$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa File: 539e0d8a-caac-3da5-a704-e6922158c3c1.roa (raw, json) Hash identifier: v47XZRLqMPdeng0AtXflwW/YRXsnQLCm5C6wLWLm56g= Subject key identifier: 74:03:28:29:B8:6A:D0:B5:1D:C2:20:A0:B7:62:65:CB:D1:A7:C4:B1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D97555954811FB69223CD5F00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa Signing time: Wed 22 Apr 2026 13:00:32 +0000 ROA not before: Wed 22 Apr 2026 13:00:32 +0000 ROA not after: Tue 21 Jul 2026 13:00:32 +0000 asID: 203 IP address blocks: 2607:f028:b12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:97:55:59:54:81:1f:b6:92:23:cd:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 22 13:00:32 2026 GMT Not After : Jul 21 13:00:32 2026 GMT Subject: CN=7b1b1337-144b-4893-a1bf-085c9b98bd2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f1:9d:ef:90:ab:f2:dd:22:05:39:09:cc:f1: ea:13:07:76:54:da:2e:1a:b1:1e:7b:da:3e:5b:a6: 2e:69:d5:b2:d3:84:bd:19:24:09:2f:ff:20:f4:41: 6b:d6:1c:29:f6:f0:d8:e5:3b:bb:96:aa:50:86:4d: 16:e7:c7:e0:d9:cc:35:17:06:5f:77:bc:1f:c3:ac: 68:e6:6f:9b:36:aa:8b:92:2b:62:3d:a6:97:b2:6a: 9c:4f:1e:94:99:b1:ed:2c:b9:bf:f9:93:0d:88:f7: 30:93:30:00:a6:0c:4a:c1:e2:ee:ad:b2:fb:38:25: ce:34:93:f4:18:61:80:b8:23:d6:91:22:c9:d6:ce: c4:ae:17:c6:fe:fb:5d:dc:97:ae:d3:b0:bd:36:02: 26:16:34:c4:0b:a9:05:8d:33:3e:a5:3d:e5:ed:9d: 58:f5:22:da:b0:9e:19:07:dd:ea:0d:23:7a:9f:3b: 8d:32:ba:74:16:cc:c2:83:a2:14:a3:6a:63:ff:1f: 31:a2:c0:95:af:e8:86:c2:c9:b7:3c:56:46:5d:29: 3a:5a:1c:39:45:23:7a:7b:f5:59:fb:78:f4:80:00: ee:f7:05:ff:16:aa:70:cf:20:a6:4e:bf:8e:34:0c: 35:dc:90:44:e6:ee:17:e8:be:9e:7d:a3:84:86:68: 6e:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:03:28:29:B8:6A:D0:B5:1D:C2:20:A0:B7:62:65:CB:D1:A7:C4:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:15:8a:f7:f6:67:14:53:5c:b8:75:23:e6:cc:7e:d7:cb:fd: c1:89:c8:58:e4:2e:33:aa:df:aa:09:92:ea:b4:6d:c7:f7:46: 65:34:92:9f:39:38:93:ee:a2:4b:cb:2b:5e:af:36:2d:88:c2: 6a:61:24:76:81:d6:df:56:43:18:a3:ff:62:59:85:1b:32:a1: 72:a0:fe:d1:43:25:e2:54:56:a6:06:53:4a:6c:5b:ea:27:ce: 7b:1b:8a:7d:cd:2d:fe:00:10:11:4c:31:be:7f:ae:6f:83:97: 56:69:b5:d6:0f:80:83:5a:88:19:70:a4:7d:1e:6a:ae:d0:39: 63:78:5d:9b:8d:27:8c:81:02:08:e9:78:22:ff:2e:de:e2:0f: e6:72:29:f2:ec:74:0b:5c:03:a6:77:9b:75:cd:ea:ad:3d:dc: ba:aa:48:c1:3b:ee:2e:a2:aa:54:10:fd:01:d2:39:f2:16:74: 06:6c:66:b7:24:7c:82:73:f4:52:6f:f5:6b:d1:c9:c3:fa:8f: 77:9e:43:7d:61:a4:b7:4f:3f:0a:64:83:53:24:e9:ad:69:17: 03:4f:01:e8:19:28:42:6a:94:78:10:d6:43:8b:2a:da:df:95: 77:a2:15:c2:e5:db:ae:52:d0:cd:c5:38:12:d1:c7:bb:17:8e: bd:77:ee:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2XVVlUgR+2kiPNXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyMjEzMDAzMloXDTI2MDcyMTEzMDAzMlowLzEtMCsGA1UEAxMk N2IxYjEzMzctMTQ0Yi00ODkzLWExYmYtMDg1YzliOThiZDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvGd75Cr8t0iBTkJzPHqEwd2VNouGrEee9o+ W6YuadWy04S9GSQJL/8g9EFr1hwp9vDY5Tu7lqpQhk0W58fg2cw1FwZfd7wfw6xo 5m+bNqqLkitiPaaXsmqcTx6UmbHtLLm/+ZMNiPcwkzAApgxKweLurbL7OCXONJP0 GGGAuCPWkSLJ1s7ErhfG/vtd3Jeu07C9NgImFjTEC6kFjTM+pT3l7Z1Y9SLasJ4Z B93qDSN6nzuNMrp0FszCg6IUo2pj/x8xosCVr+iGwsm3PFZGXSk6Whw5RSN6e/VZ +3j0gADu9wX/FqpwzyCmTr+ONAw13JBE5u4X6L6efaOEhmhuawIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFHQDKCm4atC1HcIgoLdiZcvRp8SxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTM5ZTBkOGEtY2FhYy0z ZGE1LWE3MDQtZTY5MjIxNThjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIkVivf2ZxRTXLh1I+bMftfL/cGJyFjkLjOq36oJkuq0bcf3RmU0 kp85OJPuokvLK16vNi2IwmphJHaB1t9WQxij/2JZhRsyoXKg/tFDJeJUVqYGU0ps W+onznsbin3NLf4AEBFMMb5/rm+Dl1ZptdYPgINaiBlwpH0eaq7QOWN4XZuNJ4yB AgjpeCL/Lt7iD+ZyKfLsdAtcA6Z3m3XN6q093LqqSME77i6iqlQQ/QHSOfIWdAZs ZrckfIJz9FJv9WvRycP6j3eeQ31hpLdPPwpkg1Mk6a1pFwNPAegZKEJqlHgQ1kOL KtrflXeiFcLl265S0M3FOBLRx7sXjr137r8= -----END CERTIFICATE-----Generated at Fri Apr 24 14:23:17 2026 by rpki-client