$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/126a6777-2de1-3d21-94bc-862c66f4b5c6.roa File: 126a6777-2de1-3d21-94bc-862c66f4b5c6.roa (raw, json) Hash identifier: lMJCP/zeuMGUvZeRE0kLEtXofPmNCsyKXj5m6KosdBE= Subject key identifier: 9A:37:EB:0B:7B:7C:68:FC:54:D8:7E:50:89:96:2B:15:9E:4D:4B:59 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F2957BB335917DE84645B0900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/126a6777-2de1-3d21-94bc-862c66f4b5c6.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 3356 IP address blocks: 2607:f028:b40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bb:33:59:17:de:84:64:5b:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a1fc2ffb-e4df-456d-8c4e-ce296ac8be15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:61:ff:46:e2:ef:15:5e:fe:7f:44:18:88:e1: 73:9f:30:cc:37:d0:c4:9f:8a:cb:02:06:32:ce:36: 69:a5:8e:39:61:ed:90:b4:28:31:09:27:16:01:2c: 01:34:96:37:ec:c7:43:73:be:79:52:11:60:6a:4e: 80:d3:46:68:5f:53:92:b2:e6:3f:d1:a0:4f:34:00: e5:9e:a2:55:56:fe:25:40:f9:70:c4:a6:bc:22:f8: db:63:ba:1c:2c:82:37:ad:94:d8:02:87:dc:a4:cd: b4:c4:e1:a1:26:e6:f3:31:49:7f:41:8e:89:31:35: 21:6f:90:d4:18:07:45:f4:9d:9f:ae:53:09:e6:0c: 9b:2b:64:97:f6:d8:c2:6a:09:1a:48:97:01:b0:48: b1:66:db:fd:77:c2:89:12:2b:49:86:af:b5:70:49: aa:2d:8b:4c:9e:d0:8b:30:3c:4a:b1:1c:c6:8f:76: da:e1:3e:76:a6:1c:48:be:2a:ef:08:3c:17:0f:29: 6b:2a:84:68:1c:07:7e:d2:7a:72:94:bf:2b:22:19: c8:6e:eb:9c:a1:15:0b:c9:09:24:b3:ec:39:8f:8f: 3a:1d:76:2c:a4:8f:48:48:30:56:bc:b4:d7:38:33: 42:b9:7e:e4:5d:f0:f8:0f:04:06:1d:61:be:75:85: b4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:37:EB:0B:7B:7C:68:FC:54:D8:7E:50:89:96:2B:15:9E:4D:4B:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/126a6777-2de1-3d21-94bc-862c66f4b5c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:28:cf:b2:61:91:d4:d5:82:f6:55:de:1a:af:7c:29:bc:c8: f8:e6:0e:1e:ef:ad:a4:a1:eb:2e:34:0b:c0:1f:cc:b2:85:5e: b0:b2:6a:1c:2f:f2:d4:ad:e7:b5:0b:08:48:92:64:0d:80:7c: e4:fb:24:f2:95:90:2b:cb:be:ea:c5:7f:2c:c6:1a:fb:13:7a: e3:c3:ef:f4:e6:fa:d5:3f:60:bf:c7:74:f5:ca:78:e2:03:57: 6d:7e:d8:77:ad:1b:44:2f:aa:4a:12:b3:0a:54:a0:30:07:ea: be:9b:19:2b:b2:9c:b0:39:96:dd:fa:5f:10:7d:e6:5f:06:15: d1:48:de:76:49:70:56:ed:84:51:86:c5:c5:f1:78:d4:17:93: 95:3d:05:61:4a:f0:6a:75:e6:62:5c:51:82:79:9f:0d:ea:22: 60:73:3b:5c:c9:3d:eb:57:84:74:b4:8d:61:09:50:86:70:b7: 0d:0d:d5:af:4e:e6:35:84:10:85:2e:14:aa:c8:61:89:2b:9c: bc:9b:92:b1:29:a6:a9:1f:a9:5e:ab:9d:3c:57:3f:40:22:ab: 4c:a6:9b:29:4c:ac:c1:09:31:80:2f:19:23:a8:55:fe:8d:26: ca:2c:f3:f4:16:62:87:38:d5:a5:6c:0f:18:84:9f:f4:63:b8: b4:24:03:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8pV7szWRfehGRbCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTFmYzJmZmItZTRkZi00NTZkLThjNGUtY2UyOTZhYzhiZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGH/RuLvFV7+f0QYiOFznzDMN9DEn4rLAgYy zjZppY45Ye2QtCgxCScWASwBNJY37MdDc755UhFgak6A00ZoX1OSsuY/0aBPNADl nqJVVv4lQPlwxKa8IvjbY7ocLII3rZTYAofcpM20xOGhJubzMUl/QY6JMTUhb5DU GAdF9J2frlMJ5gybK2SX9tjCagkaSJcBsEixZtv9d8KJEitJhq+1cEmqLYtMntCL MDxKsRzGj3ba4T52phxIvirvCDwXDylrKoRoHAd+0npylL8rIhnIbuucoRULyQkk s+w5j486HXYspI9ISDBWvLTXODNCuX7kXfD4DwQGHWG+dYW0MwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJo36wt7fGj8VNh+UImWKxWeTUtZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTI2YTY3NzctMmRlMS0z ZDIxLTk0YmMtODYyYzY2ZjRiNWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKAtA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADwoz7JhkdTVgvZV3hqvfCm8yPjmDh7vraSh6y40C8AfzLKFXrCy ahwv8tSt57ULCEiSZA2AfOT7JPKVkCvLvurFfyzGGvsTeuPD7/Tm+tU/YL/HdPXK eOIDV21+2HetG0QvqkoSswpUoDAH6r6bGSuynLA5lt36XxB95l8GFdFI3nZJcFbt hFGGxcXxeNQXk5U9BWFK8Gp15mJcUYJ5nw3qImBzO1zJPetXhHS0jWEJUIZwtw0N 1a9O5jWEEIUuFKrIYYkrnLybkrEppqkfqV6rnTxXP0Aiq0ymmylMrMEJMYAvGSOo Vf6NJsos8/QWYoc41aVsDxiEn/RjuLQkAw0= -----END CERTIFICATE-----Generated at Tue Sep 22 16:52:40 2026 by rpki-client