$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa File: 846c0a01-8222-3467-bb6d-2801d7a21875.roa (raw, json) Hash identifier: Zs6yKv83LL//hTbcd4/bFUvSVG9RXsqKm5Av/tDyUcY= Subject key identifier: 66:9F:DE:0F:D1:73:8D:D5:44:F7:FA:0F:57:09:CE:FC:7B:2E:92:6B Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F9BCDD08BE641984DFAFFC080 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 3356 IP address blocks: 2607:f028:52::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:d0:8b:e6:41:98:4d:fa:ff:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=1ab5e011-b66b-410f-ab5e-3de18e337e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:45:5b:a8:5d:36:0f:ae:09:ae:38:dd:6f:b1: c1:4d:1e:ae:9c:44:3c:d7:94:07:ee:0e:11:72:d9: ef:b8:6a:9f:16:38:6e:00:41:55:fd:8f:ee:8e:e4: 79:0e:4d:e7:cf:58:52:16:4e:8d:ea:e4:b8:a3:dd: ec:c6:b0:a7:11:c3:16:b2:df:b8:5f:db:ec:56:79: 90:e4:3e:46:9e:ae:bf:1d:90:28:31:b6:1f:5b:90: 6e:74:28:f3:f8:d3:d3:29:f2:08:23:cd:5c:0c:e0: c8:7a:40:b4:2a:c1:8c:70:c4:12:62:3d:d1:ad:22: e8:e2:55:3e:e0:bd:cd:54:58:91:a1:25:ef:8c:37: e2:3b:f3:35:f9:bf:f5:bd:96:e2:aa:4e:59:0a:23: db:be:ca:30:c2:bf:d3:42:ca:5e:62:7c:f4:20:6e: c7:aa:87:20:9f:46:f8:05:c2:78:bd:73:14:39:dd: 15:b4:aa:e3:0c:e8:9a:6d:22:7c:a8:03:41:bc:f7: 01:c2:cf:fe:12:cd:04:bd:b4:02:c4:70:db:5c:6f: 28:73:c8:d0:a9:26:a7:0e:3a:bb:6d:9a:7a:91:69: 92:a2:ba:ea:3b:5d:f5:56:a2:97:27:20:4d:25:e7: 34:e3:49:0b:21:1c:37:01:d7:61:b4:24:b9:57:31: e8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9F:DE:0F:D1:73:8D:D5:44:F7:FA:0F:57:09:CE:FC:7B:2E:92:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/846c0a01-8222-3467-bb6d-2801d7a21875.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:52::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:5e:25:3b:1c:11:4b:c0:10:ae:e0:64:27:03:72:dc:5c:2c: 5b:fd:af:0d:d3:24:a9:71:fe:0c:5e:37:2e:a3:f6:91:91:da: d8:7f:12:78:0c:47:56:c9:52:a9:10:dc:c7:f8:9b:ed:fe:54: 53:40:3c:87:6c:2f:03:42:c1:ed:f2:e1:cb:f9:19:32:42:bd: a3:0f:87:df:ab:75:aa:f6:54:42:b9:23:eb:03:8f:e0:f1:bf: 07:f7:fa:b2:1c:65:0c:3e:4a:3d:3e:85:04:12:ef:00:2a:8b: fd:ca:87:b0:1e:e5:f3:e4:d3:12:cd:e3:66:4f:98:f4:b3:dd: a6:92:a2:ce:e5:60:fc:7b:7e:f8:ba:b0:c0:8a:c6:5e:3f:0b: 9f:61:62:c3:b3:28:2e:ff:a1:a5:41:7e:66:83:9c:00:91:ae: 70:7c:76:b7:1f:38:e0:ae:a1:1b:28:1f:5c:50:2d:31:12:9f: e3:73:ca:31:e0:6c:af:3f:dc:a2:11:e4:b7:66:5b:79:f1:be: 34:e9:fa:e8:f7:6a:8b:f4:96:64:5b:7b:43:57:86:44:a2:27: fa:ce:ed:8a:1a:1c:38:e9:87:68:d8:fa:4c:e4:56:0f:2e:12: bb:6c:10:c4:2a:54:53:3a:49:e8:65:40:95:e2:53:f7:ff:46: 5c:66:f5:b9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+bzdCL5kGYTfr/wIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MWFiNWUwMTEtYjY2Yi00MTBmLWFiNWUtM2RlMThlMzM3ZTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUVbqF02D64Jrjjdb7HBTR6unEQ815QH7g4R ctnvuGqfFjhuAEFV/Y/ujuR5Dk3nz1hSFk6N6uS4o93sxrCnEcMWst+4X9vsVnmQ 5D5Gnq6/HZAoMbYfW5BudCjz+NPTKfIII81cDODIekC0KsGMcMQSYj3RrSLo4lU+ 4L3NVFiRoSXvjDfiO/M1+b/1vZbiqk5ZCiPbvsowwr/TQspeYnz0IG7Hqocgn0b4 BcJ4vXMUOd0VtKrjDOiabSJ8qANBvPcBws/+Es0EvbQCxHDbXG8oc8jQqSanDjq7 bZp6kWmSorrqO131VqKXJyBNJec040kLIRw3AddhtCS5VzHo9wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGaf3g/Rc43VRPf6D1cJzvx7LpJrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvODQ2YzBhMDEtODIyMi0z NDY3LWJiNmQtMjgwMWQ3YTIxODc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABFeJTscEUvAEK7gZCcDctxcLFv9rw3TJKlx/gxeNy6j9pGR2th/ EngMR1bJUqkQ3Mf4m+3+VFNAPIdsLwNCwe3y4cv5GTJCvaMPh9+rdar2VEK5I+sD j+Dxvwf3+rIcZQw+Sj0+hQQS7wAqi/3Kh7Ae5fPk0xLN42ZPmPSz3aaSos7lYPx7 fvi6sMCKxl4/C59hYsOzKC7/oaVBfmaDnACRrnB8drcfOOCuoRsoH1xQLTESn+Nz yjHgbK8/3KIR5LdmW3nxvjTp+uj3aov0lmRbe0NXhkSiJ/rO7YoaHDjph2jY+kzk Vg8uErtsEMQqVFM6SehlQJXiU/f/Rlxm9bk= -----END CERTIFICATE-----Generated at Sun Nov 1 06:05:38 2026 by rpki-client