$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/249d6c5b-7a28-3d9f-b951-eed96b9c3750.roa File: 249d6c5b-7a28-3d9f-b951-eed96b9c3750.roa (raw, json) Hash identifier: A2TUTEzaVWezavpm+7j+Rr6ghuXqAaz8BSRu/2098j8= Subject key identifier: 6C:36:2F:F0:12:B4:4C:5E:BF:BE:21:6E:0B:84:B0:EB:3B:CA:05:12 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10A0E73F15C3354412240 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/249d6c5b-7a28-3d9f-b951-eed96b9c3750.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 2607:f028:142::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0a:0e:73:f1:5c:33:54:41:22:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=7a97c13f-229f-427b-aad5-baf96083a4f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:62:49:6e:ef:8d:47:4d:fb:9d:99:55:13:cf: 1f:91:ee:a9:2b:ae:a3:49:b8:a9:03:91:4a:cb:60: 6a:f1:f4:e7:52:a6:dd:4c:60:cc:45:8b:d8:dc:dc: 05:9f:c7:fe:24:13:f0:9e:a7:f9:ee:58:f1:ea:b6: 03:f8:51:fb:fc:10:b8:27:f4:1c:e4:c5:77:8c:b0: f5:54:63:04:8f:af:8e:f9:fc:68:91:b1:ee:d6:27: 0d:87:d0:54:ae:23:e4:50:61:67:48:5a:05:bc:dc: f2:ba:48:27:ee:5d:93:d2:5f:1b:2a:5b:49:12:96: 65:36:92:6d:f0:4a:8a:b7:4e:b2:4d:b6:3c:07:d2: fa:99:c9:4a:43:5e:1c:5e:a6:3d:ee:7f:51:94:4e: a6:41:7f:09:85:88:4d:27:ed:ef:9d:8e:33:dc:b4: 91:00:ca:ce:66:20:50:be:88:42:4c:9f:89:b4:ba: 35:52:9f:f0:f6:e9:fb:8f:58:67:60:7f:ff:73:c1: b0:ce:f3:76:80:03:88:44:e5:c2:6f:67:a0:41:09: c4:96:f6:16:c3:40:79:05:06:36:5c:0d:1a:57:64: 95:4c:a4:4a:89:15:73:f0:79:09:8a:ad:9d:ac:47: c7:d2:64:ed:6b:ab:e6:5c:64:24:8c:1a:25:60:8a: 12:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:36:2F:F0:12:B4:4C:5E:BF:BE:21:6E:0B:84:B0:EB:3B:CA:05:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/249d6c5b-7a28-3d9f-b951-eed96b9c3750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:142::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:9a:fb:63:27:a5:28:38:c9:9e:35:3c:21:29:79:2b:12:02: 46:97:b7:bc:8c:56:a0:27:ac:2e:7a:95:af:74:2f:f6:fb:8d: d9:2b:8c:79:98:37:0f:98:3b:b4:11:f9:38:f7:b8:12:71:f2: ef:6c:d9:3e:16:b1:44:d8:9c:51:29:ba:ae:d1:7f:f4:12:0a: 83:40:66:0d:6f:af:bf:8f:be:9d:8c:a0:43:04:7d:4f:82:80: 58:de:24:d7:71:61:2b:c3:fb:34:38:f0:8d:1a:d6:b9:f5:5e: 78:42:c2:73:73:c2:73:34:18:0b:53:c5:39:28:0e:d1:64:95: c3:72:de:6d:5d:7e:bf:41:73:8e:b7:8b:76:8b:1a:4a:e7:9d: 51:22:ff:fc:7d:4c:9a:aa:9b:73:97:75:2b:41:0a:b5:27:78: 00:c2:a5:da:3e:33:ce:e2:5c:a7:8c:56:84:5b:87:e0:98:d1: 2f:a0:eb:fb:27:04:d2:bc:51:5f:e2:d7:e9:07:e8:24:ad:49: 35:4d:68:83:a5:64:92:d0:26:7a:7f:1f:67:82:43:ac:08:9c: ba:f0:d3:2a:3e:ec:39:14:86:b8:02:3f:38:c0:91:5b:80:af: 99:d0:5f:44:d3:8c:be:37:73:aa:3c:97:c4:df:b5:8a:b9:00: 8a:ca:b0:20 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQoOc/FcM1RBIkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk N2E5N2MxM2YtMjI5Zi00MjdiLWFhZDUtYmFmOTYwODNhNGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWJJbu+NR037nZlVE88fke6pK66jSbipA5FK y2Bq8fTnUqbdTGDMRYvY3NwFn8f+JBPwnqf57ljx6rYD+FH7/BC4J/Qc5MV3jLD1 VGMEj6+O+fxokbHu1icNh9BUriPkUGFnSFoFvNzyukgn7l2T0l8bKltJEpZlNpJt 8EqKt06yTbY8B9L6mclKQ14cXqY97n9RlE6mQX8JhYhNJ+3vnY4z3LSRAMrOZiBQ vohCTJ+JtLo1Up/w9un7j1hnYH//c8GwzvN2gAOIROXCb2egQQnElvYWw0B5BQY2 XA0aV2SVTKRKiRVz8HkJiq2drEfH0mTta6vmXGQkjBolYIoSywIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGw2L/AStExev74hbguEsOs7ygUSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjQ5ZDZjNWItN2EyOC0z ZDlmLWI5NTEtZWVkOTZiOWMzNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAFC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADaa+2MnpSg4yZ41PCEpeSsSAkaXt7yMVqAnrC56la90L/b7jdkr jHmYNw+YO7QR+Tj3uBJx8u9s2T4WsUTYnFEpuq7Rf/QSCoNAZg1vr7+Pvp2MoEME fU+CgFjeJNdxYSvD+zQ48I0a1rn1XnhCwnNzwnM0GAtTxTkoDtFklcNy3m1dfr9B c463i3aLGkrnnVEi//x9TJqqm3OXdStBCrUneADCpdo+M87iXKeMVoRbh+CY0S+g 6/snBNK8UV/i1+kH6CStSTVNaIOlZJLQJnp/H2eCQ6wInLrw0yo+7DkUhrgCPzjA kVuAr5nQX0TTjL43c6o8l8TftYq5AIrKsCA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:12:21 2025 by rpki-client