$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/835f1873-c4da-3b6b-a915-288c9a74a96d.roa File: 835f1873-c4da-3b6b-a915-288c9a74a96d.roa (raw, json) Hash identifier: 2PKreJB0rXs1Vpr9g3SQMqb2tUspZhSGmP7wCRQo86M= Subject key identifier: CD:1D:3F:15:AA:DF:4B:57:19:BB:18:50:E4:5B:E1:67:F6:8C:97:44 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849B149E7CE3AFFB0A7E634B400 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/835f1873-c4da-3b6b-a915-288c9a74a96d.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 3360 IP address blocks: 2607:f028:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:e7:ce:3a:ff:b0:a7:e6:34:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=7fadac8a-04d1-46b6-945f-8b6949540d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6e:ab:a6:1b:73:05:45:f6:2c:7c:8a:9a:e7: 41:68:2c:ee:37:05:f9:9c:43:74:fd:5c:12:bd:2c: 9d:a3:3d:f6:3f:e9:65:2a:68:9a:48:68:95:18:b0: 1a:d3:ac:f1:08:e5:49:c7:7b:9d:46:6c:a7:5d:0e: 54:92:79:68:0e:23:ec:e1:74:39:a6:fe:e7:d7:7b: 19:76:5a:4e:63:e5:d9:0b:70:41:88:91:99:b5:34: 98:d6:13:1d:f4:8b:f9:fc:d8:12:89:52:02:02:4a: 2e:03:fa:bc:4c:fb:65:97:37:a0:10:48:b6:61:07: c9:03:35:b2:79:27:8c:2d:0f:f5:ff:01:ac:a7:ca: b1:43:d3:fb:b7:29:38:c3:f3:18:45:6a:7f:95:62: a2:cc:18:82:83:f4:23:28:73:31:2d:c4:e2:84:74: 77:96:84:f7:ea:9e:eb:33:b7:ac:be:1d:3c:f0:6b: ed:82:cd:b1:94:28:1e:dc:eb:eb:67:e3:d4:ec:32: 9a:0e:26:69:07:90:59:16:53:17:77:f7:cc:77:dc: 5e:b4:d0:bd:eb:8a:61:4c:cf:83:c3:a1:a3:b8:19: 19:b4:37:4c:d6:02:c3:69:af:2e:51:19:c1:40:ba: 2b:d4:5f:ca:e5:66:98:e3:e2:8f:8c:09:3c:ca:8a: fd:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1D:3F:15:AA:DF:4B:57:19:BB:18:50:E4:5B:E1:67:F6:8C:97:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/835f1873-c4da-3b6b-a915-288c9a74a96d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:2::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:2e:b8:25:7e:d4:0f:af:ab:75:33:57:bd:98:4c:09:52:4b: 1e:7c:64:78:9b:45:20:42:94:da:98:62:1d:73:3e:a1:2e:68: 16:5d:30:4b:16:13:7e:4c:8b:d8:c5:7d:e6:f6:09:a6:b3:16: 28:5a:21:c3:fc:2e:67:c8:c7:ff:47:48:37:f9:88:0f:60:46: aa:bf:6c:97:ca:21:ce:70:1a:f5:3d:d5:59:2e:9e:b4:01:25: a4:43:58:bb:59:46:4b:5b:3c:80:24:fc:e4:4b:df:bd:25:90: d9:df:bd:3d:a8:22:13:8f:2f:0b:fb:b8:e8:0c:f3:27:14:88: 37:f6:05:b7:4e:19:7b:34:28:b0:53:7b:ea:d4:6e:6c:b5:20: 63:5c:a2:7d:f0:fc:27:a8:a3:ac:7b:49:7a:d2:75:43:a8:a8: 7c:b3:63:1e:d0:fc:b8:91:c0:3b:37:63:35:c7:ca:c7:fd:ae: 2f:c1:f4:1b:a8:1b:d1:8e:14:c1:bf:39:16:70:72:03:82:13: b0:c2:fe:7d:d2:b1:2d:a5:ad:e7:b1:42:5f:32:a1:a7:ba:83: 5d:fa:3c:f0:4a:29:9d:ca:eb:46:cd:2d:ff:7c:a1:98:db:6b: c6:ee:63:f4:84:0b:e7:24:a1:4d:f4:47:c3:7a:b6:ea:63:4b: 55:04:d0:1a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEmxSefOOv+wp+Y0tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk N2ZhZGFjOGEtMDRkMS00NmI2LTk0NWYtOGI2OTQ5NTQwZDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG6rphtzBUX2LHyKmudBaCzuNwX5nEN0/VwS vSydoz32P+llKmiaSGiVGLAa06zxCOVJx3udRmynXQ5UknloDiPs4XQ5pv7n13sZ dlpOY+XZC3BBiJGZtTSY1hMd9Iv5/NgSiVICAkouA/q8TPtllzegEEi2YQfJAzWy eSeMLQ/1/wGsp8qxQ9P7tyk4w/MYRWp/lWKizBiCg/QjKHMxLcTihHR3loT36p7r M7esvh088Gvtgs2xlCge3OvrZ+PU7DKaDiZpB5BZFlMXd/fMd9xetNC964phTM+D w6GjuBkZtDdM1gLDaa8uURnBQLor1F/K5WaY4+KPjAk8yor9SwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM0dPxWq30tXGbsYUORb4Wf2jJdEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODM1ZjE4NzMtYzRkYS0z YjZiLWE5MTUtMjg4YzlhNzRhOTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFEuuCV+1A+vq3UzV72YTAlSSx58ZHibRSBClNqYYh1zPqEuaBZd MEsWE35Mi9jFfeb2CaazFihaIcP8LmfIx/9HSDf5iA9gRqq/bJfKIc5wGvU91Vku nrQBJaRDWLtZRktbPIAk/ORL370lkNnfvT2oIhOPLwv7uOgM8ycUiDf2BbdOGXs0 KLBTe+rUbmy1IGNcon3w/Ceoo6x7SXrSdUOoqHyzYx7Q/LiRwDs3YzXHysf9ri/B 9BuoG9GOFMG/ORZwcgOCE7DC/n3SsS2lreexQl8yoae6g136PPBKKZ3K60bNLf98 oZjba8buY/SEC+ckoU30R8N6tupjS1UE0Bo= -----END CERTIFICATE-----Generated at Sat May 10 04:44:19 2025 by rpki-client