$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9422eccc-270d-38fb-bcde-a4daf7c2d2a4.roa File: 9422eccc-270d-38fb-bcde-a4daf7c2d2a4.roa (raw, json) Hash identifier: kWFPB8TO+t8vSrwETz+umugg6OVdHyqEnMGz5GjDCcc= Subject key identifier: 6A:22:46:C1:83:9A:E6:54:99:D6:D7:F6:71:2F:24:AC:F3:0A:93:FC Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584AC113D9185D3F6ACF8FAB4728 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9422eccc-270d-38fb-bcde-a4daf7c2d2a4.roa Signing time: Tue 05 Aug 2025 09:31:46 +0000 ROA not before: Tue 05 Aug 2025 09:31:46 +0000 ROA not after: Mon 03 Nov 2025 10:31:46 +0000 asID: 16509 IP address blocks: 2607:f028:281::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 11 Aug 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c1:13:d9:18:5d:3f:6a:cf:8f:ab:47:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Aug 5 09:31:46 2025 GMT Not After : Nov 3 10:31:46 2025 GMT Subject: CN=5c072e1f-1938-40ab-9a47-a2ecd4d0cd20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:f4:3f:13:fd:de:77:66:42:a0:f3:56:e1: 6d:e8:29:5e:79:74:36:1b:87:0b:54:23:24:40:16: 1a:b9:16:ad:63:85:bd:1e:0d:22:99:f1:e7:a1:7a: 84:18:2c:80:11:92:72:44:c6:df:de:d3:00:e5:68: 7b:a0:b2:96:4c:ce:d7:2a:ef:99:59:f2:0a:8b:b8: 44:11:c5:db:dc:69:1a:b5:e8:8d:ac:30:fe:ef:bd: 96:a0:87:be:86:a9:78:ca:12:68:84:cf:bd:18:cc: 6d:e4:75:f3:73:1c:47:77:26:1a:5c:2f:ef:9a:8c: 9e:f8:d5:bf:e7:c1:20:dd:d0:03:fe:77:f0:e2:2e: 7c:b1:a9:77:08:f0:ae:7f:51:16:92:66:8e:19:c0: d6:05:da:df:8f:b7:de:1d:c7:02:96:d9:26:d3:e1: 3c:fa:2f:aa:fd:b0:83:2f:33:1c:1d:8e:d4:99:04: 65:89:86:a1:c9:f0:07:b9:34:2c:3b:f4:b8:13:6f: f9:7f:e2:64:70:86:8d:7d:44:64:49:e4:48:e3:09: 73:e3:9b:bd:29:3e:e6:b1:a3:da:50:4c:57:cf:5a: a4:6c:15:93:fc:6a:6e:4f:cb:5f:32:34:b4:2a:e0: 1a:1d:8d:ef:8c:c3:c1:8b:85:79:a4:87:01:95:de: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:22:46:C1:83:9A:E6:54:99:D6:D7:F6:71:2F:24:AC:F3:0A:93:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9422eccc-270d-38fb-bcde-a4daf7c2d2a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:281::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:19:76:2f:94:33:34:b6:62:d5:06:26:f4:33:f3:42:8b:e4: 54:33:af:c2:fe:68:a9:02:9d:87:f0:55:e2:23:7c:42:3a:74: ff:a7:74:55:e8:85:e5:67:8a:9c:85:27:42:3b:94:9b:66:8a: 5b:cf:bc:37:a2:e7:3b:ad:e8:a6:9f:46:26:be:39:fe:5e:76: cf:c9:07:1c:77:83:6b:ca:3d:0a:55:67:e2:25:80:6f:2b:61: 1f:b6:a5:61:6c:7e:5c:ef:57:b8:44:5b:6b:9c:32:a8:0f:2b: f7:79:c0:4e:c2:40:19:d5:ff:7b:64:b0:8c:7e:ed:90:8d:51: ac:11:f9:66:46:6c:90:56:34:28:ed:88:b3:fc:c8:ea:98:bb: cc:0e:0d:a2:d5:ae:e6:8e:0e:75:c0:0c:cc:cd:79:51:a9:4c: 65:cf:4e:58:e0:ae:f1:98:41:eb:6b:18:61:df:c8:6e:00:13: 14:51:26:2d:c6:4e:1b:43:f4:2f:57:18:5f:81:da:f1:18:e8: 05:da:84:88:e2:10:36:ad:d2:0b:00:89:2f:14:f3:fe:33:16: a6:4a:16:89:e7:f5:f2:36:1e:05:fa:8d:94:78:c8:3b:08:5e: be:b3:eb:8b:f3:70:99:6d:c0:cf:5a:b4:b8:77:b9:12:dc:e2: ce:d4:0f:38 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWErBE9kYXT9qz4+rRygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDgwNTA5MzE0NloXDTI1MTEwMzEwMzE0NlowLzEtMCsGA1UEAxMk NWMwNzJlMWYtMTkzOC00MGFiLTlhNDctYTJlY2Q0ZDBjZDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1z0PxP93ndmQqDzVuFt6CleeXQ2G4cLVCMk QBYauRatY4W9Hg0imfHnoXqEGCyAEZJyRMbf3tMA5Wh7oLKWTM7XKu+ZWfIKi7hE EcXb3GkateiNrDD+772WoIe+hql4yhJohM+9GMxt5HXzcxxHdyYaXC/vmoye+NW/ 58Eg3dAD/nfw4i58sal3CPCuf1EWkmaOGcDWBdrfj7feHccCltkm0+E8+i+q/bCD LzMcHY7UmQRliYahyfAHuTQsO/S4E2/5f+JkcIaNfURkSeRI4wlz45u9KT7msaPa UExXz1qkbBWT/GpuT8tfMjS0KuAaHY3vjMPBi4V5pIcBld4LRwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGoiRsGDmuZUmdbX9nEvJKzzCpP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTQyMmVjY2MtMjcwZC0z OGZiLWJjZGUtYTRkYWY3YzJkMmE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAKB MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJAZdi+UMzS2YtUGJvQz80KL5FQzr8L+aKkCnYfwVeIjfEI6dP+n dFXoheVnipyFJ0I7lJtmilvPvDei5zut6KafRia+Of5eds/JBxx3g2vKPQpVZ+Il gG8rYR+2pWFsflzvV7hEW2ucMqgPK/d5wE7CQBnV/3tksIx+7ZCNUawR+WZGbJBW NCjtiLP8yOqYu8wODaLVruaODnXADMzNeVGpTGXPTljgrvGYQetrGGHfyG4AExRR Ji3GThtD9C9XGF+B2vEY6AXahIjiEDat0gsAiS8U8/4zFqZKFonn9fI2HgX6jZR4 yDsIXr6z64vzcJltwM9atLh3uRLc4s7UDzg= -----END CERTIFICATE-----Generated at Sat Aug 9 20:35:01 2025 by rpki-client