$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5ce1cced-5d56-30a8-a142-38a6d556954c.roa File: 5ce1cced-5d56-30a8-a142-38a6d556954c.roa (raw, json) Hash identifier: RF0nlNC0PjE6N3dqlwOPuc1eKc8cgCSaZsSfY1TmIwc= Subject key identifier: 88:04:61:52:BB:EA:65:DD:52:9D:23:C0:E0:AB:AD:9F:B0:DD:97:B7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6E84006A0CA27AEEA01CE80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5ce1cced-5d56-30a8-a142-38a6d556954c.roa Signing time: Wed 12 Nov 2025 21:58:39 +0000 ROA not before: Wed 12 Nov 2025 21:58:39 +0000 ROA not after: Tue 10 Feb 2026 21:58:39 +0000 asID: 202 IP address blocks: 2607:f028:b51::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:e8:40:06:a0:ca:27:ae:ea:01:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:58:39 2025 GMT Not After : Feb 10 21:58:39 2026 GMT Subject: CN=4da349cf-966e-415b-ac75-b9ee90ac3fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:b4:0d:43:b8:a0:a6:b6:f0:6d:c1:3b:ca:34: e6:af:7c:2f:60:a1:ae:5f:ca:31:e9:97:ca:15:fc: bb:17:b3:8e:f4:0d:d5:d7:af:f1:e2:b8:1f:87:98: 1e:c8:4d:b3:ba:b7:42:7a:9c:87:7d:24:04:55:54: 7c:98:88:d2:6f:f7:15:ba:22:e4:f7:01:3d:77:b2: 83:70:2b:fb:58:b3:d9:fb:63:ed:16:ba:4b:63:58: a6:d3:94:b0:f9:44:e7:99:0a:71:d6:49:67:be:01: 09:0b:b4:44:b4:16:dd:45:c5:f7:79:00:9f:cf:a7: 96:22:db:f6:3a:3d:1b:70:90:cd:31:17:c5:97:5d: f9:28:77:8c:ab:34:6b:0a:7c:da:9c:11:e7:d7:b5: c6:61:8a:41:c1:25:63:70:3b:73:a6:7d:99:3e:19: 8a:7c:7f:a9:14:bd:1e:9e:5c:8a:cc:6e:17:a3:7e: 0f:5c:5d:a0:6d:c8:5f:05:e9:30:4e:33:5e:fc:e2: a0:ed:71:de:8c:9b:3b:9e:27:78:d4:db:4c:ac:8a: 11:18:d8:84:66:88:07:84:e3:ae:cf:91:fc:c4:1c: cb:c1:8f:be:87:6e:83:00:d3:26:c9:5b:df:2a:cd: b2:f6:80:ca:31:93:8f:11:14:bd:69:cd:d8:f9:56: 2d:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:04:61:52:BB:EA:65:DD:52:9D:23:C0:E0:AB:AD:9F:B0:DD:97:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5ce1cced-5d56-30a8-a142-38a6d556954c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b51::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:58:5b:eb:58:a0:0a:2d:48:3a:ea:57:70:1e:f0:7c:1f:77: b1:fb:8f:ad:3a:a1:6c:1f:60:71:20:e6:d8:9d:d0:96:3a:b4: fd:91:ea:dd:b8:39:0e:09:a3:08:63:ad:6b:23:ae:90:65:36: 90:46:f4:ed:ad:b8:2b:ac:51:f6:4c:f9:d3:b5:07:20:19:00: ee:a1:59:94:86:92:e1:23:32:21:74:72:57:0d:8d:0a:53:a5: 61:ce:01:58:04:26:40:08:2d:0f:67:e8:fb:bb:b9:55:59:31: 07:40:0d:71:f5:21:97:b3:18:0a:51:b1:d3:a8:a8:68:55:c7: a0:b3:f7:62:68:b9:2d:f4:84:cd:70:05:a7:ad:e2:9d:ee:fa: 8a:6c:32:05:02:47:24:2d:c0:ca:34:81:66:b1:e6:da:4e:81: c4:04:87:c7:cf:ac:84:df:f5:af:a8:14:a0:03:d5:d7:83:5e: 96:88:0d:ae:aa:94:0a:5b:f3:25:d1:7c:b5:96:a3:4a:ce:fd: 8e:ba:96:19:1a:e2:e5:94:71:57:b1:98:22:9e:4e:aa:84:c1: 59:f8:eb:75:eb:b1:48:b3:3f:c6:77:f5:1e:99:16:03:91:c6: 59:2c:7d:1a:08:45:17:8d:82:35:70:62:f7:3a:79:f5:86:ef: d5:ad:31:d0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW6EAGoMonruoBzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxNTgzOVoXDTI2MDIxMDIxNTgzOVowLzEtMCsGA1UEAxMk NGRhMzQ5Y2YtOTY2ZS00MTViLWFjNzUtYjllZTkwYWMzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LQNQ7igprbwbcE7yjTmr3wvYKGuX8ox6ZfK Ffy7F7OO9A3V16/x4rgfh5geyE2zurdCepyHfSQEVVR8mIjSb/cVuiLk9wE9d7KD cCv7WLPZ+2PtFrpLY1im05Sw+UTnmQpx1klnvgEJC7REtBbdRcX3eQCfz6eWItv2 Oj0bcJDNMRfFl135KHeMqzRrCnzanBHn17XGYYpBwSVjcDtzpn2ZPhmKfH+pFL0e nlyKzG4Xo34PXF2gbchfBekwTjNe/OKg7XHejJs7nid41NtMrIoRGNiEZogHhOOu z5H8xBzLwY++h26DANMmyVvfKs2y9oDKMZOPERS9ac3Y+VYtxwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIgEYVK76mXdUp0jwOCrrZ+w3Ze3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWNlMWNjZWQtNWQ1Ni0z MGE4LWExNDItMzhhNmQ1NTY5NTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAtR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFhYW+tYoAotSDrqV3Ae8Hwfd7H7j606oWwfYHEg5tid0JY6tP2R 6t24OQ4JowhjrWsjrpBlNpBG9O2tuCusUfZM+dO1ByAZAO6hWZSGkuEjMiF0clcN jQpTpWHOAVgEJkAILQ9n6Pu7uVVZMQdADXH1IZezGApRsdOoqGhVx6Cz92JouS30 hM1wBaet4p3u+opsMgUCRyQtwMo0gWax5tpOgcQEh8fPrITf9a+oFKAD1deDXpaI Da6qlApb8yXRfLWWo0rO/Y66lhka4uWUcVexmCKeTqqEwVn463XrsUizP8Z39R6Z FgORxlksfRoIRReNgjVwYvc6efWG79WtMdA= -----END CERTIFICATE-----Generated at Mon Nov 17 18:07:39 2025 by rpki-client