14 13:00:52 2025 GMT Subject: CN=04e2ffcb-1cad-4abd-8c81-d5f36af58147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:01:01:9d:84:ff:cb:61:ad:5a:94:56:9e:47: 68:16:05:84:87:f9:68:ca:8d:21:4f:aa:fb:aa:f3: 4f:71:8e:54:aa:68:e0:4c:38:cd:de:a6:a8:92:7a: 28:d7:7b:3f:d0:c3:7d:4e:36:aa:44:93:a6:d6:40: 70:81:7d:cf:80:66:26:a8:ba:b0:4f:c6:26:fe:13: 81:fb:8b:b3:3b:b2:1c:46:c0:e3:78:3b:30:2c:cb: 07:63:0e:39:fc:0e:2a:2d:83:3e:a3:ca:9a:b1:d0: 07:ac:ee:87:d5:f3:a7:35:c3:ff:12:b9:53:89:97: 1b:c0:09:2b:b3:0c:7f:07:d2:e0:e2:4c:e8:f0:05: 88:29:93:24:17:56:c3:63:67:3e:c1:84:39:8f:26: 19:94:d4:a1:0f:29:89:34:ba:81:36:f5:9b:3a:0d: 11:b6:49:b3:d9:cb:19:23:1f:a1:7e:0e:5e:28:82: 39:17:7d:7b:c1:be:5c:d5:9a:ac:8f:3a:34:e0:f6: 34:c2:50:04:37:bd:95:1f:ec:d8:4b:c8:c9:1b:26: 39:08:11:65:07:60:98:5f:e7:d5:68:bf:6b:38:c7: 26:0c:74:a7:c2:bd:a6:fa:58:e0:d8:b3:04:3b:33: d4:7c:5f:96:9e:33:ba:51:44:a4:3a:d0:a5:f0:e0: 7a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:9C:39:5B:72:43:9E:C1:9A:38:42:0F:A0:32:A1:36:6B:4B:8D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:84:c4:a4:ad:46:a8:e3:71:cc:b0:8e:6e:92:98:74:e1:ea: a6:82:e1:c4:d5:16:28:f8:c6:6f:08:1e:f2:f7:ee:22:cb:7a: 0f:7f:d5:23:99:4d:49:24:a7:c3:6a:d0:1c:5c:66:b4:98:38: 63:84:96:f4:47:45:3a:44:90:04:12:24:a9:f9:1a:bb:64:de: c7:b4:6a:4a:e3:b6:21:c8:8f:97:70:92:41:36:63:f7:27:9d: 4f:96:50:ba:aa:03:c9:a1:28:fd:33:62:7e:20:a2:2f:09:b1: 34:10:c3:92:22:4b:56:f4:bc:90:b4:d0:89:98:b7:a6:f3:6f: 99:14:83:c0:d2:ec:f9:c4:22:21:f9:6d:03:9b:cf:7e:15:13: 88:a6:cd:5e:1e:6e:56:8a:a1:7f:b6:5f:40:c1:67:f5:2a:21: c5:15:6d:d0:28:70:67:39:fa:e3:af:47:80:7c:e1:4a:54:32: d4:2e:5b:55:d1:03:2f:8f:59:86:09:c1:af:0b:bf:48:43:53: 36:ba:43:93:0c:45:03:cc:35:11:61:da:af:91:c3:d5:10:ab: d0:7d:31:55:6a:ba:91:bb:34:38:04:3e:d0:96:de:64:fc:86: 6f:ae:cd:7f:5a:59:8b:f8:7d:b2:99:4d:0a:bb:cc:7c:b5:4e: 65:3d:79:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEg0VXcGCAbwpgUd3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI0MTIxNDE0MDA1MloXDTI1MDMxNDEzMDA1MlowLzEtMCsGA1UEAxMk MDRlMmZmY2ItMWNhZC00YWJkLThjODEtZDVmMzZhZjU4MTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgEBnYT/y2GtWpRWnkdoFgWEh/loyo0hT6r7 qvNPcY5UqmjgTDjN3qaoknoo13s/0MN9TjaqRJOm1kBwgX3PgGYmqLqwT8Ym/hOB +4uzO7IcRsDjeDswLMsHYw45/A4qLYM+o8qasdAHrO6H1fOnNcP/ErlTiZcbwAkr swx/B9Lg4kzo8AWIKZMkF1bDY2c+wYQ5jyYZlNShDymJNLqBNvWbOg0Rtkmz2csZ Ix+hfg5eKII5F317wb5c1Zqsjzo04PY0wlAEN72VH+zYS8jJGyY5CBFlB2CYX+fV aL9rOMcmDHSnwr2m+ljg2LMEOzPUfF+WnjO6UUSkOtCl8OB6AwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL2cOVtyQ57BmjhCD6AyoTZrS41JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2FlZDFhNzMtMjM4Ni0z ZTE1LTk1OTgtNDU0ZTQzMGNlN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB2ExKStRqjjccywjm6SmHTh6qaC4cTVFij4xm8IHvL37iLLeg9/ 1SOZTUkkp8Nq0BxcZrSYOGOElvRHRTpEkAQSJKn5Grtk3se0akrjtiHIj5dwkkE2 Y/cnnU+WULqqA8mhKP0zYn4goi8JsTQQw5IiS1b0vJC00ImYt6bzb5kUg8DS7PnE IiH5bQObz34VE4imzV4eblaKoX+2X0DBZ/UqIcUVbdAocGc5+uOvR4B84UpUMtQu W1XRAy+PWYYJwa8Lv0hDUza6Q5MMRQPMNRFh2q+Rw9UQq9B9MVVqupG7NDgEPtCW 3mT8hm+uzX9aWYv4fbKZTQq7zHy1TmU9eYM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:26 2025 by rpki-client