$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa File: 4f7d63f1-0347-307b-af54-f3d44f4608a8.roa (raw, json) Hash identifier: dqSHde+DRJTxLOESYcI2cB2FAQflgXJGBYoqK3ayT8U= Subject key identifier: CB:87:9B:2C:62:C2:C5:58:35:9C:5E:0D:62:85:5F:7C:10:F4:1A:A6 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10D677D38C53EE1FCAEDE Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 3360 IP address blocks: 2607:f028:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0d:67:7d:38:c5:3e:e1:fc:ae:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=17a624ad-8846-42c9-9be9-c6c25ad3e980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:4a:56:56:75:6f:cc:20:bc:50:61:04:36:34: 92:fc:6e:6a:26:f8:b5:c9:92:ef:01:85:52:68:52: f1:f9:08:b4:06:23:9e:c7:2a:bb:5a:4f:87:54:d7: d1:ad:72:a1:83:5e:94:3e:81:31:59:65:27:7f:c5: da:18:1f:1b:7b:f1:28:a1:9e:e6:d5:89:8f:3b:e1: d5:16:7d:85:d9:97:73:8e:62:c6:f7:74:73:37:02: 71:9d:01:06:2b:dd:01:61:ad:35:cd:a8:23:d5:7a: e3:b5:a5:11:de:67:23:e2:6e:44:3c:23:70:ca:bd: 82:c6:08:69:e8:56:17:4c:7a:48:b5:88:8c:21:14: 8e:b3:78:b3:f7:d5:b5:31:d4:a4:1e:84:0e:9a:82: 06:1e:6a:b8:32:7c:83:0a:ad:22:b9:fd:6f:65:e1: c5:96:04:2f:74:80:fa:cd:b4:5d:17:c8:a0:76:8c: df:0c:fb:6e:c3:55:00:0b:81:11:eb:80:5c:08:76: 9e:6d:6e:02:24:a6:83:97:3a:74:43:ee:1b:41:b8: 68:a2:7f:80:d3:00:84:eb:c9:0e:9c:54:8d:d9:a7: 4c:c7:e6:00:35:1e:f3:91:74:6b:67:b7:0c:43:fd: 48:3a:cf:3a:8e:e5:bf:79:ac:f2:48:3b:93:26:6d: 76:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:87:9B:2C:62:C2:C5:58:35:9C:5E:0D:62:85:5F:7C:10:F4:1A:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/4f7d63f1-0347-307b-af54-f3d44f4608a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:24:9c:8d:03:27:b9:3d:32:c9:61:20:a3:25:18:07:47:5e: 94:87:83:96:59:87:de:3a:f6:d2:58:6f:91:a1:12:41:40:c8: 1b:ec:4f:ec:f9:ea:8b:80:b3:fe:ea:44:d3:83:22:49:a6:26: 51:62:75:aa:22:c5:6d:bd:2f:f8:eb:14:14:a5:e5:94:02:a9: d1:1c:aa:c9:3a:55:c1:ed:27:ee:59:ce:d8:f3:4d:19:d4:fd: 47:dc:1e:e8:fd:92:ce:cc:42:96:7f:97:33:db:8a:77:85:51: 49:7d:d9:5e:b9:4f:72:d9:65:7f:a8:f1:4b:a2:2a:5d:dd:2f: bb:00:11:f5:ed:4a:94:3b:70:47:48:93:f9:2c:14:98:b1:2d: a6:34:65:66:d7:c1:f9:43:0a:70:88:ff:a7:8f:78:7f:a6:5c: 94:77:45:e0:7d:2f:95:19:9a:3d:24:f5:3c:70:9d:e2:3f:ef: fb:e0:5c:a1:8e:79:f6:eb:65:a7:87:f5:73:2f:46:ae:6f:ff: f5:94:e1:99:3a:48:f0:9c:d3:e3:05:a7:0e:63:e6:ae:72:3c: d1:66:d1:ac:f3:2f:27:79:ac:4e:2b:28:32:fc:66:3b:ba:2d: 89:ab:6b:2a:d3:45:07:0d:1b:57:7e:1c:d8:9c:25:ea:66:00: 0d:33:4d:ad -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQ1nfTjFPuH8rt4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MTdhNjI0YWQtODg0Ni00MmM5LTliZTktYzZjMjVhZDNlOTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0pWVnVvzCC8UGEENjSS/G5qJvi1yZLvAYVS aFLx+Qi0BiOexyq7Wk+HVNfRrXKhg16UPoExWWUnf8XaGB8be/EooZ7m1YmPO+HV Fn2F2ZdzjmLG93RzNwJxnQEGK90BYa01zagj1XrjtaUR3mcj4m5EPCNwyr2Cxghp 6FYXTHpItYiMIRSOs3iz99W1MdSkHoQOmoIGHmq4MnyDCq0iuf1vZeHFlgQvdID6 zbRdF8igdozfDPtuw1UAC4ER64BcCHaebW4CJKaDlzp0Q+4bQbhoon+A0wCE68kO nFSN2adMx+YANR7zkXRrZ7cMQ/1IOs86juW/eazySDuTJm12hQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMuHmyxiwsVYNZxeDWKFX3wQ9BqmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNGY3ZDYzZjEtMDM0Ny0z MDdiLWFmNTQtZjNkNDRmNDYwOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE8knI0DJ7k9MslhIKMlGAdHXpSHg5ZZh9469tJYb5GhEkFAyBvs T+z56ouAs/7qRNODIkmmJlFidaoixW29L/jrFBSl5ZQCqdEcqsk6VcHtJ+5Zztjz TRnU/UfcHuj9ks7MQpZ/lzPbineFUUl92V65T3LZZX+o8UuiKl3dL7sAEfXtSpQ7 cEdIk/ksFJixLaY0ZWbXwflDCnCI/6ePeH+mXJR3ReB9L5UZmj0k9TxwneI/7/vg XKGOefbrZaeH9XMvRq5v//WU4Zk6SPCc0+MFpw5j5q5yPNFm0azzLyd5rE4rKDL8 Zju6LYmrayrTRQcNG1d+HNicJepmAA0zTa0= -----END CERTIFICATE-----Generated at Sat Aug 23 18:10:49 2025 by rpki-client