$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa File: caed1a73-2386-3e15-9598-454e430ce7c9.roa (raw, json) Hash identifier: 1xsTcGAzvDRUDXpGAoffHQVshZCGgdSKQOlbhwm5hkc= Subject key identifier: 32:4F:43:41:85:F5:08:89:0C:6E:2B:2D:F0:C5:88:E3:5D:15:4D:AC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2E9C8D00461EFE295780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2e:9c:8d:00:46:1e:fe:29:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=d5abeb90-3888-4533-9a0d-cb01457d8c7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:4d:cf:43:4c:d9:e5:fc:09:e7:7c:d2:4f: 68:cb:f7:14:11:59:37:49:d6:d0:a1:8b:44:f1:24: 7a:58:d2:4d:76:05:5e:7e:e6:a9:2d:56:e2:11:71: 51:74:2e:6f:3b:db:fc:2a:a8:56:e3:9b:4c:8f:b6: 30:78:a9:3d:1b:a7:ca:f9:fa:64:9a:30:e1:0c:c3: 29:50:1d:7a:b0:1d:79:53:2a:aa:07:38:2d:38:cc: 52:be:6c:61:08:eb:ff:fd:f7:c8:0d:9c:2b:cb:61: fe:6b:fc:9f:6c:5b:05:9f:b0:af:09:b8:a0:23:12: 94:97:2e:ad:08:99:a0:37:7d:a9:5d:17:f6:d8:37: 81:84:ac:3e:35:24:6e:f8:91:d0:6e:bb:9e:39:6b: 4c:65:dd:bf:2d:7e:df:34:33:8b:e9:4c:b0:94:c9: 37:d5:63:3e:4a:8b:fd:0c:ec:33:cd:b1:86:15:2c: 7a:61:b6:54:a1:87:b8:02:6e:aa:bc:7e:0a:58:77: 4d:b6:9b:63:f4:fd:17:0e:78:ba:ef:20:d8:4e:52: 12:97:7a:83:12:32:e8:73:c4:41:2b:ee:6f:9e:1e: f1:66:2b:84:f9:26:bb:51:85:91:a7:5f:e2:06:b1: f9:8b:5a:91:c6:e7:f8:37:f3:3b:8c:58:5f:91:4f: 2f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:4F:43:41:85:F5:08:89:0C:6E:2B:2D:F0:C5:88:E3:5D:15:4D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:6f:57:26:20:b8:3c:00:b2:b0:cd:f5:34:07:9a:9f:f4:4c: 1b:1d:f2:a5:51:dc:e0:f7:e0:f0:f7:00:f2:c9:24:1d:b4:4c: 7d:f5:fa:76:d2:ad:6e:6e:82:7f:1e:bc:d4:08:42:37:44:e1: cb:0f:ba:fc:8b:14:14:87:e7:13:1c:a5:43:86:2d:d1:a6:e3: a7:11:51:ba:8e:cf:71:83:e1:e7:94:5e:26:82:28:bd:6c:46: ba:bf:b8:3a:7b:0a:e2:85:30:11:2f:5c:a7:b2:ef:4d:ad:62: 02:e7:e6:25:f1:b2:c7:18:18:74:75:01:12:27:79:a1:c1:16: b1:78:65:be:21:06:95:1a:5e:f2:9d:d1:6a:81:8e:15:d2:8d: 1a:2d:2b:d6:cf:95:37:e7:0c:a4:f4:2a:63:9b:74:63:22:a5: bd:29:b5:f0:8e:0d:c3:49:90:1f:5e:00:88:8a:ef:87:e3:54: 98:25:f5:6a:f6:33:a1:c7:89:32:0e:c0:29:fc:4a:9b:9b:ce: 76:26:24:2f:f1:45:8b:9f:fd:fd:d1:74:7a:06:8a:57:09:46: 62:0c:21:40:4a:36:9a:a5:bb:d0:1d:e0:af:89:00:bb:14:11: 5b:48:a1:37:b6:4a:5f:20:cd:8f:7c:a6:fc:2d:ed:e7:87:51: a5:20:e2:92 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC6cjQBGHv4pV4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk ZDVhYmViOTAtMzg4OC00NTMzLTlhMGQtY2IwMTQ1N2Q4YzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0uZNz0NM2eX8Ced80k9oy/cUEVk3SdbQoYtE 8SR6WNJNdgVefuapLVbiEXFRdC5vO9v8KqhW45tMj7YweKk9G6fK+fpkmjDhDMMp UB16sB15UyqqBzgtOMxSvmxhCOv//ffIDZwry2H+a/yfbFsFn7CvCbigIxKUly6t CJmgN32pXRf22DeBhKw+NSRu+JHQbrueOWtMZd2/LX7fNDOL6UywlMk31WM+Sov9 DOwzzbGGFSx6YbZUoYe4Am6qvH4KWHdNtptj9P0XDni67yDYTlISl3qDEjLoc8RB K+5vnh7xZiuE+Sa7UYWRp1/iBrH5i1qRxuf4N/M7jFhfkU8v7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDJPQ0GF9QiJDG4rLfDFiONdFU2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2FlZDFhNzMtMjM4Ni0z ZTE1LTk1OTgtNDU0ZTQzMGNlN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1vVyYguDwAsrDN9TQHmp/0TBsd8qVR3OD34PD3APLJJB20TH31 +nbSrW5ugn8evNQIQjdE4csPuvyLFBSH5xMcpUOGLdGm46cRUbqOz3GD4eeUXiaC KL1sRrq/uDp7CuKFMBEvXKey702tYgLn5iXxsscYGHR1ARIneaHBFrF4Zb4hBpUa XvKd0WqBjhXSjRotK9bPlTfnDKT0KmObdGMipb0ptfCODcNJkB9eAIiK74fjVJgl 9Wr2M6HHiTIOwCn8SpubznYmJC/xRYuf/f3RdHoGilcJRmIMIUBKNpqlu9Ad4K+J ALsUEVtIoTe2Sl8gzY98pvwt7eeHUaUg4pI= -----END CERTIFICATE-----Generated at Fri Mar 14 10:10:43 2025 by rpki-client