$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa File: 6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa (raw, json) Hash identifier: ay7dMs+NMgycZufph8nefV2vSv1Y7wLBmwLU5Q78WCQ= Subject key identifier: CF:33:AC:69:A6:59:B1:B5:E0:2D:F7:23:AF:C6:10:58:96:B8:87:A3 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849B149EC012BEA72731C720421 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 3360 IP address blocks: 2607:f028:31::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ec:01:2b:ea:72:73:1c:72:04:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=96e9769f-59cc-4e6d-b4cf-621640c3ded1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:fc:a6:78:bc:9c:2e:b0:c0:d6:28:8f:40:b3: a6:9e:7c:de:65:8b:b1:3c:2a:af:1e:9c:eb:ad:c9: 1e:44:a4:d6:a6:96:88:1f:52:e9:f0:41:2e:96:74: cb:8f:c9:2c:31:e2:ee:f4:7e:aa:d8:d6:93:5d:13: 5b:43:80:69:1b:ec:d4:87:d6:8a:6b:5b:ee:0c:69: f5:8a:77:13:e6:e5:8a:5e:00:d0:1d:3a:ef:e9:b1: 12:35:77:89:a4:6b:cc:90:df:61:df:4b:0a:84:47: b8:eb:81:d6:5e:27:3e:dc:e2:21:e5:b8:7b:d6:3f: 75:b4:64:01:ab:4a:05:7a:34:14:42:11:e8:26:5b: c5:3f:c6:23:42:2a:81:23:6f:87:3f:ab:05:be:06: 20:7e:43:16:87:9f:39:85:db:04:53:0a:e9:f0:f3: 91:33:85:f7:1f:e8:4b:7c:a6:ec:69:58:fa:3d:3e: 66:33:57:5c:e6:99:6a:7a:f4:c7:bb:3c:95:cb:f2: 28:54:73:54:22:7c:2f:88:68:6f:20:f6:57:9f:78: 00:07:f3:db:9d:b0:29:d7:3f:b7:c9:d5:dc:bb:a5: d5:57:5b:a9:e8:c6:3b:20:25:0a:b3:71:b4:c2:db: 42:2a:3a:67:3b:5a:89:1d:59:20:72:fc:fb:78:01: f5:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:33:AC:69:A6:59:B1:B5:E0:2D:F7:23:AF:C6:10:58:96:B8:87:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/6a7c1367-d6a0-36ee-9197-f10067fc6e44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:31::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f0:48:97:e3:c1:35:42:3d:94:26:30:d0:02:21:c0:f1:41: f8:ad:65:99:6c:99:f3:78:a0:33:27:b0:09:fe:e8:29:9d:ef: d3:c4:79:3d:74:13:c6:f8:bd:13:9e:58:b5:ff:aa:93:92:ce: 68:12:ba:96:e3:aa:f1:23:95:50:98:b1:24:c1:0d:0b:7b:3d: 85:8f:b6:93:59:19:6e:ed:c7:16:51:8f:8c:3e:bd:f4:99:41: 17:4d:71:34:1a:34:a5:67:71:d6:5a:07:fb:f7:dd:c6:d4:30: 98:99:1c:52:b8:a9:7e:75:b3:af:5d:03:35:a0:63:f6:fd:c6: 17:74:49:b3:eb:0d:13:7d:b5:56:e7:97:a8:34:1b:56:6b:58: ff:b1:97:2f:80:0b:3f:50:fe:ef:18:68:c0:d0:a9:95:5a:71: bd:6e:5c:75:06:9e:4a:b5:1e:1e:df:6a:0b:1b:7d:b1:f9:01: f6:68:dd:9c:39:04:92:16:62:2b:37:ef:3a:b3:70:ec:e0:7d: ae:85:b5:0c:10:6d:3c:48:18:56:7c:f2:9e:46:f0:da:84:7d: 08:2b:ee:61:db:45:ed:e6:b9:74:f5:b9:e3:48:51:dd:c9:5f: b3:5d:65:d8:b5:db:36:35:92:6d:b1:d0:d4:c4:e5:59:8b:00: 55:c4:7c:cd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSewBK+pycxxyBCEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk OTZlOTc2OWYtNTljYy00ZTZkLWI0Y2YtNjIxNjQwYzNkZWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfymeLycLrDA1iiPQLOmnnzeZYuxPCqvHpzr rckeRKTWppaIH1Lp8EEulnTLj8ksMeLu9H6q2NaTXRNbQ4BpG+zUh9aKa1vuDGn1 incT5uWKXgDQHTrv6bESNXeJpGvMkN9h30sKhEe464HWXic+3OIh5bh71j91tGQB q0oFejQUQhHoJlvFP8YjQiqBI2+HP6sFvgYgfkMWh585hdsEUwrp8PORM4X3H+hL fKbsaVj6PT5mM1dc5plqevTHuzyVy/IoVHNUInwviGhvIPZXn3gAB/PbnbAp1z+3 ydXcu6XVV1up6MY7ICUKs3G0wttCKjpnO1qJHVkgcvz7eAH1wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8zrGmmWbG14C33I6/GEFiWuIejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNmE3YzEzNjctZDZhMC0z NmVlLTkxOTctZjEwMDY3ZmM2ZTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXwSJfjwTVCPZQmMNACIcDxQfitZZlsmfN4oDMnsAn+6Cmd79PE eT10E8b4vROeWLX/qpOSzmgSupbjqvEjlVCYsSTBDQt7PYWPtpNZGW7txxZRj4w+ vfSZQRdNcTQaNKVncdZaB/v33cbUMJiZHFK4qX51s69dAzWgY/b9xhd0SbPrDRN9 tVbnl6g0G1ZrWP+xly+ACz9Q/u8YaMDQqZVacb1uXHUGnkq1Hh7fagsbfbH5AfZo 3Zw5BJIWYis37zqzcOzgfa6FtQwQbTxIGFZ88p5G8NqEfQgr7mHbRe3muXT1ueNI Ud3JX7NdZdi12zY1km2x0NTE5VmLAFXEfM0= -----END CERTIFICATE-----Generated at Sun May 11 00:48:19 2025 by rpki-client