$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa File: f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa (raw, json) Hash identifier: dAD6DK8RhTIfX1vTbMRMRTx4rhGu8Q+P9Vs5+4p58oM= Subject key identifier: 1D:93:DE:95:2B:11:11:E6:F3:D8:1F:47:6C:83:CD:16:65:99:5C:35 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584913AC2AA4A31C520DC3683B80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 202 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:2a:a4:a3:1c:52:0d:c3:68:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=a6971488-5aa3-4e87-9b77-8f2844203836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f5:19:7c:f7:56:68:93:f1:ed:c9:db:c4:0e: ed:74:d2:ac:c9:c6:cc:ec:06:43:75:d4:9e:cd:c2: a1:fa:16:4f:b1:9a:cf:5e:bc:47:23:96:de:c2:08: 28:4b:ba:58:56:a8:3b:78:44:4c:cc:f2:16:ba:78: 81:48:e2:04:8e:69:9e:bd:1c:85:12:dc:18:84:5a: f3:31:d4:75:16:7b:72:23:2a:d7:c9:eb:5e:4d:51: a7:c5:8b:61:7d:47:4c:42:25:7d:f4:85:37:0f:e1: 63:3e:05:de:52:15:c7:59:a7:d9:52:e7:e1:0b:85: be:a9:e0:76:f3:bf:ee:d9:e9:89:6b:cd:07:28:e0: 1a:45:5d:6b:fb:b2:1a:ee:97:84:c2:ca:8b:cb:30: c4:da:b0:53:d0:2e:f8:33:20:fa:31:3d:43:37:93: f2:f7:7e:e2:0f:16:41:bd:7d:65:16:8a:74:09:24: 6c:84:05:43:52:eb:24:8c:01:c3:6d:1a:63:68:15: a5:8c:47:3e:bc:3c:0f:6e:2e:5b:65:0d:74:03:93: 7a:4d:9b:08:52:81:64:bd:08:4d:9d:24:88:e7:e3: 58:99:c7:74:6b:2e:5f:eb:ae:1f:58:98:a0:62:eb: 7a:fc:03:09:81:21:9b:16:26:f8:61:9e:51:d4:04: 82:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:93:DE:95:2B:11:11:E6:F3:D8:1F:47:6C:83:CD:16:65:99:5C:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:88:0b:18:36:f8:95:74:5e:b8:93:e5:c0:a9:92:b5:1a:01: 7a:64:31:a7:c1:6e:32:3a:d4:50:d4:ce:31:88:07:8f:11:dd: ac:a4:3f:14:09:9a:20:40:a6:dc:a9:a3:21:f6:a8:d1:22:1a: 05:ca:7b:9f:41:a4:20:d6:49:aa:76:8c:fb:20:0b:46:44:a7: 63:73:74:77:1c:b3:3b:7b:09:26:ac:66:70:f8:7f:3e:71:0e: e4:2f:bb:0c:27:cb:53:67:f3:96:2f:a5:d7:60:26:34:af:bc: c5:20:a5:e7:72:9e:8e:2a:40:ed:bf:c3:ee:e9:40:c1:c2:a3: 87:69:af:33:e2:77:02:84:21:16:8d:36:63:ac:e3:4c:4a:2d: 9c:1a:62:18:42:c8:92:8b:dc:cc:15:7f:53:c2:97:e4:31:71: 62:dc:be:ef:55:52:0b:d1:8d:b5:e1:f4:4d:f9:f9:9c:f5:98: 0a:8e:b0:ec:7b:e1:1a:fc:46:88:46:4f:d8:4b:69:a9:fc:70: ce:10:24:8d:bf:bd:4c:54:32:73:a8:d4:dd:87:0f:30:dd:17: 9f:d5:87:cf:61:c2:51:f5:8c:82:be:e0:e0:45:bd:3b:7d:02: 27:3f:f0:4c:75:04:f4:b9:51:2e:e6:d1:db:1a:64:dd:03:a4: c7:32:5a:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEkTrCqkoxxSDcNoO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk YTY5NzE0ODgtNWFhMy00ZTg3LTliNzctOGYyODQ0MjAzODM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifUZfPdWaJPx7cnbxA7tdNKsycbM7AZDddSe zcKh+hZPsZrPXrxHI5bewggoS7pYVqg7eERMzPIWuniBSOIEjmmevRyFEtwYhFrz MdR1FntyIyrXyeteTVGnxYthfUdMQiV99IU3D+FjPgXeUhXHWafZUufhC4W+qeB2 87/u2emJa80HKOAaRV1r+7Ia7peEwsqLyzDE2rBT0C74MyD6MT1DN5Py937iDxZB vX1lFop0CSRshAVDUuskjAHDbRpjaBWljEc+vDwPbi5bZQ10A5N6TZsIUoFkvQhN nSSI5+NYmcd0ay5f664fWJigYut6/AMJgSGbFib4YZ5R1ASCRQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB2T3pUrERHm89gfR2yDzRZlmVw1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjhjNjU2ZWMtNDE5ZS0z YTViLTkxYjEtOTZmMDdjNmFiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByICxg2+JV0XriT5cCpkrUaAXpkMafBbjI61FDUzjGIB48R3ayk PxQJmiBAptypoyH2qNEiGgXKe59BpCDWSap2jPsgC0ZEp2NzdHccszt7CSasZnD4 fz5xDuQvuwwny1Nn85YvpddgJjSvvMUgpedyno4qQO2/w+7pQMHCo4dprzPidwKE IRaNNmOs40xKLZwaYhhCyJKL3MwVf1PCl+QxcWLcvu9VUgvRjbXh9E35+Zz1mAqO sOx74Rr8RohGT9hLaan8cM4QJI2/vUxUMnOo1N2HDzDdF5/Vh89hwlH1jIK+4OBF vTt9Aic/8Ex1BPS5US7m0dsaZN0DpMcyWqk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:40 2025 by rpki-client