$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa File: 539e0d8a-caac-3da5-a704-e6922158c3c1.roa (raw, json) Hash identifier: gmKap3OxBGsIfQoDjviMXhzmwc0EH2LOpA+PnRhETdY= Subject key identifier: 00:2A:F6:29:5D:E3:A0:3E:5B:0D:EE:FF:8F:84:C0:40:8C:1A:60:AA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584E779A1E7F38E51A6BE895ED00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa Signing time: Sat 11 Jul 2026 21:00:11 +0000 ROA not before: Sat 11 Jul 2026 21:00:11 +0000 ROA not after: Fri 09 Oct 2026 21:00:11 +0000 asID: 203 IP address blocks: 2607:f028:b12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:77:9a:1e:7f:38:e5:1a:6b:e8:95:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jul 11 21:00:11 2026 GMT Not After : Oct 9 21:00:11 2026 GMT Subject: CN=3ea48b3a-49f4-4c2a-8a79-07ff6f08c830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:74:0f:8e:22:e5:1a:f5:10:ae:81:d6:dd:d6: cf:07:2d:f1:68:22:68:ff:35:bd:2f:ff:52:32:7b: 9c:97:78:c7:83:37:f6:7d:f2:ab:ba:e6:8d:0e:48: 51:10:cb:5a:64:ed:ec:bf:d1:d6:dd:09:5e:c8:d7: ea:47:0c:08:6c:93:ff:e7:ae:fd:3f:e4:76:14:c0: 56:1c:82:d9:81:75:b5:a2:bf:c8:62:23:9b:8d:4f: 9c:1d:42:eb:df:f9:98:30:8e:df:e6:fb:59:ed:d2: 5f:71:8c:94:5d:7a:81:49:46:dc:b1:4f:85:16:9e: 8e:8e:93:c1:b6:ea:8a:c7:c2:3d:71:89:e9:c2:0c: ad:03:e5:18:8f:9b:3b:2f:de:90:25:b7:a1:e6:63: 71:91:54:b4:0a:33:cb:29:41:67:3d:20:5d:59:6a: a2:c8:a1:4a:5a:10:e8:99:6e:a7:f6:3b:db:9b:3d: d8:5e:c7:1b:b4:60:66:27:c7:1e:7b:23:7c:8e:8c: 2f:06:23:58:97:96:86:36:b0:0c:1d:75:75:c8:16: ad:ba:75:b9:54:d4:83:05:d8:de:2c:c6:c9:05:4b: 9c:27:b3:03:df:f2:f1:22:c3:3f:f2:3d:43:b4:ce: 47:43:64:73:90:f8:71:2b:d4:6c:b2:78:b4:25:a9: 03:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:2A:F6:29:5D:E3:A0:3E:5B:0D:EE:FF:8F:84:C0:40:8C:1A:60:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:1d:78:8c:3d:ce:1b:e4:8c:b1:e2:fa:16:03:76:d3:54:ee: 28:fc:e3:53:30:3d:d8:6c:64:4d:89:24:d4:7f:94:48:4a:6c: fa:51:6a:21:54:c9:35:fd:50:d9:fe:22:1c:2c:e9:c4:17:e9: 5c:fd:3c:95:c0:a4:70:71:2e:ef:b7:ce:d7:03:aa:f5:4d:ec: 2f:92:16:a7:f4:65:25:59:d3:a2:51:4e:d2:1d:75:bd:c0:ed: 41:71:b2:9a:fb:67:97:a5:be:68:90:55:99:b4:92:b1:08:75: a7:af:56:61:83:8c:54:ff:07:34:d2:a4:2d:ce:e7:80:d5:81: 90:e9:b1:f7:68:10:ee:a8:e3:c0:70:42:a5:e6:0f:9a:d5:a0: c9:b4:54:6a:49:88:53:cb:0c:af:b8:af:40:14:ef:4d:75:b9: 1c:70:55:25:18:09:76:5b:8d:a4:da:a6:98:87:9f:fc:ec:bd: 04:49:41:ce:b5:df:3c:b0:5a:62:a3:4f:e5:c8:c5:ab:41:a8: be:61:6c:07:bb:97:8b:81:02:df:57:3d:21:81:33:c1:c8:30: 22:e5:e1:38:84:f5:19:45:c4:70:9e:75:07:ae:bc:8c:11:b9: 8a:25:9e:f9:a0:30:b4:3f:28:41:43:af:93:46:82:e8:c0:17: af:e1:35:94 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE53mh5/OOUaa+iV7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDcxMTIxMDAxMVoXDTI2MTAwOTIxMDAxMVowLzEtMCsGA1UEAxMk M2VhNDhiM2EtNDlmNC00YzJhLThhNzktMDdmZjZmMDhjODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3QPjiLlGvUQroHW3dbPBy3xaCJo/zW9L/9S Mnucl3jHgzf2ffKruuaNDkhREMtaZO3sv9HW3QleyNfqRwwIbJP/5679P+R2FMBW HILZgXW1or/IYiObjU+cHULr3/mYMI7f5vtZ7dJfcYyUXXqBSUbcsU+FFp6OjpPB tuqKx8I9cYnpwgytA+UYj5s7L96QJbeh5mNxkVS0CjPLKUFnPSBdWWqiyKFKWhDo mW6n9jvbmz3YXscbtGBmJ8ceeyN8jowvBiNYl5aGNrAMHXV1yBatunW5VNSDBdje LMbJBUucJ7MD3/LxIsM/8j1DtM5HQ2RzkPhxK9Rssni0JakDiwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAAq9ild46A+Ww3u/4+EwECMGmCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTM5ZTBkOGEtY2FhYy0z ZGE1LWE3MDQtZTY5MjIxNThjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABYdeIw9zhvkjLHi+hYDdtNU7ij841MwPdhsZE2JJNR/lEhKbPpR aiFUyTX9UNn+Ihws6cQX6Vz9PJXApHBxLu+3ztcDqvVN7C+SFqf0ZSVZ06JRTtId db3A7UFxspr7Z5elvmiQVZm0krEIdaevVmGDjFT/BzTSpC3O54DVgZDpsfdoEO6o 48BwQqXmD5rVoMm0VGpJiFPLDK+4r0AU7011uRxwVSUYCXZbjaTappiHn/zsvQRJ Qc613zywWmKjT+XIxatBqL5hbAe7l4uBAt9XPSGBM8HIMCLl4TiE9RlFxHCedQeu vIwRuYolnvmgMLQ/KEFDr5NGgujAF6/hNZQ= -----END CERTIFICATE-----Generated at Fri Jul 24 22:14:40 2026 by rpki-client