$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa File: 2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa (raw, json) Hash identifier: tN6cUEWgqnzZXrx11/FKZmX361O4D81qNqJL75xwCxQ= Subject key identifier: AF:E6:4C:94:B8:B6:D3:D7:15:63:90:01:38:8A:1B:0B:B7:EB:F3:9F Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D274481E6729D32C12D00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 2607:f028:12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:27:44:81:e6:72:9d:32:c1:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=2ba501b6-bfc2-4b5f-9892-ce1835025b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:03:3c:c3:57:d9:22:b5:72:3a:ef:74:e4: 0e:5e:f2:cd:78:26:4b:77:2c:1b:2a:d1:1e:07:a9: 06:a7:29:4a:00:ae:9c:53:79:08:86:5f:1e:ba:78: 79:95:16:dd:1c:cf:b3:bd:29:a2:9a:46:20:a0:7c: e8:3b:1b:f1:09:9c:db:e5:9c:63:63:35:8c:17:20: 9c:87:0f:f5:16:ce:0c:6c:a6:fe:de:50:a2:c5:b6: 09:15:d8:53:16:3e:b2:cc:30:b0:b1:67:f8:2b:c9: 9c:8a:6c:d4:dc:a0:06:86:ee:ee:74:40:03:0d:73: 04:45:27:eb:92:a0:bd:6a:ff:e9:f9:c1:ea:4d:86: 67:88:cb:23:98:3b:b0:3a:03:be:04:ed:5c:fc:b0: b2:67:d1:b2:00:5f:ae:e3:4b:7b:f0:cf:28:64:09: 6c:d0:24:49:e6:8e:8e:64:bb:e5:d6:20:d4:63:a2: a1:87:c7:52:d9:47:c8:13:a4:ec:34:0b:e4:82:87: 8b:29:b1:8e:36:87:a3:ec:10:d5:f7:2b:8f:c3:fa: 5e:a3:ea:11:45:56:15:1c:58:de:42:2a:a4:d8:7c: 6e:40:cc:7a:03:ca:1d:79:6e:b5:bb:65:50:f2:7e: 0f:81:21:13:9f:ec:cd:1b:0d:14:58:fe:96:ac:59: 96:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E6:4C:94:B8:B6:D3:D7:15:63:90:01:38:8A:1B:0B:B7:EB:F3:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2dae0bc0-8f4a-37aa-a952-b72d295e26f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b2:18:59:96:a5:f3:b1:6d:f8:96:d8:94:72:81:da:92:5b: 94:92:85:10:56:90:e0:a9:b8:37:00:9a:56:34:aa:25:6c:77: 6f:25:63:53:35:a6:1c:09:31:af:98:a3:e4:44:e7:39:14:d2: b7:00:e2:22:e0:8d:a3:4f:d9:3e:c7:ff:4e:b1:e8:db:07:8a: 97:73:09:36:0d:3e:b2:56:77:21:e5:58:e9:b1:85:e6:9f:83: 9b:e0:9f:43:4c:9c:1b:d0:e5:bd:b0:44:49:4c:6f:a6:a2:7e: 0a:b4:5c:31:84:07:6c:88:d3:01:dc:7d:19:2e:42:a4:10:9f: 6f:df:6e:cc:13:a9:56:2f:2c:6c:7f:b9:d1:23:6b:58:73:b7: ac:d5:ab:ee:cd:18:64:57:a1:2e:a9:91:2d:39:b1:b9:1c:5c: 97:57:e8:ab:81:41:00:85:0d:f9:24:68:1d:f5:62:e4:55:27: 5a:af:49:f9:35:e7:25:57:ea:c6:03:f3:91:e4:a2:07:aa:63: 6b:69:ff:01:73:31:c7:96:10:e3:4a:53:ce:d4:1d:5b:3c:35: 79:ea:ba:55:2e:19:51:4f:f8:75:8a:bf:0a:71:be:54:7b:27: db:b9:d0:73:54:9f:d5:ce:78:7d:21:98:a4:c4:fe:58:04:d6: b1:5f:ba:49 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSdEgeZynTLBLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MmJhNTAxYjYtYmZjMi00YjVmLTk4OTItY2UxODM1MDI1Yjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvADPMNX2SK1cjrvdOQOXvLNeCZLdywbKtEe B6kGpylKAK6cU3kIhl8eunh5lRbdHM+zvSmimkYgoHzoOxvxCZzb5ZxjYzWMFyCc hw/1Fs4MbKb+3lCixbYJFdhTFj6yzDCwsWf4K8mcimzU3KAGhu7udEADDXMERSfr kqC9av/p+cHqTYZniMsjmDuwOgO+BO1c/LCyZ9GyAF+u40t78M8oZAls0CRJ5o6O ZLvl1iDUY6Khh8dS2UfIE6TsNAvkgoeLKbGONoej7BDV9yuPw/peo+oRRVYVHFje Qiqk2HxuQMx6A8odeW61u2VQ8n4PgSETn+zNGw0UWP6WrFmWswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFK/mTJS4ttPXFWOQATiKGwu36/OfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmRhZTBiYzAtOGY0YS0z N2FhLWE5NTItYjcyZDI5NWUyNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAmyGFmWpfOxbfiW2JRygdqSW5SShRBWkOCpuDcAmlY0qiVsd28l Y1M1phwJMa+Yo+RE5zkU0rcA4iLgjaNP2T7H/06x6NsHipdzCTYNPrJWdyHlWOmx heafg5vgn0NMnBvQ5b2wRElMb6aifgq0XDGEB2yI0wHcfRkuQqQQn2/fbswTqVYv LGx/udEja1hzt6zVq+7NGGRXoS6pkS05sbkcXJdX6KuBQQCFDfkkaB31YuRVJ1qv Sfk15yVX6sYD85HkogeqY2tp/wFzMceWEONKU87UHVs8NXnqulUuGVFP+HWKvwpx vlR7J9u50HNUn9XOeH0hmKTE/lgE1rFfukk= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:17 2025 by rpki-client