$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa File: 539e0d8a-caac-3da5-a704-e6922158c3c1.roa (raw, json) Hash identifier: y60Chk37TJTaovxd9arq/KsPF6GWIrVR5/7PrFrjCo8= Subject key identifier: 31:A9:B8:23:0C:3C:74:46:5D:92:40:75:19:D5:4C:C5:0F:DE:34:A1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6DF2A03964AC17D2DBC3B40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa Signing time: Wed 12 Nov 2025 21:40:20 +0000 ROA not before: Wed 12 Nov 2025 21:40:20 +0000 ROA not after: Tue 10 Feb 2026 21:40:20 +0000 asID: 203 IP address blocks: 2607:f028:b12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:df:2a:03:96:4a:c1:7d:2d:bc:3b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:40:20 2025 GMT Not After : Feb 10 21:40:20 2026 GMT Subject: CN=95947e41-fa51-4426-804b-fdcad522fcb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:bd:7b:c3:99:52:7d:c1:68:cd:a9:06:80: 87:18:7b:5c:89:7e:7b:7e:d9:97:7f:83:9b:2f:e6: c8:fb:e5:80:e5:24:c7:c8:e0:42:3f:d6:c0:ce:6b: c6:3b:f5:36:35:3c:1a:e3:cb:0f:ba:c3:f8:0e:6f: bd:e4:2d:dc:bc:e4:a5:04:b3:8f:4e:8d:51:0a:5e: fa:4e:76:f2:9a:a8:c8:f2:99:48:92:19:b4:de:c2: d8:96:40:ed:41:1c:a3:4f:fe:fb:2e:4c:03:36:60: 49:e7:af:07:9a:1c:30:d9:7b:89:32:f8:02:40:5f: d1:fe:02:08:b5:e7:98:5f:26:86:31:72:2d:43:3c: 78:45:f7:5f:b0:28:07:36:8d:13:6b:c3:07:27:1a: 0a:1f:75:66:93:9b:a1:e7:81:26:4f:19:1e:79:d1: 3f:18:40:ac:6c:b0:dd:66:89:ed:98:35:a1:f1:97: e9:03:19:a2:03:e7:c6:50:03:db:9c:69:de:ad:c7: a9:ef:10:6f:3f:4c:12:1e:83:82:3c:9e:d8:a1:8f: f4:3f:70:0d:66:40:92:03:35:ef:2d:02:72:61:f0: bf:3f:af:31:9f:58:29:93:bc:db:f5:16:69:67:3c: 34:92:f1:64:06:c4:9a:6f:fc:79:68:16:1d:86:cd: 40:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:B8:23:0C:3C:74:46:5D:92:40:75:19:D5:4C:C5:0F:DE:34:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:83:c7:c4:9e:6d:8e:99:4e:70:fd:d0:3b:64:33:84:94:57: 45:a8:8c:99:ce:cb:38:ec:4a:6d:dd:4d:69:72:50:f4:88:91: e5:ad:e6:7f:a1:85:d3:d2:89:0d:42:d4:8b:8e:2e:f6:79:96: ec:36:53:fe:c1:73:03:a9:12:f4:83:4f:80:35:3e:89:4f:eb: 24:7a:83:b0:a9:1f:78:12:d1:06:4d:50:fa:3c:4d:2f:93:42: 4a:d1:bd:18:83:ec:e2:38:f3:3c:f4:73:72:ce:df:04:b1:71: 1c:d4:1e:f1:ac:c3:01:05:f7:7a:c1:71:3c:39:d7:87:07:8d: 11:fb:73:c0:d1:2c:33:d2:01:8a:f4:73:c8:20:e4:ac:92:9c: 93:29:20:ed:0b:a3:4c:3b:2a:ee:cc:b2:c4:10:10:04:96:f2: ef:dd:23:79:f9:8d:13:ca:b5:a5:88:28:ae:da:a5:80:c1:f3: ff:9d:d4:f0:9a:5f:e0:80:82:a6:b0:dd:6c:6e:95:7f:5f:15: 9d:5b:59:a1:b1:3f:64:4d:5a:b7:c0:34:b0:a8:2d:98:5b:3a: 62:b0:93:34:5d:5b:87:70:3b:d7:90:e2:93:6f:91:70:51:34: cf:11:c5:f8:64:b0:95:70:9e:a5:7f:44:b2:24:19:db:58:34: c4:82:15:45 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW3yoDlkrBfS28O0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxNDAyMFoXDTI2MDIxMDIxNDAyMFowLzEtMCsGA1UEAxMk OTU5NDdlNDEtZmE1MS00NDI2LTgwNGItZmRjYWQ1MjJmY2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxS9e8OZUn3BaM2pBoCHGHtciX57ftmXf4Ob L+bI++WA5STHyOBCP9bAzmvGO/U2NTwa48sPusP4Dm+95C3cvOSlBLOPTo1RCl76 TnbymqjI8plIkhm03sLYlkDtQRyjT/77LkwDNmBJ568Hmhww2XuJMvgCQF/R/gII teeYXyaGMXItQzx4RfdfsCgHNo0Ta8MHJxoKH3Vmk5uh54EmTxkeedE/GECsbLDd ZontmDWh8ZfpAxmiA+fGUAPbnGnercep7xBvP0wSHoOCPJ7YoY/0P3ANZkCSAzXv LQJyYfC/P68xn1gpk7zb9RZpZzw0kvFkBsSab/x5aBYdhs1AYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDGpuCMMPHRGXZJAdRnVTMUP3jShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTM5ZTBkOGEtY2FhYy0z ZGE1LWE3MDQtZTY5MjIxNThjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAJeDx8SebY6ZTnD90DtkM4SUV0WojJnOyzjsSm3dTWlyUPSIkeWt 5n+hhdPSiQ1C1IuOLvZ5luw2U/7BcwOpEvSDT4A1PolP6yR6g7CpH3gS0QZNUPo8 TS+TQkrRvRiD7OI48zz0c3LO3wSxcRzUHvGswwEF93rBcTw514cHjRH7c8DRLDPS AYr0c8gg5KySnJMpIO0Lo0w7Ku7MssQQEASW8u/dI3n5jRPKtaWIKK7apYDB8/+d 1PCaX+CAgqaw3WxulX9fFZ1bWaGxP2RNWrfANLCoLZhbOmKwkzRdW4dwO9eQ4pNv kXBRNM8RxfhksJVwnqV/RLIkGdtYNMSCFUU= -----END CERTIFICATE-----Generated at Mon Nov 17 18:09:23 2025 by rpki-client