$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa File: f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa (raw, json) Hash identifier: i3g1Vcp4u2WB+cbLNYaRu7lWq9vJM2tRydws/IE5/aU= Subject key identifier: 43:DD:70:7D:BD:F9:79:43:68:9F:31:46:61:26:6C:7B:58:0E:8C:C7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AD3A107B0F11EABE18F60E700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 202 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:07:b0:f1:1e:ab:e1:8f:60:e7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=36729d71-0029-489c-861e-104a77199f49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d5:de:0f:ec:0d:61:d8:e3:24:f2:09:09:d1: cc:5c:0d:12:de:fa:4d:39:e5:7e:25:44:f8:b9:03: 34:82:71:f8:a3:d2:21:3b:e4:1f:7b:3c:97:8e:f4: af:dd:9e:f6:33:12:02:1d:26:98:c6:78:99:36:75: 5d:4e:9e:5e:6a:18:08:2a:b3:c3:c0:4d:49:85:5a: 54:30:f8:18:2a:45:1e:13:03:c1:22:8a:00:2a:a9: 57:9a:10:f7:7f:1b:d8:1f:f6:b2:1d:28:6a:4a:90: 29:42:26:c2:97:42:6e:19:35:f2:1b:b5:52:70:14: 61:76:17:75:b8:f3:95:c9:99:db:83:63:45:44:dc: 43:ee:54:0b:1e:22:99:26:4b:9e:a0:3e:93:8b:77: fb:2a:e3:5a:7c:b4:a7:d8:9a:7e:de:8f:b1:33:16: b7:e4:96:40:9f:e4:9c:78:5d:4b:cc:45:a0:e0:50: 56:03:4b:aa:0d:09:c5:45:bd:15:b9:ef:73:63:56: 6e:b6:e9:9f:34:35:af:58:97:a7:60:6f:5b:88:99: 42:11:76:75:2d:ad:93:0a:a7:7c:9a:11:a3:17:2c: 89:87:e4:df:50:07:6d:1a:28:3b:16:0d:39:52:16: 76:10:80:5f:20:32:c3:8e:af:24:80:5f:ca:b9:e3: 55:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DD:70:7D:BD:F9:79:43:68:9F:31:46:61:26:6C:7B:58:0E:8C:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ba:6e:d9:61:c8:82:30:51:c9:39:c0:07:c1:e4:1d:6e:7a: 78:64:a0:1c:a2:50:dc:e3:6c:4a:62:d1:32:af:3c:75:2a:4d: c5:0f:57:c8:05:5b:5f:f6:04:02:14:fb:27:40:b4:2f:b1:d3: ea:a0:f2:5a:89:74:e9:74:38:8e:74:f6:2c:de:2f:ed:53:2e: 6b:b7:e5:08:c8:45:e9:84:fe:c5:d9:3e:ac:a8:54:3f:36:ac: cb:c6:e5:70:6e:93:57:9e:08:ec:51:09:41:d1:20:6f:25:57: 65:ff:80:4d:21:d9:e2:8c:de:8a:3e:3d:72:29:26:f0:cc:83: 1a:25:a7:8b:bc:13:3b:13:43:e8:43:3f:d1:d3:cc:be:27:93: b4:4e:6e:2f:25:ba:17:1b:70:39:56:03:f0:74:78:8f:0a:5b: 35:a3:dc:28:3e:a0:75:10:29:c2:39:b5:49:54:d9:54:d9:00: 34:c2:5b:e2:33:d0:d8:1a:8d:6f:5f:e0:0c:21:b9:83:de:0d: 38:b0:ae:e9:fa:db:51:ec:5b:9c:6b:64:fb:a0:1b:b0:f8:d8: 92:cf:b1:c9:74:2e:e8:17:d9:07:06:78:f0:19:86:bd:a5:b6: 28:5f:74:1e:b2:75:0d:66:49:e4:5e:94:db:c9:43:b6:26:48: a8:d1:97:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErToQew8R6r4Y9g5wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MzY3MjlkNzEtMDAyOS00ODljLTg2MWUtMTA0YTc3MTk5ZjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tXeD+wNYdjjJPIJCdHMXA0S3vpNOeV+JUT4 uQM0gnH4o9IhO+QfezyXjvSv3Z72MxICHSaYxniZNnVdTp5eahgIKrPDwE1JhVpU MPgYKkUeEwPBIooAKqlXmhD3fxvYH/ayHShqSpApQibCl0JuGTXyG7VScBRhdhd1 uPOVyZnbg2NFRNxD7lQLHiKZJkueoD6Ti3f7KuNafLSn2Jp+3o+xMxa35JZAn+Sc eF1LzEWg4FBWA0uqDQnFRb0Vue9zY1ZutumfNDWvWJenYG9biJlCEXZ1La2TCqd8 mhGjFyyJh+TfUAdtGig7Fg05UhZ2EIBfIDLDjq8kgF/KueNVewIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEPdcH29+XlDaJ8xRmEmbHtYDozHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjhjNjU2ZWMtNDE5ZS0z YTViLTkxYjEtOTZmMDdjNmFiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF66btlhyIIwUck5wAfB5B1uenhkoByiUNzjbEpi0TKvPHUqTcUP V8gFW1/2BAIU+ydAtC+x0+qg8lqJdOl0OI509izeL+1TLmu35QjIRemE/sXZPqyo VD82rMvG5XBuk1eeCOxRCUHRIG8lV2X/gE0h2eKM3oo+PXIpJvDMgxolp4u8EzsT Q+hDP9HTzL4nk7RObi8luhcbcDlWA/B0eI8KWzWj3Cg+oHUQKcI5tUlU2VTZADTC W+Iz0NgajW9f4AwhuYPeDTiwrun621HsW5xrZPugG7D42JLPscl0LugX2QcGePAZ hr2ltihfdB6ydQ1mSeRelNvJQ7YmSKjRl/c= -----END CERTIFICATE-----Generated at Sat Aug 23 14:57:08 2025 by rpki-client