$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa File: 3e06039e-f189-3fc0-bbd8-9a9650543373.roa (raw, json) Hash identifier: Qgduu+kox5eeySH6gKPIPJnFfhcapU4I80UpvEZQbQ8= Subject key identifier: C8:F1:FC:CD:8B:34:15:0A:FC:C3:5E:4B:03:CB:86:6B:59:A1:AD:C2 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2A583531C8F28B011500 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3356 IP address blocks: 2607:f028:62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2a:58:35:31:c8:f2:8b:01:15:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=e7d15ad9-bde0-4612-852e-60172488b396 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:31:75:b9:3a:ea:b6:eb:4f:94:47:dc:f6: da:26:4c:b8:66:da:5c:9b:98:00:df:6a:d6:db:14: 24:0c:a2:f9:06:6a:ca:c0:84:3b:2c:b9:0e:e3:21: 78:a0:5d:13:1e:3d:0e:04:a5:d7:76:b2:db:9f:00: 49:f9:4f:ac:59:46:51:8d:95:bf:6f:10:1a:d2:fc: f7:6a:bd:48:86:e4:dc:39:8e:3c:e3:65:ea:ab:ec: b2:05:93:c9:4e:ef:ec:ce:05:7f:a0:3f:8a:e1:cb: 2d:6b:6b:43:00:c7:79:38:31:c7:90:81:59:0e:b3: ba:87:51:cf:20:6c:b1:08:97:d3:31:64:93:80:3a: b4:51:02:94:47:0d:84:6a:92:2a:61:a1:5d:f2:62: b5:80:fe:54:a7:dd:5e:c8:40:4e:72:5c:98:ff:bc: a2:24:2b:21:8a:74:c9:b5:94:f6:c2:7c:27:e4:3b: aa:5b:9e:d4:b0:d3:5f:5f:6a:53:34:ee:49:ec:a1: f0:20:21:a8:eb:27:0f:fc:4c:7c:58:4e:b0:7a:31: 80:8e:65:6c:fb:4e:6f:af:80:d6:ce:14:97:ca:ac: b8:3c:db:41:33:1f:21:50:fc:2f:58:53:b6:6a:9c: 08:3b:27:60:e8:6b:a8:a8:20:1d:df:e9:3a:8b:e7: 7c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F1:FC:CD:8B:34:15:0A:FC:C3:5E:4B:03:CB:86:6B:59:A1:AD:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/3e06039e-f189-3fc0-bbd8-9a9650543373.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c8:6f:78:c0:1b:3a:b8:23:6d:d9:ec:2b:00:82:9f:e6:5f: e1:6e:6a:55:e6:b2:69:19:16:4c:cd:00:8e:a2:48:aa:1c:91: b4:ed:42:0d:21:57:bd:4d:69:7d:cd:ee:a4:00:1f:a2:32:93: 04:0d:87:2c:8d:80:84:08:bb:24:ad:6f:e1:49:e6:c2:df:f9: c9:f6:8e:71:96:f0:19:d4:6a:e2:fc:ae:22:b0:93:82:c0:dd: 97:32:ab:ad:e4:07:2f:58:41:49:a9:65:2d:66:79:c6:de:10: e3:51:27:82:e7:ba:f7:8d:ea:f2:7c:79:5e:b6:9e:7e:1c:06: 92:20:d0:66:1d:01:2d:5d:b6:ad:45:df:d5:e5:ee:18:f4:28: c0:5f:5e:7a:ce:e6:f8:c4:b5:dd:ae:08:29:50:a0:9f:fa:9a: cb:9f:64:b5:85:1d:b6:cd:34:65:7f:e1:13:93:52:0a:dc:89: 21:9b:5e:41:d2:7e:3c:4a:b5:2e:2d:03:05:d2:59:cf:6f:65: 7c:90:8f:ae:26:7b:61:31:82:41:cd:8f:44:8e:d2:85:e5:ab: 2c:2d:20:e0:9d:e2:e2:54:a3:a8:80:37:40:cd:94:4b:da:c0: 28:92:5f:e0:a1:6b:9a:96:e8:2f:7f:f8:49:2a:47:5b:95:aa: 60:b5:81:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSpYNTHI8osBFQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZTdkMTVhZDktYmRlMC00NjEyLTg1MmUtNjAxNzI0ODhiMzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1t8xdbk66rbrT5RH3PbaJky4Ztpcm5gA32rW 2xQkDKL5BmrKwIQ7LLkO4yF4oF0THj0OBKXXdrLbnwBJ+U+sWUZRjZW/bxAa0vz3 ar1IhuTcOY4842Xqq+yyBZPJTu/szgV/oD+K4csta2tDAMd5ODHHkIFZDrO6h1HP IGyxCJfTMWSTgDq0UQKURw2EapIqYaFd8mK1gP5Up91eyEBOclyY/7yiJCshinTJ tZT2wnwn5DuqW57UsNNfX2pTNO5J7KHwICGo6ycP/Ex8WE6wejGAjmVs+05vr4DW zhSXyqy4PNtBMx8hUPwvWFO2apwIOydg6GuoqCAd3+k6i+d8EQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMjx/M2LNBUK/MNeSwPLhmtZoa3CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvM2UwNjAzOWUtZjE4OS0z ZmMwLWJiZDgtOWE5NjUwNTQzMzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLIb3jAGzq4I23Z7CsAgp/mX+FualXmsmkZFkzNAI6iSKockbTt Qg0hV71NaX3N7qQAH6IykwQNhyyNgIQIuyStb+FJ5sLf+cn2jnGW8BnUauL8riKw k4LA3Zcyq63kBy9YQUmpZS1mecbeEONRJ4LnuveN6vJ8eV62nn4cBpIg0GYdAS1d tq1F39Xl7hj0KMBfXnrO5vjEtd2uCClQoJ/6msufZLWFHbbNNGV/4ROTUgrciSGb XkHSfjxKtS4tAwXSWc9vZXyQj64me2ExgkHNj0SO0oXlqywtIOCd4uJUo6iAN0DN lEvawCiSX+Cha5qW6C9/+EkqR1uVqmC1gRE= -----END CERTIFICATE-----Generated at Tue Nov 4 03:23:38 2025 by rpki-client