$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa File: f733c5f2-bc12-3156-9ed8-901b469329d3.roa (raw, json) Hash identifier: WM6M1L2UbOa3d74z55X6HaCNOZi7ApvGTGblXAFY4RM= Subject key identifier: 4C:F6:D5:63:88:45:8A:F2:36:5D:18:C9:AD:72:0F:FF:A0:D3:8A:31 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2FE36B319E424F0C4600 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 203 IP address blocks: 2607:f028:131::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2f:e3:6b:31:9e:42:4f:0c:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=a22d84d0-3de7-4e04-97b7-16c11816f75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f1:c4:ab:59:66:3f:e4:bb:1f:b3:97:97:0b: 58:04:07:90:bd:54:f0:82:14:c0:64:b2:d5:bd:87: 4d:f3:69:03:c9:52:07:ad:70:0c:5c:8f:b0:7d:25: ee:cc:7d:47:c1:7b:3d:7c:9f:03:a5:cb:de:46:2f: 27:41:10:07:04:8c:31:76:3f:13:f9:05:f0:b1:c6: 3f:d1:2b:94:a9:0a:8e:ee:a0:73:25:4e:93:a6:3c: 7a:ed:58:f3:8d:ed:07:96:27:48:23:95:22:72:c5: f7:8e:2e:d1:2d:25:6b:71:2f:bf:b2:d1:07:9b:e4: aa:df:f9:ee:74:98:44:a7:8e:8e:c3:11:88:a9:11: 80:2d:5a:d2:71:00:a6:84:13:0c:47:59:7e:c8:52: 30:4e:16:2e:5a:51:60:10:c1:a3:50:1d:b4:59:5e: 83:46:84:85:19:b8:f6:b6:54:e8:59:62:fb:09:3c: 89:0d:a3:d3:19:51:b7:73:bb:82:85:21:ed:f2:3e: c5:67:75:44:d1:2b:82:b4:67:ca:b3:4a:cd:c8:52: a2:9b:4f:8e:56:14:58:5f:5e:1c:35:f5:97:b6:13: ae:b0:23:d7:00:ba:f5:fc:6f:e8:d1:8e:5b:61:13: e3:33:96:3b:27:fa:7f:e5:0f:4e:f6:ba:0b:72:e5: d3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:F6:D5:63:88:45:8A:F2:36:5D:18:C9:AD:72:0F:FF:A0:D3:8A:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f733c5f2-bc12-3156-9ed8-901b469329d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:131::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:d0:1c:0f:5a:4c:49:9a:09:ee:6f:16:22:4a:59:95:f5:b9: 61:9d:49:f6:38:03:45:4a:94:76:a2:ea:cb:5b:52:77:bb:42: c9:98:88:3b:52:c3:ee:27:5b:1b:4f:92:79:27:d2:27:fa:6c: bb:84:1a:e4:00:1f:05:ad:4e:4b:61:aa:0d:48:2b:09:f6:bb: 0e:9e:64:80:e2:65:9d:41:4e:88:04:43:92:cd:59:5d:58:25: 32:10:5d:f7:59:d1:fd:d1:9a:b5:96:cd:76:0f:e2:96:43:ad: 59:78:4f:36:96:35:9c:34:ab:9b:84:de:6b:ec:36:01:ff:1b: 22:3e:57:7f:34:a2:31:06:f4:de:6a:68:09:71:0c:df:72:d1: 6d:b1:38:31:dd:d2:91:b7:d6:bc:33:c1:15:43:e5:9e:ef:30: 86:95:30:75:ff:47:a0:ac:5a:b0:ac:6a:01:7e:4a:bd:ed:ee: cb:3c:7e:34:bc:d7:b1:38:80:98:d2:db:20:65:68:8b:d3:7c: 45:b8:7b:c9:4c:2b:e3:cc:1c:c6:8d:09:6c:40:2e:24:26:ef: 67:51:ac:da:89:1f:d6:bb:46:3f:57:22:2e:fc:47:7e:cb:ac: f5:7b:38:79:02:b3:e4:fe:ea:30:48:10:38:82:75:54:c8:98: 1a:3c:27:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrC/jazGeQk8MRgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTIyZDg0ZDAtM2RlNy00ZTA0LTk3YjctMTZjMTE4MTZmNzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/HEq1lmP+S7H7OXlwtYBAeQvVTwghTAZLLV vYdN82kDyVIHrXAMXI+wfSXuzH1HwXs9fJ8DpcveRi8nQRAHBIwxdj8T+QXwscY/ 0SuUqQqO7qBzJU6Tpjx67Vjzje0HlidII5UicsX3ji7RLSVrcS+/stEHm+Sq3/nu dJhEp46OwxGIqRGALVrScQCmhBMMR1l+yFIwThYuWlFgEMGjUB20WV6DRoSFGbj2 tlToWWL7CTyJDaPTGVG3c7uChSHt8j7FZ3VE0SuCtGfKs0rNyFKim0+OVhRYX14c NfWXthOusCPXALr1/G/o0Y5bYRPjM5Y7J/p/5Q9O9roLcuXTcwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEz21WOIRYryNl0Yya1yD/+g04oxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjczM2M1ZjItYmMxMi0z MTU2LTllZDgtOTAxYjQ2OTMyOWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF3QHA9aTEmaCe5vFiJKWZX1uWGdSfY4A0VKlHai6stbUne7QsmY iDtSw+4nWxtPknkn0if6bLuEGuQAHwWtTkthqg1IKwn2uw6eZIDiZZ1BTogEQ5LN WV1YJTIQXfdZ0f3RmrWWzXYP4pZDrVl4TzaWNZw0q5uE3mvsNgH/GyI+V380ojEG 9N5qaAlxDN9y0W2xODHd0pG31rwzwRVD5Z7vMIaVMHX/R6CsWrCsagF+Sr3t7ss8 fjS817E4gJjS2yBlaIvTfEW4e8lMK+PMHMaNCWxALiQm72dRrNqJH9a7Rj9XIi78 R37LrPV7OHkCs+T+6jBIEDiCdVTImBo8J2c= -----END CERTIFICATE-----Generated at Fri Mar 14 11:21:43 2025 by rpki-client