$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa File: 1220970a-8457-3184-855a-d35cd08bc00a.roa (raw, json) Hash identifier: fP+g1w3nrh4Ou/M0oQGZpRaJVzEbV1DhQJaz9+QGSIM= Subject key identifier: 49:47:57:E4:4A:60:6A:19:BD:DF:DF:25:94:2C:BE:E3:A1:E2:20:58 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10A231257CCEA424B0200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3360 IP address blocks: 2607:f028:51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0a:23:12:57:cc:ea:42:4b:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=d35b7d1f-d7c3-4bed-84d9-a9790c929165 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:2e:5c:ed:d4:10:f7:90:92:d7:bd:6c:15: 7e:39:69:a6:16:24:e9:f8:8c:4f:99:b9:8b:ed:99: a6:f6:fe:ab:48:5f:1d:41:04:4f:68:33:c4:d3:82: af:36:ec:2c:b5:15:c1:84:4b:b0:a1:e1:e5:2f:c9: f8:38:2d:d6:d3:86:d1:48:be:b5:dc:1b:ae:21:65: f2:ac:68:bb:04:9d:76:1d:67:f9:5c:01:5b:74:d9: 2b:96:48:03:2b:4e:6a:80:42:3e:ba:d8:ea:f7:19: 6e:f6:5b:89:cf:12:a2:46:f4:a9:7e:4f:73:43:be: 58:6d:e2:05:20:08:5e:52:e8:5a:19:0d:11:87:68: 6a:92:88:48:7f:21:ee:a8:e3:1d:01:18:c0:ce:6c: d9:1b:94:c5:68:ed:76:1d:bb:f0:30:3d:ef:94:73: 7f:b2:2e:3d:7e:e3:b2:99:ca:9e:5b:9a:ea:3c:0b: c9:ad:fb:11:ec:e2:09:40:c6:76:90:24:87:c6:a9: 81:9f:77:8b:dc:11:f7:62:de:91:48:7d:f7:1e:c2: a9:fa:ab:13:4d:d2:c8:5f:f8:46:e6:e4:03:59:d2: 66:21:42:bb:e7:15:7b:8a:43:42:a1:b3:92:b5:ad: 53:eb:ea:42:56:06:18:d0:24:c5:70:2f:8c:67:ab: f1:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:47:57:E4:4A:60:6A:19:BD:DF:DF:25:94:2C:BE:E3:A1:E2:20:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1220970a-8457-3184-855a-d35cd08bc00a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c6:02:f4:ff:20:fb:8c:15:05:b5:37:2e:96:b9:13:9c:0b: c1:51:ce:ea:55:db:a7:e5:00:54:c8:22:13:a5:ab:bc:be:36: 33:fc:7b:7f:42:4e:7a:48:9f:95:5b:82:46:11:33:a4:24:24: a5:44:56:6d:df:9f:5a:4a:e8:7b:13:53:2f:69:ab:62:2d:f1: d4:ad:29:5a:62:35:36:78:ff:1d:1a:57:96:f0:25:e4:f4:09: 14:cf:a2:c1:b4:84:c2:13:23:b1:1f:b4:74:af:97:3a:4d:9b: f5:6e:86:d6:58:ff:a0:cf:31:11:ea:f1:6f:20:49:d4:69:c7: c3:fc:15:53:79:c0:01:48:c4:a0:00:46:65:f3:f3:68:16:29: db:44:d6:89:88:ee:42:70:d9:3f:e6:1a:2c:a3:56:f4:e1:41: 8a:07:ca:16:25:16:5b:f4:d4:26:03:ce:18:30:5d:0c:fd:6e: 4f:53:4e:37:59:e4:f1:4f:cd:d1:a3:e8:ce:3a:df:f8:f1:b1: 4d:c7:02:16:87:d6:55:d6:1c:77:c5:ae:1d:b7:7b:7f:c2:30: f1:70:b2:df:04:6d:f7:14:53:d9:e4:81:28:a4:1e:8f:d2:a1: 96:ee:8a:b8:e8:b0:77:d1:41:85:5f:dd:91:47:92:78:73:66: 16:41:06:7b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQojElfM6kJLAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDM1YjdkMWYtZDdjMy00YmVkLTg0ZDktYTk3OTBjOTI5MTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaQuXO3UEPeQkte9bBV+OWmmFiTp+IxPmbmL 7Zmm9v6rSF8dQQRPaDPE04KvNuwstRXBhEuwoeHlL8n4OC3W04bRSL613BuuIWXy rGi7BJ12HWf5XAFbdNkrlkgDK05qgEI+utjq9xlu9luJzxKiRvSpfk9zQ75YbeIF IAheUuhaGQ0Rh2hqkohIfyHuqOMdARjAzmzZG5TFaO12HbvwMD3vlHN/si49fuOy mcqeW5rqPAvJrfsR7OIJQMZ2kCSHxqmBn3eL3BH3Yt6RSH33HsKp+qsTTdLIX/hG 5uQDWdJmIUK75xV7ikNCobOSta1T6+pCVgYY0CTFcC+MZ6vxywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFElHV+RKYGoZvd/fJZQsvuOh4iBYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTIyMDk3MGEtODQ1Ny0z MTg0LTg1NWEtZDM1Y2QwOGJjMDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACrGAvT/IPuMFQW1Ny6WuROcC8FRzupV26flAFTIIhOlq7y+NjP8 e39CTnpIn5VbgkYRM6QkJKVEVm3fn1pK6HsTUy9pq2It8dStKVpiNTZ4/x0aV5bw JeT0CRTPosG0hMITI7EftHSvlzpNm/VuhtZY/6DPMRHq8W8gSdRpx8P8FVN5wAFI xKAARmXz82gWKdtE1omI7kJw2T/mGiyjVvThQYoHyhYlFlv01CYDzhgwXQz9bk9T TjdZ5PFPzdGj6M463/jxsU3HAhaH1lXWHHfFrh23e3/CMPFwst8EbfcUU9nkgSik Ho/SoZbuirjosHfRQYVf3ZFHknhzZhZBBns= -----END CERTIFICATE-----Generated at Sat Aug 23 18:23:45 2025 by rpki-client