$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa File: 5223fc2b-d3d9-3086-a976-236c9c8625b6.roa (raw, json) Hash identifier: 2TYQR0wS6+DrM+c9dK9z3liZytstcotCWqJg+u3DVJM= Subject key identifier: 53:4A:07:97:A9:B0:E1:E6:8B:E6:F2:73:5D:76:E3:90:B2:98:92:E0 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6DA25383D5EB4BC5F07D580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa Signing time: Wed 12 Nov 2025 21:30:13 +0000 ROA not before: Wed 12 Nov 2025 21:30:13 +0000 ROA not after: Tue 10 Feb 2026 21:30:13 +0000 asID: 3356 IP address blocks: 2607:f028:b11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 18 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:da:25:38:3d:5e:b4:bc:5f:07:d5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:30:13 2025 GMT Not After : Feb 10 21:30:13 2026 GMT Subject: CN=ef4a7aa9-3c58-4cd9-b073-114f63975f09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a7:35:01:06:96:64:d2:54:af:21:9e:03:60: 52:ca:bd:87:ba:97:2e:45:70:a4:56:6d:c6:e4:51: 12:f9:ad:cc:1a:36:ec:45:ea:d0:66:3e:ac:81:e6: fd:84:2b:e8:89:09:2f:5e:2d:3c:9b:f1:77:95:f5: ce:ca:f2:38:b5:a7:cf:45:25:d5:c7:5d:68:c0:21: 82:19:e9:c8:39:b2:7c:d4:c7:9e:9c:37:67:3e:7a: 36:9f:60:97:34:3f:f0:e6:de:d7:23:53:b7:c5:d9: 6c:8d:5b:d1:09:6d:04:a1:14:9c:d0:ec:69:b3:23: c8:8a:c0:b5:6f:23:32:8a:7f:c2:db:45:98:ae:6d: 6c:a1:e8:26:17:6d:c7:9d:fb:3a:19:c4:e5:9e:07: 67:70:aa:61:1d:83:24:41:dd:16:88:54:be:46:d8: cf:93:b7:9b:4e:e2:16:4c:28:e2:9e:29:88:67:b7: de:40:19:d5:d2:92:35:91:53:19:56:01:2e:3e:f5: 52:f5:8b:ba:3e:4d:43:a7:68:34:1b:1a:4e:df:92: 33:00:3e:47:21:27:71:59:c0:15:2b:fb:3d:bb:dc: b0:76:7e:8e:c2:87:9a:1c:bd:09:36:d5:ef:c5:cf: 13:a8:fe:55:3d:ad:82:4e:65:ef:e6:da:f1:3b:e4: c1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:07:97:A9:B0:E1:E6:8B:E6:F2:73:5D:76:E3:90:B2:98:92:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5223fc2b-d3d9-3086-a976-236c9c8625b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:da:7f:f5:01:23:df:46:83:80:f4:5a:85:68:74:2f:89:2c: 6d:42:97:d0:96:e9:7b:a3:fd:ea:14:9a:85:8a:73:c5:36:e0: 4f:fc:47:22:f5:e7:ea:51:84:64:1f:58:d9:2e:72:71:de:ca: 95:64:dd:21:16:b7:16:63:cf:23:1e:2d:9c:77:6d:70:c6:c6: 5d:52:ec:cb:49:2f:d3:ea:94:12:1e:ce:65:76:90:ba:68:70: 0f:b2:71:b1:8c:7e:41:68:06:a5:a0:bd:bb:2d:d6:03:58:4e: db:5d:a6:15:4b:84:c5:ee:de:6d:5f:e7:b1:c9:6c:8d:65:70: bd:de:28:d7:31:20:95:1e:26:97:ee:55:65:23:a0:ef:3d:b6: 59:43:54:dd:8f:5a:fc:e9:6c:c9:64:38:30:42:34:b9:e2:a7: 81:fd:58:33:7b:bc:47:02:32:40:d4:1b:57:2e:48:ed:00:7c: b6:07:8f:44:33:d8:37:2c:11:46:db:bf:71:90:cc:47:d8:61: 69:51:94:38:5e:1b:e8:de:de:4e:71:1e:c6:d5:4d:b0:0b:b4: fc:06:14:f6:ac:dd:02:b3:44:bc:5c:42:91:9a:fb:4a:2f:e3: f0:61:4e:1d:ce:b7:b8:82:39:50:ca:82:18:53:82:4d:71:cc: 40:8e:b6:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW2iU4PV60vF8H1YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxMzAxM1oXDTI2MDIxMDIxMzAxM1owLzEtMCsGA1UEAxMk ZWY0YTdhYTktM2M1OC00Y2Q5LWIwNzMtMTE0ZjYzOTc1ZjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6c1AQaWZNJUryGeA2BSyr2HupcuRXCkVm3G 5FES+a3MGjbsRerQZj6sgeb9hCvoiQkvXi08m/F3lfXOyvI4tafPRSXVx11owCGC GenIObJ81MeenDdnPno2n2CXND/w5t7XI1O3xdlsjVvRCW0EoRSc0OxpsyPIisC1 byMyin/C20WYrm1soegmF23Hnfs6GcTlngdncKphHYMkQd0WiFS+RtjPk7ebTuIW TCjinimIZ7feQBnV0pI1kVMZVgEuPvVS9Yu6Pk1Dp2g0GxpO35IzAD5HISdxWcAV K/s9u9ywdn6OwoeaHL0JNtXvxc8TqP5VPa2CTmXv5trxO+TBOwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFNKB5epsOHmi+byc11245CymJLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTIyM2ZjMmItZDNkOS0z MDg2LWE5NzYtMjM2YzljODYyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEnaf/UBI99Gg4D0WoVodC+JLG1Cl9CW6Xuj/eoUmoWKc8U24E/8 RyL15+pRhGQfWNkucnHeypVk3SEWtxZjzyMeLZx3bXDGxl1S7MtJL9PqlBIezmV2 kLpocA+ycbGMfkFoBqWgvbst1gNYTttdphVLhMXu3m1f57HJbI1lcL3eKNcxIJUe JpfuVWUjoO89tllDVN2PWvzpbMlkODBCNLnip4H9WDN7vEcCMkDUG1cuSO0AfLYH j0Qz2DcsEUbbv3GQzEfYYWlRlDheG+je3k5xHsbVTbALtPwGFPas3QKzRLxcQpGa +0ov4/BhTh3Ot7iCOVDKghhTgk1xzECOtoI= -----END CERTIFICATE-----Generated at Mon Nov 17 01:16:45 2025 by rpki-client