$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d0b9609-d127-3d1d-bae0-ecc3a2929392.roa File: 5d0b9609-d127-3d1d-bae0-ecc3a2929392.roa (raw, json) Hash identifier: zNC12J2RHtIBcVhZdr7s/1CvkjQ9du2OD5GNv48e0mY= Subject key identifier: E9:94:AC:CE:5C:3F:E1:26:BA:25:3C:F3:4A:BF:A9:F1:D9:73:60:57 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6DEFD9F879BAA7E3C2F6EC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d0b9609-d127-3d1d-bae0-ecc3a2929392.roa Signing time: Wed 12 Nov 2025 21:39:59 +0000 ROA not before: Wed 12 Nov 2025 21:39:59 +0000 ROA not after: Tue 10 Feb 2026 21:39:59 +0000 asID: 202 IP address blocks: 2607:f028:b12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:de:fd:9f:87:9b:aa:7e:3c:2f:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:39:59 2025 GMT Not After : Feb 10 21:39:59 2026 GMT Subject: CN=753ac59f-e427-4bff-bea2-b934a46db194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:58:99:15:fa:9e:97:59:09:53:37:79:7a:b9: a4:ee:1b:6e:76:b5:3c:f5:94:15:6d:7b:5e:68:13: 59:44:45:15:b5:c3:68:fa:6f:b8:25:7d:11:ba:6c: a0:b2:e9:3f:49:7b:ec:a2:7d:bd:04:f7:72:0d:70: d5:ec:77:45:17:e5:91:84:ff:d6:9d:d0:10:61:2f: 33:c1:07:63:27:23:bc:a4:79:3c:33:7a:c1:c2:82: 75:54:cb:80:bb:0d:9f:c8:2c:cd:8a:62:9e:e9:20: ad:c1:fb:39:dc:ad:85:2a:d0:92:7a:1a:0b:c8:8a: 85:69:c8:fd:4f:3d:bf:78:0b:24:7a:5f:bb:fd:9b: 6e:cd:2c:72:93:de:3e:d0:6f:2c:7e:f8:0b:85:bf: d8:1e:51:61:23:fa:64:1b:00:c2:db:43:ec:86:d0: 6a:68:e1:fc:f4:0c:9f:2d:02:94:1a:77:b3:5d:44: 89:d2:cd:f7:d4:eb:c0:e8:5e:67:d4:26:b7:4e:c3: c8:bd:78:9f:a2:bd:8a:62:73:ea:0b:3e:74:d8:92: a1:2b:ae:91:bd:45:73:c7:e9:96:e4:58:2b:75:65: da:cf:6c:6f:32:30:3c:66:df:81:e5:f6:7b:21:4a: e2:1e:4e:d7:dd:d1:1f:17:30:82:31:7d:2c:8b:2b: b1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:94:AC:CE:5C:3F:E1:26:BA:25:3C:F3:4A:BF:A9:F1:D9:73:60:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/5d0b9609-d127-3d1d-bae0-ecc3a2929392.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:24:19:eb:76:fd:66:4c:cd:c9:5c:10:74:d7:f5:68:a8:f0: 11:96:4d:7b:82:dc:89:24:11:5b:6a:b4:b8:9f:44:84:5e:f6: f3:86:31:8b:c9:dd:85:34:f0:b2:59:72:26:d2:40:34:04:21: 23:aa:82:15:44:6c:32:41:b5:3c:9f:83:b8:b9:7b:6f:42:65: 97:60:e8:a2:02:38:3b:c6:6e:e6:04:7d:61:bc:37:f7:52:04: dc:c7:c8:42:7d:3c:45:2b:1e:69:85:91:2e:54:79:4f:f8:86: d6:fb:07:0b:de:cc:d0:1d:ef:47:91:0c:2c:1e:7a:a5:60:c1: ac:0c:ee:08:ba:1c:9e:29:80:97:c2:e3:7f:83:64:e9:11:65: ef:bf:b9:61:af:25:09:66:ba:69:3e:46:41:84:e9:b1:66:24: 68:9f:b0:3f:08:fe:bb:7a:75:5b:01:e7:34:ae:27:b4:9e:b8: d1:6a:9d:67:14:c3:64:32:53:ac:1e:63:3e:3c:20:b0:67:7f: e5:c1:53:af:3b:a0:8e:2e:90:b6:ad:c5:38:93:e1:49:25:12: d9:2f:43:13:08:02:fe:cc:fb:68:d0:5f:3c:21:5e:5d:00:6a: 54:ef:6f:3b:78:ee:be:2d:48:4c:11:83:24:0a:8d:96:28:4e: 71:48:0b:68 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW3v2fh5uqfjwvbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxMzk1OVoXDTI2MDIxMDIxMzk1OVowLzEtMCsGA1UEAxMk NzUzYWM1OWYtZTQyNy00YmZmLWJlYTItYjkzNGE0NmRiMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzliZFfqel1kJUzd5ermk7htudrU89ZQVbXte aBNZREUVtcNo+m+4JX0Rumygsuk/SXvson29BPdyDXDV7HdFF+WRhP/WndAQYS8z wQdjJyO8pHk8M3rBwoJ1VMuAuw2fyCzNimKe6SCtwfs53K2FKtCSehoLyIqFacj9 Tz2/eAskel+7/ZtuzSxyk94+0G8sfvgLhb/YHlFhI/pkGwDC20PshtBqaOH89Ayf LQKUGnezXUSJ0s331OvA6F5n1Ca3TsPIvXifor2KYnPqCz502JKhK66RvUVzx+mW 5FgrdWXaz2xvMjA8Zt+B5fZ7IUriHk7X3dEfFzCCMX0siyuxowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOmUrM5cP+EmuiU880q/qfHZc2BXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNWQwYjk2MDktZDEyNy0z ZDFkLWJhZTAtZWNjM2EyOTI5MzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0kGet2/WZMzclcEHTX9Wio8BGWTXuC3IkkEVtqtLifRIRe9vOG MYvJ3YU08LJZcibSQDQEISOqghVEbDJBtTyfg7i5e29CZZdg6KICODvGbuYEfWG8 N/dSBNzHyEJ9PEUrHmmFkS5UeU/4htb7BwvezNAd70eRDCweeqVgwawM7gi6HJ4p gJfC43+DZOkRZe+/uWGvJQlmumk+RkGE6bFmJGifsD8I/rt6dVsB5zSuJ7SeuNFq nWcUw2QyU6weYz48ILBnf+XBU687oI4ukLatxTiT4UklEtkvQxMIAv7M+2jQXzwh Xl0AalTvbzt47r4tSEwRgyQKjZYoTnFIC2g= -----END CERTIFICATE-----Generated at Mon Nov 17 18:07:41 2025 by rpki-client