$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa File: d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa (raw, json) Hash identifier: oIzXtioA98LXV/sBe8cVlpINCg/xdQ9NwjG1QPObmlM= Subject key identifier: 60:ED:A6:ED:BB:5E:68:04:F9:2E:DE:08:8B:FF:91:49:75:EE:9D:3A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2E3FD9EE71627DF3C780 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2e:3f:d9:ee:71:62:7d:f3:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=bfb3f838-4194-43a0-a09f-95e2fd4347bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0e:53:33:33:25:94:bb:a5:c5:4f:29:cd:14: ac:8c:7b:05:83:dc:fa:15:f1:11:4e:60:48:1c:a9: 61:4f:82:37:54:8a:2f:1e:25:8e:f2:71:2b:6b:25: 76:43:b3:d0:4c:e4:49:f0:b7:6b:c7:79:dc:1f:38: 1e:10:58:0f:67:5f:c7:63:e9:26:6c:19:25:90:be: be:ee:0f:65:ce:8f:7b:d7:a6:78:e6:39:7b:f5:3e: 14:1d:33:34:0f:19:03:49:88:39:aa:d6:78:a2:81: c1:74:fc:ef:2a:15:17:b1:31:8a:ce:1d:70:02:46: 16:c0:63:2e:57:47:c4:a9:da:ad:8f:3a:cc:83:d5: 4d:08:7f:d3:e9:f1:41:b8:df:90:bf:76:7f:76:6e: 13:8f:76:50:60:6f:2b:1d:9a:0f:63:b0:34:ad:18: cd:58:60:ca:aa:55:07:52:58:ff:3c:74:f7:69:40: 69:2d:73:85:a8:55:95:53:1d:bb:05:2b:6c:f9:de: 78:64:8a:25:e8:68:4b:3c:c4:bd:0e:f2:f7:20:c2: 70:b7:2f:9c:90:e1:48:1c:90:9e:49:56:b6:cf:38: 0f:d2:07:53:37:db:87:60:bc:06:35:3b:a7:c7:f9: c4:84:e8:e7:77:42:d8:8c:7a:43:b4:69:ad:ce:bb: 68:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:ED:A6:ED:BB:5E:68:04:F9:2E:DE:08:8B:FF:91:49:75:EE:9D:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d4c2ffed-a68f-3878-95f2-90e338f2cd71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:a1:31:9a:ad:e1:12:ef:82:39:0a:91:e9:59:54:f7:0b:62: b2:60:4d:0f:65:e3:97:2c:51:78:2a:87:5c:42:c9:ef:61:60: 6a:57:6a:3b:c7:85:0a:2b:67:10:6f:bc:fc:74:f7:61:ab:c9: fa:aa:5a:b4:e2:c4:11:30:f6:87:db:f4:30:13:7b:38:22:5e: 98:fd:a7:f1:33:e2:34:34:f5:14:ec:ab:85:d6:aa:64:7c:fb: ab:35:77:d7:ed:60:d2:c4:7a:ed:9e:07:df:1e:64:e5:56:2a: b4:54:04:80:ac:65:d6:ab:dc:ae:80:5b:54:69:c5:88:4b:2f: 4d:53:3e:93:51:c5:4b:a6:9d:10:db:fa:ac:03:aa:d0:c3:2e: 0b:5b:c9:c8:01:f1:84:4b:37:c0:23:fb:8d:d1:fd:eb:c9:08: 42:08:10:9c:ce:58:33:a3:e8:8a:6d:5b:99:9b:ed:25:40:52: 75:15:e1:8c:09:5d:c6:96:f5:ff:97:0a:a3:cd:43:e6:90:85: 94:ae:26:d9:93:93:53:14:e1:16:be:2c:c0:d6:77:a6:4f:d9: a7:91:cc:29:7b:95:6c:38:70:b9:a3:35:e5:c6:e9:03:1a:43: 7b:14:24:1a:8d:3f:b1:42:57:89:f8:ef:21:3f:cf:58:09:06: 56:31:e1:64 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC4/2e5xYn3zx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YmZiM2Y4MzgtNDE5NC00M2EwLWEwOWYtOTVlMmZkNDM0N2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ5TMzMllLulxU8pzRSsjHsFg9z6FfERTmBI HKlhT4I3VIovHiWO8nErayV2Q7PQTORJ8Ldrx3ncHzgeEFgPZ1/HY+kmbBklkL6+ 7g9lzo9716Z45jl79T4UHTM0DxkDSYg5qtZ4ooHBdPzvKhUXsTGKzh1wAkYWwGMu V0fEqdqtjzrMg9VNCH/T6fFBuN+Qv3Z/dm4Tj3ZQYG8rHZoPY7A0rRjNWGDKqlUH Ulj/PHT3aUBpLXOFqFWVUx27BSts+d54ZIol6GhLPMS9DvL3IMJwty+ckOFIHJCe SVa2zzgP0gdTN9uHYLwGNTunx/nEhOjnd0LYjHpDtGmtzrtoyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGDtpu27XmgE+S7eCIv/kUl17p06MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDRjMmZmZWQtYTY4Zi0z ODc4LTk1ZjItOTBlMzM4ZjJjZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJmhMZqt4RLvgjkKkelZVPcLYrJgTQ9l45csUXgqh1xCye9hYGpX ajvHhQorZxBvvPx092GryfqqWrTixBEw9ofb9DATezgiXpj9p/Ez4jQ09RTsq4XW qmR8+6s1d9ftYNLEeu2eB98eZOVWKrRUBICsZdar3K6AW1RpxYhLL01TPpNRxUum nRDb+qwDqtDDLgtbycgB8YRLN8Aj+43R/evJCEIIEJzOWDOj6IptW5mb7SVAUnUV 4YwJXcaW9f+XCqPNQ+aQhZSuJtmTk1MU4Ra+LMDWd6ZP2aeRzCl7lWw4cLmjNeXG 6QMaQ3sUJBqNP7FCV4n47yE/z1gJBlYx4WQ= -----END CERTIFICATE-----Generated at Fri Mar 14 13:47:37 2025 by rpki-client