$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa File: 3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa (raw, json) Hash identifier: lMpK9tgG4Dlwpx8Sr9aq4erOTxQb0Tcs30C4VbF95BY= Subject key identifier: 27:24:04:25:3E:36:8F:CE:C6:8C:66:7D:CF:F4:5B:10:E5:13:88:61 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A1085A16699504B053F680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 2607:f028:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:08:5a:16:69:95:04:b0:53:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=9330c510-2ee2-47ea-a3a1-0b834d779641 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:9f:3f:fa:6c:0a:87:2f:43:40:a9:77:33: 8a:96:d7:a8:47:93:a8:cb:ff:26:6e:62:ec:44:b1: f4:a4:fd:89:35:27:c7:cb:47:9b:20:18:e5:cc:53: 24:74:e3:73:96:bd:5f:cf:f5:c9:11:f4:fc:93:f4: b5:d9:74:61:23:d9:4b:c8:d9:3a:09:2f:d7:ac:b0: f2:c2:72:da:68:0d:34:4e:62:26:9c:75:67:05:35: 77:24:53:6a:66:44:07:65:1b:75:52:1a:60:24:ef: 97:03:9f:c1:a9:67:5e:8e:f5:bb:bc:00:cd:3d:db: 8c:2d:ba:04:65:9b:ae:25:ec:a4:a2:48:73:c5:d4: ed:ed:62:28:bd:ab:17:05:a6:a3:f6:c2:c5:4d:56: 5e:3c:fb:de:57:55:a0:b7:07:67:0a:20:30:f5:17: 1e:b9:7f:e6:0c:ad:1a:50:03:99:18:d8:fa:2e:a3: 28:ce:d9:8a:ab:23:0c:93:46:76:17:1f:46:40:27: 14:b2:f6:ff:e0:d9:89:24:da:0a:98:14:8a:82:f8: 39:da:28:85:f1:fd:2f:ea:de:50:cd:b9:5f:4b:94: 39:cd:bf:98:7a:6d:c1:f7:14:72:89:a1:0b:a4:67: 8e:97:45:f1:f3:a5:44:2a:ad:a2:5d:42:d9:7a:ba: e2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:24:04:25:3E:36:8F:CE:C6:8C:66:7D:CF:F4:5B:10:E5:13:88:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3545d4d9-cdce-3a1f-8dff-1cfd7a0d20b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:03:35:40:e2:cb:5c:c3:52:97:ac:a5:6b:39:e6:53:42:0e: eb:61:c5:f0:b1:c8:22:7a:a2:af:51:24:4a:6a:d1:1c:c0:f8: 54:23:97:f8:5c:04:1c:f4:c4:c8:3f:6f:0e:0e:2e:7a:3a:19: c1:4b:d1:49:a7:fa:68:0f:d2:e6:11:d9:5e:57:e6:7b:7d:68: df:89:59:35:6b:ab:6c:9d:64:eb:62:b6:05:d3:12:8c:69:58: 09:cf:0c:8a:80:c6:f6:49:28:98:7d:41:a2:e5:4c:f2:82:4a: c2:5d:5f:71:6f:2a:81:44:24:e4:74:58:b7:32:a7:9d:66:7c: 15:e5:14:5a:3a:54:a2:1c:8e:03:67:04:2e:37:6b:81:1f:eb: 09:95:6d:57:05:9a:6b:b7:41:77:6d:d3:b4:f2:ae:94:d4:38: 30:cf:a6:8a:8a:63:e7:fd:3b:d5:54:64:26:0e:28:cd:68:32: a6:a5:08:ba:b1:82:a1:17:28:ef:39:fc:7c:50:ea:93:0c:f7: 08:19:79:7b:95:b5:9e:57:41:62:95:a4:b1:69:35:82:38:b2: fe:95:8f:a7:d4:be:7a:9b:be:13:68:b1:33:f9:66:f0:4c:2f: 41:b7:e4:f2:c8:bd:25:d9:99:71:01:54:c0:9f:d3:8e:27:b5: ad:50:c8:63 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQhaFmmVBLBT9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk OTMzMGM1MTAtMmVlMi00N2VhLWEzYTEtMGI4MzRkNzc5NjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJifP/psCocvQ0CpdzOKlteoR5Ooy/8mbmLs RLH0pP2JNSfHy0ebIBjlzFMkdONzlr1fz/XJEfT8k/S12XRhI9lLyNk6CS/XrLDy wnLaaA00TmImnHVnBTV3JFNqZkQHZRt1UhpgJO+XA5/BqWdejvW7vADNPduMLboE ZZuuJeykokhzxdTt7WIovasXBaaj9sLFTVZePPveV1WgtwdnCiAw9RceuX/mDK0a UAOZGNj6LqMoztmKqyMMk0Z2Fx9GQCcUsvb/4NmJJNoKmBSKgvg52iiF8f0v6t5Q zblfS5Q5zb+Yem3B9xRyiaELpGeOl0Xx86VEKq2iXULZerriXwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCckBCU+No/Oxoxmfc/0WxDlE4hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzU0NWQ0ZDktY2RjZS0z YTFmLThkZmYtMWNmZDdhMGQyMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC0DNUDiy1zDUpespWs55lNCDuthxfCxyCJ6oq9RJEpq0RzA+FQj l/hcBBz0xMg/bw4OLno6GcFL0Umn+mgP0uYR2V5X5nt9aN+JWTVrq2ydZOtitgXT EoxpWAnPDIqAxvZJKJh9QaLlTPKCSsJdX3FvKoFEJOR0WLcyp51mfBXlFFo6VKIc jgNnBC43a4Ef6wmVbVcFmmu3QXdt07TyrpTUODDPpoqKY+f9O9VUZCYOKM1oMqal CLqxgqEXKO85/HxQ6pMM9wgZeXuVtZ5XQWKVpLFpNYI4sv6Vj6fUvnqbvhNosTP5 ZvBML0G35PLIvSXZmXEBVMCf044nta1QyGM= -----END CERTIFICATE-----Generated at Sat Aug 23 14:53:42 2025 by rpki-client