$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa File: 3e06039e-f189-3fc0-bbd8-9a9650543373.roa (raw, json) Hash identifier: /arJNXmqFpesIn4pyzAkgda0zJPzaSg9/IUdQcT/aMU= Subject key identifier: 23:4B:BE:83:3A:3D:A1:64:3E:37:D9:D9:65:DD:76:8E:1B:0B:18:E7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10B40C23F7A297C87C300 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3356 IP address blocks: 2607:f028:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0b:40:c2:3f:7a:29:7c:87:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=c9bac1e5-5fd2-4412-86e7-4461243a2032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:63:cc:e1:3d:6e:1a:27:db:68:aa:bb:9c:fd: 65:ff:11:01:0b:73:38:93:bb:7b:a8:a2:1e:80:27: f2:8c:d8:3e:c9:3f:57:7e:bd:9c:ad:45:ba:f3:81: d9:0a:69:81:23:42:7c:c7:ee:2b:42:34:9b:9c:9a: 90:3f:fc:60:d9:15:cd:ff:1c:ad:8a:ec:ae:24:c6: 46:a3:58:9d:3f:08:e3:01:c4:92:88:c0:bc:2d:8c: 8d:87:e8:27:ae:af:a4:e6:a4:6a:6e:a8:1d:7d:cc: 0b:45:83:f0:86:43:bb:e0:db:95:3a:e4:77:5f:3f: ca:06:89:06:b6:f6:bf:f7:91:c0:12:8a:78:bc:1e: b2:04:52:b7:d0:d9:df:35:1d:5e:f1:1f:9e:e2:88: 44:98:4b:f1:22:6c:8c:23:aa:48:d8:b5:54:26:aa: 22:aa:34:c8:cb:4c:75:48:93:c7:71:b8:cb:06:f7: fc:60:0d:31:24:0b:5c:6e:d1:6d:7b:f8:76:c5:20: b2:6e:c6:5e:f4:25:62:55:c6:79:8e:34:aa:09:71: 41:d5:02:65:f2:77:6c:dc:ff:02:19:00:c8:7f:fc: 56:a0:40:e2:73:30:49:5c:7d:75:39:59:20:fa:5d: 21:69:5e:0a:1a:9d:56:3e:d2:9f:45:4a:79:a7:e0: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4B:BE:83:3A:3D:A1:64:3E:37:D9:D9:65:DD:76:8E:1B:0B:18:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:0e:17:59:f1:a8:d9:f4:de:9b:0a:bb:5b:7d:05:7d:33:94: 15:90:f9:74:bc:85:64:24:c1:18:47:dd:09:94:56:bb:62:18: 0c:3b:14:04:b2:58:25:b5:60:cc:34:bc:c2:45:b8:9f:ff:3e: 7b:1a:31:52:d3:30:71:1b:69:45:05:e1:1e:02:5e:e0:1f:7b: 59:09:94:13:be:2e:e5:46:c1:2f:3f:87:f5:cc:4f:07:70:26: c9:f3:9f:3d:56:71:a5:fe:2d:e9:80:83:4c:f1:91:fd:58:de: 97:07:a1:ad:a6:fb:7e:c5:4e:5f:24:d7:f4:8f:08:05:9b:34: 52:ce:28:51:b2:56:7f:f4:11:14:83:fc:d9:29:74:ef:13:52: 9b:23:50:65:d7:6d:9b:03:0b:3c:78:d9:e1:41:a5:2c:b8:03: ff:4d:41:28:f6:00:ed:97:a5:2f:ed:a3:8a:64:b9:24:fe:a4: 88:0e:d7:17:64:1c:47:cb:7e:f3:88:15:c6:f3:44:45:ef:c5: 90:48:74:2c:01:ec:65:d9:b6:3d:16:f1:31:bf:20:a3:e3:2d: 68:17:db:d2:7d:65:dc:c2:3f:88:14:01:7a:b8:31:a9:5e:e2: f9:fa:b2:b0:f8:09:98:34:a5:fb:1a:39:70:3a:7d:8f:2d:25: 90:ae:aa:5c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQtAwj96KXyHwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk YzliYWMxZTUtNWZkMi00NDEyLTg2ZTctNDQ2MTI0M2EyMDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWPM4T1uGifbaKq7nP1l/xEBC3M4k7t7qKIe gCfyjNg+yT9Xfr2crUW684HZCmmBI0J8x+4rQjSbnJqQP/xg2RXN/xytiuyuJMZG o1idPwjjAcSSiMC8LYyNh+gnrq+k5qRqbqgdfcwLRYPwhkO74NuVOuR3Xz/KBokG tva/95HAEop4vB6yBFK30NnfNR1e8R+e4ohEmEvxImyMI6pI2LVUJqoiqjTIy0x1 SJPHcbjLBvf8YA0xJAtcbtFte/h2xSCybsZe9CViVcZ5jjSqCXFB1QJl8nds3P8C GQDIf/xWoEDiczBJXH11OVkg+l0haV4KGp1WPtKfRUp5p+BVdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCNLvoM6PaFkPjfZ2WXddo4bCxjnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2UwNjAzOWUtZjE4OS0z ZmMwLWJiZDgtOWE5NjUwNTQzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJYOF1nxqNn03psKu1t9BX0zlBWQ+XS8hWQkwRhH3QmUVrtiGAw7 FASyWCW1YMw0vMJFuJ//PnsaMVLTMHEbaUUF4R4CXuAfe1kJlBO+LuVGwS8/h/XM TwdwJsnznz1WcaX+LemAg0zxkf1Y3pcHoa2m+37FTl8k1/SPCAWbNFLOKFGyVn/0 ERSD/NkpdO8TUpsjUGXXbZsDCzx42eFBpSy4A/9NQSj2AO2XpS/to4pkuST+pIgO 1xdkHEfLfvOIFcbzREXvxZBIdCwB7GXZtj0W8TG/IKPjLWgX29J9ZdzCP4gUAXq4 Male4vn6srD4CZg0pfsaOXA6fY8tJZCuqlw= -----END CERTIFICATE-----Generated at Sat Aug 23 15:16:42 2025 by rpki-client