$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5ef9dd7-cb00-3bf6-9d16-cd8a49e62c47.roa File: c5ef9dd7-cb00-3bf6-9d16-cd8a49e62c47.roa (raw, json) Hash identifier: gTHgthV5iTN4VML/D9oikJjjNn0VgPgo8iumI64Qa9A= Subject key identifier: B8:00:74:C2:D5:C5:0E:74:DB:27:36:25:26:4A:C0:53:9F:B6:05:86 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A1078844CCB1D9649DC280 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5ef9dd7-cb00-3bf6-9d16-cd8a49e62c47.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 203 IP address blocks: 2607:f028:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:07:88:44:cc:b1:d9:64:9d:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=dda20ec9-8d7a-436a-91c6-6c01112a0315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:47:1d:39:b2:a9:01:ab:f9:40:6e:ab:3e:0b: 0c:cd:4a:1c:e7:1e:6b:fc:a3:f8:82:ec:97:29:63: c3:d8:c8:75:88:a7:d3:25:61:90:d0:8b:c6:b2:e0: b0:e8:7c:97:2a:56:a8:fd:99:dd:40:76:53:d9:26: 30:ed:21:cf:0d:79:53:a1:d4:e0:df:1a:e9:fa:9a: c4:40:00:de:5b:ca:eb:ac:bf:26:3e:51:f9:74:82: 01:18:d0:60:35:01:d2:0e:77:e4:bf:40:98:a3:d7: 45:ab:c0:1c:38:8d:26:89:a1:c1:cb:a3:02:8c:fd: 07:89:40:c8:10:8d:45:2e:ec:68:6e:5f:94:13:f4: 2f:3d:27:36:7c:e1:dd:1e:9c:31:4d:f2:ef:08:d4: 7d:53:5a:13:5d:dc:56:d8:37:2c:6d:a7:90:13:9f: d2:7a:ff:66:e8:36:c2:7a:4a:52:68:83:4f:f1:82: 7e:07:41:d5:aa:e7:08:fb:d4:68:6e:75:50:53:a8: ee:88:bf:e2:8c:e9:80:72:83:fb:8b:7d:3f:3d:69: 5f:be:1b:a3:15:9e:cf:f1:e1:33:53:cb:db:d5:64: 42:60:67:99:20:8d:f4:9a:5b:54:c0:13:8d:09:28: d2:87:2d:c6:8a:5b:f2:2b:7e:e7:5f:cd:78:5a:fc: 92:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:00:74:C2:D5:C5:0E:74:DB:27:36:25:26:4A:C0:53:9F:B6:05:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/c5ef9dd7-cb00-3bf6-9d16-cd8a49e62c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:d4:03:b9:01:8a:a5:01:c2:19:eb:8f:76:54:59:f8:1c:b8: ea:fb:ca:ad:d2:59:dd:82:6c:4e:66:98:07:f5:4c:9b:79:58: 4f:21:ee:f2:26:4a:d5:03:67:db:96:d1:2b:fa:21:3b:bd:52: 87:3d:6c:b1:d2:1e:47:05:58:cf:c3:92:87:01:01:46:b6:a3: db:1d:9c:14:3f:68:38:29:fe:62:e3:15:f5:ce:7e:0c:0a:4c: 51:e5:c8:b0:98:ef:1f:87:af:7a:a7:26:0c:48:c3:0b:ab:39: 13:bb:b4:32:b3:f3:ee:b4:ab:37:77:e8:cf:f6:eb:11:34:3c: 02:a8:e2:e7:73:ae:6e:4a:5a:50:bb:43:b3:27:d0:d3:2c:93: 68:89:e6:e7:27:9f:06:c9:75:34:2e:c9:fc:10:00:3f:c1:af: a6:c8:c8:b7:79:d0:dd:80:4a:c9:b5:f4:fa:6f:eb:23:8e:8b: e9:35:94:45:9d:5f:95:5d:f3:85:90:60:f7:94:54:39:01:29: 50:6e:58:dc:63:16:1e:53:7b:c1:20:73:f6:59:a1:2e:91:ba: d2:57:c8:79:a2:24:4d:e8:70:55:03:eb:4d:f4:b1:d9:00:71: 70:2f:9e:40:1b:d5:35:54:b1:a5:ad:18:16:72:5c:9d:c1:99: 92:eb:a7:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQeIRMyx2WSdwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGRhMjBlYzktOGQ3YS00MzZhLTkxYzYtNmMwMTExMmEwMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kcdObKpAav5QG6rPgsMzUoc5x5r/KP4guyX KWPD2Mh1iKfTJWGQ0IvGsuCw6HyXKlao/ZndQHZT2SYw7SHPDXlTodTg3xrp+prE QADeW8rrrL8mPlH5dIIBGNBgNQHSDnfkv0CYo9dFq8AcOI0miaHBy6MCjP0HiUDI EI1FLuxobl+UE/QvPSc2fOHdHpwxTfLvCNR9U1oTXdxW2DcsbaeQE5/Sev9m6DbC ekpSaINP8YJ+B0HVqucI+9RobnVQU6juiL/ijOmAcoP7i30/PWlfvhujFZ7P8eEz U8vb1WRCYGeZII30mltUwBONCSjShy3GilvyK37nX814WvySPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLgAdMLVxQ502yc2JSZKwFOftgWGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYzVlZjlkZDctY2IwMC0z YmY2LTlkMTYtY2Q4YTQ5ZTYyYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGHUA7kBiqUBwhnrj3ZUWfgcuOr7yq3SWd2CbE5mmAf1TJt5WE8h 7vImStUDZ9uW0Sv6ITu9Uoc9bLHSHkcFWM/DkocBAUa2o9sdnBQ/aDgp/mLjFfXO fgwKTFHlyLCY7x+Hr3qnJgxIwwurORO7tDKz8+60qzd36M/26xE0PAKo4udzrm5K WlC7Q7Mn0NMsk2iJ5ucnnwbJdTQuyfwQAD/Br6bIyLd50N2ASsm19Ppv6yOOi+k1 lEWdX5Vd84WQYPeUVDkBKVBuWNxjFh5Te8Egc/ZZoS6RutJXyHmiJE3ocFUD6030 sdkAcXAvnkAb1TVUsaWtGBZyXJ3BmZLrpyc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:55:10 2025 by rpki-client