$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/108905ed-b584-3be3-ad86-7a33575e5f7a.roa File: 108905ed-b584-3be3-ad86-7a33575e5f7a.roa (raw, json) Hash identifier: JdnvMKr4R91Ox60wAMJZjRtP8pIWjxxof28aqMqQGR8= Subject key identifier: 37:67:88:C6:73:4F:68:CB:D2:AC:4A:9C:39:C4:B2:E2:97:68:DB:69 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6EA4120F191370CBC7370C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/108905ed-b584-3be3-ad86-7a33575e5f7a.roa Signing time: Wed 12 Nov 2025 22:02:41 +0000 ROA not before: Wed 12 Nov 2025 22:02:41 +0000 ROA not after: Tue 10 Feb 2026 22:02:41 +0000 asID: 202 IP address blocks: 2607:f028:b61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:ea:41:20:f1:91:37:0c:bc:73:70:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 22:02:41 2025 GMT Not After : Feb 10 22:02:41 2026 GMT Subject: CN=96e6a21f-a737-4cb9-80d1-d81f355d54fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:63:d3:e5:08:15:9f:0f:11:e2:90:49:e3:14: c0:21:f9:1a:71:70:20:65:d6:00:1d:cf:76:ea:31: 7d:76:f4:e3:c2:25:e0:a8:7d:c0:c8:c7:f8:4b:7f: ca:86:1b:fd:ea:5b:02:77:2f:5f:8c:d5:c1:b4:c8: 55:cf:5d:00:2b:8b:ce:61:33:f9:f2:96:92:ee:6f: 48:c3:22:cc:e9:dd:ec:57:8f:f4:ab:a5:c8:e2:3f: 2c:ec:ec:20:ba:87:71:0c:4e:26:b9:cd:1a:c8:d2: a3:57:b6:8f:cf:8e:e5:f4:ce:3a:83:9c:7b:15:b8: 50:41:8e:ae:2c:a7:b7:1f:3e:59:4c:9b:36:df:67: 9a:dc:5e:2f:9b:3e:c7:ad:d3:af:ea:26:80:42:8a: 12:7a:fd:ef:22:76:a5:be:35:c1:55:bd:bb:d7:35: 11:1d:85:46:f1:09:a0:ed:81:50:c1:0d:18:30:e3: b7:56:77:4e:ef:0d:29:bc:23:41:66:1e:ae:c3:f4: f6:03:33:3c:2e:2f:eb:bb:85:cd:a6:42:59:3c:5f: df:54:15:bf:e2:1b:fb:b5:65:86:63:72:21:78:9c: 48:fd:9b:a5:76:d6:73:47:2d:5f:6b:38:52:aa:c7: 77:5a:12:e5:82:26:f4:cf:26:0e:df:af:0b:01:c5: 9d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:67:88:C6:73:4F:68:CB:D2:AC:4A:9C:39:C4:B2:E2:97:68:DB:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/108905ed-b584-3be3-ad86-7a33575e5f7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:7a:5f:f7:e2:44:43:37:b5:53:a1:6f:0b:8a:2b:9e:eb:0e: 1d:11:ab:16:1d:d1:c8:27:57:26:c9:a0:ee:7b:30:6a:64:b8: f3:54:51:97:a3:0f:2b:38:8e:83:0b:75:7f:d2:64:cf:57:fa: 95:41:25:8f:bf:9e:0e:a5:fc:34:73:5e:23:01:c4:fb:29:84: 65:84:20:f9:bf:8b:af:69:71:66:67:48:c9:77:27:2e:e4:63: 97:a7:ad:28:06:0a:67:7a:76:4e:c0:14:2e:fd:37:66:8e:7b: 2b:6e:ab:1c:72:da:a4:51:96:de:2d:12:1d:b3:f2:8d:2e:af: 4b:de:9a:73:6c:4d:9c:65:e7:a9:f5:12:98:9d:7c:2a:35:5a: ff:2f:ff:43:df:cc:15:be:4e:ac:5f:63:85:00:0c:23:71:e9: 0d:06:75:e6:7c:e3:c8:12:ab:49:5e:23:80:75:0c:2e:9a:59: 6a:75:5b:59:6a:92:6b:0d:4a:98:62:f1:8d:50:27:7f:24:18: dc:ab:e3:f8:75:c6:27:74:39:74:b3:69:af:ab:2c:b9:dc:0e: d5:9c:88:a6:1f:f0:93:a5:41:ca:07:e0:c8:e6:1b:9a:91:6a: 0a:29:61:8b:45:c3:73:01:bb:0d:9b:c2:87:67:70:ba:b4:ae: b2:0d:88:aa -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW6kEg8ZE3DLxzcMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIyMDI0MVoXDTI2MDIxMDIyMDI0MVowLzEtMCsGA1UEAxMk OTZlNmEyMWYtYTczNy00Y2I5LTgwZDEtZDgxZjM1NWQ1NGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WPT5QgVnw8R4pBJ4xTAIfkacXAgZdYAHc92 6jF9dvTjwiXgqH3AyMf4S3/Khhv96lsCdy9fjNXBtMhVz10AK4vOYTP58paS7m9I wyLM6d3sV4/0q6XI4j8s7OwguodxDE4muc0ayNKjV7aPz47l9M46g5x7FbhQQY6u LKe3Hz5ZTJs232ea3F4vmz7HrdOv6iaAQooSev3vInalvjXBVb271zURHYVG8Qmg 7YFQwQ0YMOO3VndO7w0pvCNBZh6uw/T2AzM8Li/ru4XNpkJZPF/fVBW/4hv7tWWG Y3IheJxI/ZuldtZzRy1fazhSqsd3WhLlgib0zyYO368LAcWdvQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDdniMZzT2jL0qxKnDnEsuKXaNtpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTA4OTA1ZWQtYjU4NC0z YmUzLWFkODYtN2EzMzU3NWU1ZjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAth MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABR6X/fiREM3tVOhbwuKK57rDh0RqxYd0cgnVybJoO57MGpkuPNU UZejDys4joMLdX/SZM9X+pVBJY+/ng6l/DRzXiMBxPsphGWEIPm/i69pcWZnSMl3 Jy7kY5enrSgGCmd6dk7AFC79N2aOeytuqxxy2qRRlt4tEh2z8o0ur0vemnNsTZxl 56n1EpidfCo1Wv8v/0PfzBW+TqxfY4UADCNx6Q0GdeZ848gSq0leI4B1DC6aWWp1 W1lqkmsNSphi8Y1QJ38kGNyr4/h1xid0OXSzaa+rLLncDtWciKYf8JOlQcoH4Mjm G5qRagopYYtFw3MBuw2bwodncLq0rrINiKo= -----END CERTIFICATE-----Generated at Mon Nov 17 18:10:52 2025 by rpki-client