$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa File: 19a2deb9-8a3a-3397-a792-c72e3727e14a.roa (raw, json) Hash identifier: up7RBemrz4lyRxDWkLPimwItcbvlFOYwwAx7IjPy5DA= Subject key identifier: A3:45:1D:CA:92:EA:7C:27:04:0F:00:78:9B:F8:69:41:7A:72:7A:68 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10D351348E6A30C1B5BD8 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 2607:f028:82::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0d:35:13:48:e6:a3:0c:1b:5b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=ab4dee36-b6f7-47ea-97db-e65f495d551d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:13:8c:f1:fc:9b:71:8a:7f:44:21:5f:f1: 13:f5:16:62:60:89:52:9e:b6:1e:a8:87:11:09:08: d2:02:64:3e:16:ee:ba:90:af:32:3f:fc:ec:3d:39: b6:38:d6:24:d7:23:d5:a9:7c:5a:74:db:69:70:ac: 94:e3:ab:6a:55:18:fc:ac:c3:11:5a:cd:ad:0d:80: d1:06:06:28:86:b0:a9:3b:ed:67:df:76:d5:01:39: d5:75:4c:3a:48:ed:04:d9:eb:e7:a6:15:96:2e:b7: e3:53:de:29:8e:04:02:16:34:f1:38:86:8c:31:6d: 7c:ff:c6:ee:b0:25:e5:99:5b:18:d5:12:9e:8c:27: 8f:1a:41:2b:19:de:70:d4:e5:01:ae:1f:03:44:1f: 7c:5b:06:3e:19:e3:3f:d0:52:25:6f:86:8f:21:19: 00:0f:1c:a7:5d:f2:b1:f7:da:b3:20:ea:51:ca:9f: 5b:2f:da:18:98:7f:5b:e9:4a:02:47:da:f7:42:99: 5e:67:9a:8b:0d:8c:8c:17:44:09:7d:4f:13:d1:c3: 6d:bd:dc:d2:88:c9:df:92:5d:38:4a:d6:94:6c:cf: 17:aa:9e:f6:a2:26:7a:cc:48:35:27:2f:14:58:6a: 86:90:9c:b3:7a:b5:3b:18:a0:e2:4c:27:53:4f:5a: 6a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:45:1D:CA:92:EA:7C:27:04:0F:00:78:9B:F8:69:41:7A:72:7A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/19a2deb9-8a3a-3397-a792-c72e3727e14a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:82::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:1e:df:a4:f5:c6:55:5f:62:e8:7e:7d:9f:bc:16:d8:78:d5: e6:ef:22:7c:06:a5:0b:72:d0:d3:db:74:02:91:87:50:5b:ed: ea:44:7a:19:ab:75:d0:73:d1:1a:0f:09:5b:bb:11:0b:f8:40: 87:28:10:6b:ed:0b:d9:46:c2:48:dc:86:56:43:5f:0e:f4:99: dd:12:34:3b:62:19:7a:29:8f:b5:6a:b6:b2:f7:d2:22:64:51: 52:9e:37:e6:50:c9:f9:55:7b:55:8e:f0:c6:07:e8:dd:71:32: 45:27:8c:98:52:ee:69:3b:cd:ed:c7:6c:0e:8c:ca:14:83:93: 05:43:6a:1e:c1:ee:28:04:45:e1:08:29:0e:21:65:92:8e:04: ea:0b:c4:07:75:5f:76:35:76:77:5c:39:b6:99:db:21:9f:bd: a5:f8:0b:d2:81:31:64:89:90:a9:04:bf:0f:14:a4:62:52:b7: 14:6f:cc:e2:f8:b1:04:89:66:dc:a8:79:c8:94:dd:01:35:c9: 9c:d0:cf:8c:54:47:9c:95:11:90:10:c2:ac:cd:67:d1:88:32: e5:fc:a6:1d:72:be:fb:f5:62:fc:62:b9:9f:cd:46:d6:ef:6c: 3c:fd:c8:16:65:bc:ec:22:d1:49:74:76:be:56:14:1e:0e:ae: db:ea:8b:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQ01E0jmowwbW9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YWI0ZGVlMzYtYjZmNy00N2VhLTk3ZGItZTY1ZjQ5NWQ1NTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh38TjPH8m3GKf0QhX/ET9RZiYIlSnrYeqIcR CQjSAmQ+Fu66kK8yP/zsPTm2ONYk1yPVqXxadNtpcKyU46tqVRj8rMMRWs2tDYDR BgYohrCpO+1n33bVATnVdUw6SO0E2evnphWWLrfjU94pjgQCFjTxOIaMMW18/8bu sCXlmVsY1RKejCePGkErGd5w1OUBrh8DRB98WwY+GeM/0FIlb4aPIRkADxynXfKx 99qzIOpRyp9bL9oYmH9b6UoCR9r3QpleZ5qLDYyMF0QJfU8T0cNtvdzSiMnfkl04 StaUbM8Xqp72oiZ6zEg1Jy8UWGqGkJyzerU7GKDiTCdTT1pqdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKNFHcqS6nwnBA8AeJv4aUF6cnpoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTlhMmRlYjktOGEzYS0z Mzk3LWE3OTItYzcyZTM3MjdlMTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABke36T1xlVfYuh+fZ+8Fth41ebvInwGpQty0NPbdAKRh1Bb7epE ehmrddBz0RoPCVu7EQv4QIcoEGvtC9lGwkjchlZDXw70md0SNDtiGXopj7VqtrL3 0iJkUVKeN+ZQyflVe1WO8MYH6N1xMkUnjJhS7mk7ze3HbA6MyhSDkwVDah7B7igE ReEIKQ4hZZKOBOoLxAd1X3Y1dndcObaZ2yGfvaX4C9KBMWSJkKkEvw8UpGJStxRv zOL4sQSJZtyoeciU3QE1yZzQz4xUR5yVEZAQwqzNZ9GIMuX8ph1yvvv1YvxiuZ/N RtbvbDz9yBZlvOwi0Ul0dr5WFB4Ortvqi9A= -----END CERTIFICATE-----Generated at Sat Aug 23 14:59:57 2025 by rpki-client