$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bde05853-3df2-305e-bb3f-11ea6994e95a.roa File: bde05853-3df2-305e-bb3f-11ea6994e95a.roa (raw, json) Hash identifier: xJnKyO6LURu5HeMmarV4G5dOMwDP+oGyozIkrzSHcPI= Subject key identifier: A5:5C:FA:96:71:45:C6:E6:D2:9B:8F:A3:74:D7:30:6A:C0:27:40:B7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F43285849F2E53EAB2C3F6833EAF0D540 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bde05853-3df2-305e-bb3f-11ea6994e95a.roa Signing time: Fri 23 May 2025 13:01:03 +0000 ROA not before: Fri 23 May 2025 13:01:03 +0000 ROA not after: Thu 21 Aug 2025 13:01:03 +0000 asID: 202 IP address blocks: 2607:f028:22::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f2:e5:3e:ab:2c:3f:68:33:ea:f0:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: May 23 13:01:03 2025 GMT Not After : Aug 21 13:01:03 2025 GMT Subject: CN=4710ba12-896d-45f6-ae02-7d7447ef7201 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fd:bd:69:31:cf:da:51:00:53:c1:62:6a:92: a8:87:f6:63:9c:8c:97:48:e4:20:23:a3:ba:0d:a4: ae:8b:2d:01:8c:b5:ca:43:56:02:35:49:9d:b0:6e: 09:15:ab:73:d9:e7:67:f9:f9:08:2a:d7:dc:d6:cd: e8:97:11:9f:81:0e:19:78:e1:02:4f:b9:dc:e1:9c: ff:ba:77:52:72:7d:20:00:f7:09:2d:72:b1:61:fb: 10:f3:b7:38:44:67:ce:7a:86:66:d0:a6:75:71:9d: 81:fa:a5:8b:73:7d:1a:bd:f9:67:d8:74:52:be:cd: cf:e1:f1:bb:12:57:ba:16:b9:7a:bd:9a:e7:91:a8: be:51:51:55:1d:7e:f1:89:67:b0:27:c0:9d:72:55: d9:79:c9:e7:e6:fc:c3:6c:08:66:d0:23:9f:63:8f: fa:15:be:cd:fd:17:fd:e6:02:71:42:00:30:f7:04: 8b:df:b0:29:18:cb:4d:9a:5d:76:0d:f3:c0:c4:6d: 11:df:5f:b6:49:e3:fa:a9:f2:4b:db:f7:76:bb:d1: 41:b4:6e:8c:72:02:f5:b3:66:b5:b3:23:2b:8b:e5: 13:e6:ac:dd:ca:da:7c:a9:40:5d:27:14:a8:a7:50: 30:9c:aa:b0:70:eb:0f:ea:ce:11:7a:a2:0a:2f:08: 75:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5C:FA:96:71:45:C6:E6:D2:9B:8F:A3:74:D7:30:6A:C0:27:40:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bde05853-3df2-305e-bb3f-11ea6994e95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:22::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:58:af:12:16:f3:91:98:ea:6b:30:a1:49:54:c6:ea:6a:f4: 0a:a2:5f:4d:cd:1f:96:62:2c:46:b2:b2:b4:91:84:b1:26:b4: 1d:e4:38:cf:f5:54:ae:a6:b5:6c:bd:b9:86:b3:85:bf:b6:cc: b5:a0:83:33:96:64:0b:a1:48:d9:59:a5:bb:46:bc:b9:5a:f4: 50:0b:84:d9:88:2a:a4:a8:f1:9e:bd:de:5a:11:03:bc:46:a7: dd:d0:9e:ff:38:99:7a:8b:59:aa:a7:46:a7:9a:8d:c3:41:cf: 58:fc:94:93:16:d6:ea:93:70:5d:19:b3:bd:8a:c2:0a:51:a1: f2:49:fa:a2:57:1f:df:60:dd:4c:2d:73:62:b9:65:fb:b3:6b: 40:5d:e8:6e:8d:ce:c8:37:6c:69:73:cb:be:e9:74:b2:1c:97: 60:3e:51:d4:31:70:db:bc:df:f4:f5:49:e1:56:d5:cc:ab:6c: 2c:65:e4:9d:d8:4e:71:95:f4:d6:9d:9c:90:e4:25:90:c9:7e: d4:f8:2d:19:80:08:20:d5:f3:8b:8d:e9:17:96:c1:c2:92:fe: 2c:6f:96:17:7d:ce:f4:43:7e:6b:21:1f:d2:f5:94:b0:62:e6: d5:33:0e:ac:78:e5:7b:89:47:bb:4f:11:cc:8e:d3:b4:08:9f: eb:b1:93:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEny5T6rLD9oM+rw1UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MDUyMzEzMDEwM1oXDTI1MDgyMTEzMDEwM1owLzEtMCsGA1UEAxMk NDcxMGJhMTItODk2ZC00NWY2LWFlMDItN2Q3NDQ3ZWY3MjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv29aTHP2lEAU8FiapKoh/ZjnIyXSOQgI6O6 DaSuiy0BjLXKQ1YCNUmdsG4JFatz2edn+fkIKtfc1s3olxGfgQ4ZeOECT7nc4Zz/ undScn0gAPcJLXKxYfsQ87c4RGfOeoZm0KZ1cZ2B+qWLc30avfln2HRSvs3P4fG7 Ele6Frl6vZrnkai+UVFVHX7xiWewJ8CdclXZecnn5vzDbAhm0COfY4/6Fb7N/Rf9 5gJxQgAw9wSL37ApGMtNml12DfPAxG0R31+2SeP6qfJL2/d2u9FBtG6McgL1s2a1 syMri+UT5qzdytp8qUBdJxSop1AwnKqwcOsP6s4ReqIKLwh1rwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKVc+pZxRcbm0puPo3TXMGrAJ0C3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmRlMDU4NTMtM2RmMi0z MDVlLWJiM2YtMTFlYTY5OTRlOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIdYrxIW85GY6mswoUlUxupq9AqiX03NH5ZiLEaysrSRhLEmtB3k OM/1VK6mtWy9uYazhb+2zLWggzOWZAuhSNlZpbtGvLla9FALhNmIKqSo8Z693loR A7xGp93Qnv84mXqLWaqnRqeajcNBz1j8lJMW1uqTcF0Zs72KwgpRofJJ+qJXH99g 3Uwtc2K5Zfuza0Bd6G6Nzsg3bGlzy77pdLIcl2A+UdQxcNu83/T1SeFW1cyrbCxl 5J3YTnGV9NadnJDkJZDJftT4LRmACCDV84uN6ReWwcKS/ixvlhd9zvRDfmshH9L1 lLBi5tUzDqx45XuJR7tPEcyO07QIn+uxk6A= -----END CERTIFICATE-----Generated at Mon Jun 16 22:12:27 2025 by rpki-client