$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/70a3ddf1-1fab-36dd-9760-2bead494f273.roa File: 70a3ddf1-1fab-36dd-9760-2bead494f273.roa (raw, json) Hash identifier: LHXJg7MCJJMWpXmzODOUk5NiGEvMbt4wlKhWIKZYJyU= Subject key identifier: 01:89:43:7E:94:F2:44:B8:40:9C:E1:29:95:90:53:DE:B8:C3:3A:39 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E547C5A99B1981124F9D80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/70a3ddf1-1fab-36dd-9760-2bead494f273.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 2607:f028:92::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:47:c5:a9:9b:19:81:12:4f:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=28284714-56ca-4e36-a832-4258aae3646e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4f:7d:74:90:c6:18:92:05:41:d1:c2:1a:db: 59:2e:7b:34:47:03:ae:f3:8b:48:ed:ab:20:8c:18: d7:ae:50:08:53:d3:46:46:7a:97:48:c8:a6:fc:02: 3f:f0:28:7a:c7:f1:6a:e3:83:9b:f3:99:f2:be:e2: 40:52:3d:85:00:65:f0:5e:fd:79:b1:24:2d:77:f4: a8:48:86:02:6e:f4:54:09:02:f1:64:30:4c:e1:02: 94:5c:25:10:99:af:df:81:32:d9:73:c6:c4:b4:d6: 73:1b:d4:22:5f:04:f6:e0:a7:7d:d6:04:8c:6b:23: 81:0c:18:69:8f:44:d9:b5:dc:0a:68:dd:99:b3:e1: f8:8e:0c:75:29:ba:f3:75:18:f6:bd:0f:4a:b7:07: 33:2f:aa:4f:aa:71:ba:c1:30:c9:4b:cf:51:7c:5a: 95:3c:2f:39:40:bf:29:97:db:f5:8e:7b:13:f8:7d: 99:5a:72:80:d7:71:9b:08:75:1e:34:73:11:c5:3e: 75:e2:96:8f:fb:e6:08:a3:74:aa:5e:a3:14:19:c2: 98:80:c3:11:bf:67:7e:72:b7:dd:c3:2c:e6:fd:32: d1:c0:b5:4d:2c:a9:80:a7:d1:76:5e:39:87:29:5e: bb:0c:aa:0d:58:65:dd:00:ee:41:29:ae:de:bb:79: 38:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:89:43:7E:94:F2:44:B8:40:9C:E1:29:95:90:53:DE:B8:C3:3A:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/70a3ddf1-1fab-36dd-9760-2bead494f273.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:92::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:f9:5a:97:1f:52:35:ae:ac:44:f5:b2:6c:a9:03:fd:f7:58: 62:a3:2e:77:6e:f3:e3:11:08:42:5c:4e:6a:53:f3:b7:f6:44: 6f:b8:45:eb:79:a0:f5:9b:15:25:ce:3a:2b:d2:44:8d:91:1d: 45:4c:dc:10:91:89:5a:60:0a:0e:4a:b5:1b:0f:37:8a:d0:1d: 94:d0:14:df:92:ad:0c:c3:4e:d6:56:ec:1f:88:09:03:95:1f: 75:cd:19:bd:d5:25:a9:92:a4:5f:04:6c:f6:ba:bf:70:eb:2d: 59:52:c6:ac:0d:ab:62:e2:c3:e9:40:1c:ba:7d:80:37:05:35: ba:3d:8d:cb:5a:7c:09:f6:a5:0d:7f:4b:b8:2a:79:d4:41:e5: 9b:3d:f5:29:37:51:ba:25:4c:6b:a3:99:1d:b2:ff:d6:ac:92: 17:81:cf:76:28:d5:7d:68:a5:e5:42:d3:70:f9:62:bf:96:0f: a5:82:28:ca:b5:f7:6c:3f:4a:38:48:a6:9c:d0:9f:22:10:65: 7e:7e:9a:b8:06:1c:d3:98:5e:52:6a:ec:5b:f0:7a:47:c8:cc: 6d:33:62:f3:ea:70:c0:2a:21:c8:8d:a8:41:6a:ff:cb:b2:11: 83:e2:82:b6:e1:dc:f7:53:c7:16:da:d7:bd:c6:cb:bb:51:98: 02:70:48:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5UfFqZsZgRJPnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk MjgyODQ3MTQtNTZjYS00ZTM2LWE4MzItNDI1OGFhZTM2NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgE99dJDGGJIFQdHCGttZLns0RwOu84tI7asg jBjXrlAIU9NGRnqXSMim/AI/8Ch6x/Fq44Ob85nyvuJAUj2FAGXwXv15sSQtd/So SIYCbvRUCQLxZDBM4QKUXCUQma/fgTLZc8bEtNZzG9QiXwT24Kd91gSMayOBDBhp j0TZtdwKaN2Zs+H4jgx1KbrzdRj2vQ9KtwczL6pPqnG6wTDJS89RfFqVPC85QL8p l9v1jnsT+H2ZWnKA13GbCHUeNHMRxT514paP++YIo3SqXqMUGcKYgMMRv2d+crfd wyzm/TLRwLVNLKmAp9F2XjmHKV67DKoNWGXdAO5BKa7eu3k4tQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGJQ36U8kS4QJzhKZWQU964wzo5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNzBhM2RkZjEtMWZhYi0z NmRkLTk3NjAtMmJlYWQ0OTRmMjczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAL5WpcfUjWurET1smypA/33WGKjLndu8+MRCEJcTmpT87f2RG+4 Ret5oPWbFSXOOivSRI2RHUVM3BCRiVpgCg5KtRsPN4rQHZTQFN+SrQzDTtZW7B+I CQOVH3XNGb3VJamSpF8EbPa6v3DrLVlSxqwNq2Liw+lAHLp9gDcFNbo9jctafAn2 pQ1/S7gqedRB5Zs99Sk3UbolTGujmR2y/9askheBz3Yo1X1opeVC03D5Yr+WD6WC KMq192w/SjhIppzQnyIQZX5+mrgGHNOYXlJq7FvwekfIzG0zYvPqcMAqIciNqEFq /8uyEYPigrbh3PdTxxba173Gy7tRmAJwSEk= -----END CERTIFICATE-----Generated at Tue Jul 1 20:30:36 2025 by rpki-client