$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa File: b06820e1-fa20-3f02-8591-f608a88a8249.roa (raw, json) Hash identifier: a+Kay4j86aNG0zY+pCUp6r8fl8vt6Sn7S6aT8gCao/4= Subject key identifier: 8D:FF:55:64:68:FF:96:13:38:FB:F8:ED:6F:35:D0:AC:11:A5:D8:48 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A10D44D2306F2066199680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 2607:f028:121::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:0d:44:d2:30:6f:20:66:19:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=44cee36a-42be-46ba-a812-8803dfd16efb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ce:34:a5:c8:9a:c7:9a:3b:de:61:a9:36:bc: 59:06:44:3e:34:a9:fc:84:1e:79:64:f4:27:fb:7b: 62:8f:e0:04:b7:48:5e:6f:42:a8:3c:62:ab:a9:ee: fb:d5:4c:81:b0:87:83:f3:6c:8e:eb:79:08:c8:22: 10:7c:2f:3b:f4:29:ca:68:fb:81:8c:75:ee:03:9e: 87:8f:06:89:c7:d2:5b:9f:0f:1b:e9:ae:a2:38:08: e8:d9:b5:e1:d4:d4:0a:a9:2b:ab:4e:53:44:4c:20: e9:0e:c0:45:67:2b:9f:a1:b0:b9:81:1f:3c:74:2b: f1:22:e7:41:82:c9:53:f6:87:1f:02:5f:e2:e5:f6: cc:1f:c7:95:9a:d2:c5:0c:5f:34:03:6b:28:d3:01: 44:27:5a:e8:54:9e:ab:51:96:7e:7c:3d:f9:49:ef: 27:1c:23:93:02:91:6b:b5:67:b4:2f:7a:8b:3a:c4: 7c:59:55:8a:00:e4:3a:25:9c:8b:50:b5:5d:a8:ce: a2:05:dc:b0:d2:4d:57:a6:23:ef:b5:13:3f:0e:42: 2d:fc:35:2d:79:07:a5:38:d0:9d:36:55:04:aa:5f: 9f:2a:1f:ba:4a:53:e5:e4:14:6f:28:8e:e4:54:8a: 65:34:88:b6:06:05:b9:01:f2:0c:05:b1:d3:39:17: b2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:FF:55:64:68:FF:96:13:38:FB:F8:ED:6F:35:D0:AC:11:A5:D8:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b06820e1-fa20-3f02-8591-f608a88a8249.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:121::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f1:f4:34:6c:a9:ce:e5:22:a7:ed:08:94:57:b2:c7:84:04: 70:ef:2b:c0:2a:a5:0f:5a:e0:08:42:fa:2a:a8:0a:f0:a2:3a: dc:d4:c4:c8:12:c4:e2:44:fc:b5:27:24:60:17:13:56:24:72: 97:26:ba:7c:d7:0e:69:6b:73:cf:44:5e:fe:4e:ec:cd:82:fb: 72:fb:88:d2:82:29:d4:b2:24:12:94:f5:4a:9d:4f:32:6e:20: 01:f2:2e:b3:b8:c4:6d:43:0a:b7:ad:7a:62:9f:96:85:ab:43: b9:52:4f:7a:99:4d:39:c0:9d:61:65:0a:77:2d:40:58:18:33: 8e:a4:bc:a1:70:68:15:eb:85:c1:7c:cf:62:df:62:37:ad:89: 3b:35:e4:b4:88:e7:58:1d:e5:4d:8b:e8:4c:8c:ab:8d:d1:36: 67:b9:9c:56:cf:55:45:fe:40:6a:7f:85:05:23:b6:3c:c6:a8: 92:1b:b6:0f:dc:b2:4e:2a:bc:bc:62:22:11:75:b3:40:1d:b5: 95:21:a0:bb:20:ca:e0:bb:7a:33:d4:f4:3d:1c:0a:82:77:7d: 1d:28:46:56:8b:33:3b:fb:e5:b3:5f:8c:d3:27:c7:ba:c3:ff: 7b:b2:45:ae:c5:df:72:aa:be:f9:d0:db:aa:a0:a1:aa:05:3a: b4:2a:21:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQ1E0jBvIGYZloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk NDRjZWUzNmEtNDJiZS00NmJhLWE4MTItODgwM2RmZDE2ZWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk840pciax5o73mGpNrxZBkQ+NKn8hB55ZPQn +3tij+AEt0heb0KoPGKrqe771UyBsIeD82yO63kIyCIQfC879CnKaPuBjHXuA56H jwaJx9Jbnw8b6a6iOAjo2bXh1NQKqSurTlNETCDpDsBFZyufobC5gR88dCvxIudB gslT9ocfAl/i5fbMH8eVmtLFDF80A2so0wFEJ1roVJ6rUZZ+fD35Se8nHCOTApFr tWe0L3qLOsR8WVWKAOQ6JZyLULVdqM6iBdyw0k1XpiPvtRM/DkIt/DUteQelONCd NlUEql+fKh+6SlPl5BRvKI7kVIplNIi2BgW5AfIMBbHTOReyiQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI3/VWRo/5YTOPv47W810KwRpdhIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjA2ODIwZTEtZmEyMC0z ZjAyLTg1OTEtZjYwOGE4OGE4MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIjx9DRsqc7lIqftCJRXsseEBHDvK8AqpQ9a4AhC+iqoCvCiOtzU xMgSxOJE/LUnJGAXE1YkcpcmunzXDmlrc89EXv5O7M2C+3L7iNKCKdSyJBKU9Uqd TzJuIAHyLrO4xG1DCretemKfloWrQ7lST3qZTTnAnWFlCnctQFgYM46kvKFwaBXr hcF8z2LfYjetiTs15LSI51gd5U2L6EyMq43RNme5nFbPVUX+QGp/hQUjtjzGqJIb tg/csk4qvLxiIhF1s0AdtZUhoLsgyuC7ejPU9D0cCoJ3fR0oRlaLMzv75bNfjNMn x7rD/3uyRa7F33KqvvnQ26qgoaoFOrQqIQw= -----END CERTIFICATE-----Generated at Sat Aug 23 18:12:15 2025 by rpki-client