$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa File: 0c21a656-0983-3548-b7c8-79c99b9440b0.roa (raw, json) Hash identifier: rEIdc4sVa5W+Fn7jyMPnTbkZOmjDtWVapPCNaYCLehs= Subject key identifier: 3E:EF:0D:78:A2:18:29:79:5A:AC:2F:DA:90:80:DB:A0:BE:0C:08:EE Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A1127D19C72E567EEBD280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 2607:f028:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:12:7d:19:c7:2e:56:7e:eb:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=37f0c20a-7ad5-4605-8ddf-e36ba42147b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:15:3b:65:a3:dd:b9:2c:db:03:28:9d:08: 26:6d:82:c5:4e:14:1c:67:fc:2c:9a:43:65:6a:41: b5:f8:8f:68:47:4a:6d:42:82:26:b4:7c:86:7c:a0: c3:16:54:e8:5d:02:08:17:34:c7:eb:3a:58:20:d6: d9:fa:fd:c0:67:80:43:97:31:bd:08:40:ef:0f:b3: 39:b6:00:a1:31:42:24:e3:e4:c9:a8:57:b2:8a:6c: 46:ea:81:10:f8:fb:0e:a4:84:51:55:d4:ae:40:32: 4e:21:32:71:9a:be:e6:29:20:35:5d:db:f4:54:55: bc:f4:98:1d:08:29:94:5c:de:df:55:4d:4d:f1:99: bc:a4:cb:ea:4f:8c:5d:1c:19:a5:a4:1a:42:d4:c2: cc:9c:35:48:d2:da:7d:44:83:7a:42:fe:82:f6:e6: b1:38:80:dc:0f:85:48:6f:7f:36:f4:0c:d5:f5:aa: d5:cb:be:6a:c3:39:57:69:d8:30:02:ee:d0:de:b3: d7:34:68:bc:70:c4:51:b9:a8:c7:03:1a:a7:3f:88: 68:97:08:51:56:f4:fa:14:db:84:30:c2:90:69:e6: 13:7f:69:dd:d1:86:b3:32:73:ed:27:21:33:9b:70: 26:33:a8:8a:aa:7f:50:69:0e:d5:1c:36:9a:ee:15: e1:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:0D:78:A2:18:29:79:5A:AC:2F:DA:90:80:DB:A0:BE:0C:08:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/0c21a656-0983-3548-b7c8-79c99b9440b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:76:d3:f8:2b:35:f6:24:bb:7d:05:f1:a0:66:f0:c0:39:84: 0a:37:df:e0:7f:b3:28:41:b3:a8:d8:4c:94:ec:14:4e:74:1d: c5:a9:e1:f0:b8:66:73:e8:94:6b:9f:91:ce:a7:6b:04:19:0a: de:f1:64:12:e3:c4:98:63:46:85:5d:5c:d7:48:87:75:88:f7: b0:15:09:95:09:19:27:d6:3e:de:b1:e3:1c:24:73:7a:f1:bb: 4f:04:15:b6:a8:0e:09:43:5a:16:bf:17:35:95:2c:75:25:3a: ae:b2:11:de:08:88:52:09:08:4a:28:64:88:45:50:ac:a2:c7: 10:ef:2b:08:f9:e2:0a:87:4a:cd:2f:32:f2:a6:98:a7:fd:31: e6:36:2d:73:1e:89:b8:f2:1a:8b:d8:2a:e6:2c:61:41:13:27: 79:42:3d:d8:cc:d4:4e:12:10:86:04:ff:bd:1d:9a:e8:d3:44: 1e:fa:c2:bf:73:d7:f8:f5:2e:03:54:4a:a9:66:4b:a8:2d:46: e7:98:73:ba:1f:57:25:1e:de:d1:09:c5:51:2a:25:20:5f:31: a6:75:a7:39:f6:b3:f3:7c:bb:18:46:14:ee:70:85:93:4e:28: 98:ad:51:e1:a1:f1:57:0b:93:4c:c6:3e:df:71:ac:30:70:47: ec:cd:a2:67 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToRJ9GccuVn7r0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MzdmMGMyMGEtN2FkNS00NjA1LThkZGYtZTM2YmE0MjE0N2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPIVO2Wj3bks2wMonQgmbYLFThQcZ/wsmkNl akG1+I9oR0ptQoImtHyGfKDDFlToXQIIFzTH6zpYINbZ+v3AZ4BDlzG9CEDvD7M5 tgChMUIk4+TJqFeyimxG6oEQ+PsOpIRRVdSuQDJOITJxmr7mKSA1Xdv0VFW89Jgd CCmUXN7fVU1N8Zm8pMvqT4xdHBmlpBpC1MLMnDVI0tp9RIN6Qv6C9uaxOIDcD4VI b3829AzV9arVy75qwzlXadgwAu7Q3rPXNGi8cMRRuajHAxqnP4holwhRVvT6FNuE MMKQaeYTf2nd0YazMnPtJyEzm3AmM6iKqn9QaQ7VHDaa7hXh/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFD7vDXiiGCl5Wqwv2pCA26C+DAjuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMGMyMWE2NTYtMDk4My0z NTQ4LWI3YzgtNzljOTliOTQ0MGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIZ20/grNfYku30F8aBm8MA5hAo33+B/syhBs6jYTJTsFE50HcWp 4fC4ZnPolGufkc6nawQZCt7xZBLjxJhjRoVdXNdIh3WI97AVCZUJGSfWPt6x4xwk c3rxu08EFbaoDglDWha/FzWVLHUlOq6yEd4IiFIJCEooZIhFUKyixxDvKwj54gqH Ss0vMvKmmKf9MeY2LXMeibjyGovYKuYsYUETJ3lCPdjM1E4SEIYE/70dmujTRB76 wr9z1/j1LgNUSqlmS6gtRueYc7ofVyUe3tEJxVEqJSBfMaZ1pzn2s/N8uxhGFO5w hZNOKJitUeGh8VcLk0zGPt9xrDBwR+zNomc= -----END CERTIFICATE-----Generated at Sat Aug 23 15:05:56 2025 by rpki-client