$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/935ca3b7-98d6-35a2-9e06-b2f5f0f8a19e.roa File: 935ca3b7-98d6-35a2-9e06-b2f5f0f8a19e.roa (raw, json) Hash identifier: z1cm+qJ9gstyt17Uht95D+KXLOKzq9CBdEaA8A8s5oo= Subject key identifier: CF:20:BB:B9:63:5D:3C:C2:CF:ED:13:0A:8D:30:E9:0C:4B:67:89:F1 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6EB4CB78C9E8FC59EC1A980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/935ca3b7-98d6-35a2-9e06-b2f5f0f8a19e.roa Signing time: Wed 12 Nov 2025 22:04:47 +0000 ROA not before: Wed 12 Nov 2025 22:04:47 +0000 ROA not after: Tue 10 Feb 2026 22:04:47 +0000 asID: 203 IP address blocks: 2607:f028:b62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:eb:4c:b7:8c:9e:8f:c5:9e:c1:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 22:04:47 2025 GMT Not After : Feb 10 22:04:47 2026 GMT Subject: CN=5b71b72e-ad45-491d-a162-7975b3f9c5ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b4:c4:a2:94:b9:93:7b:54:9a:d5:33:26:ef: 17:3c:61:5a:dd:11:14:80:ee:59:56:3c:23:a0:61: 27:18:34:ac:95:64:66:7c:00:fe:5f:ae:43:95:b9: 36:ce:86:bc:05:e5:b5:d5:0a:2e:70:08:d1:d5:88: 6f:2f:7f:57:0e:91:71:ea:9c:2f:87:62:93:b2:d6: 1e:f3:4c:26:f9:a7:0d:98:25:e2:a3:36:72:88:d4: 70:29:42:44:61:ab:73:df:f0:e4:d7:ec:fb:7a:61: 37:03:d9:09:23:d6:0e:c4:49:c1:2f:ed:a4:62:c0: f3:6d:7b:ef:2f:a3:98:9c:8d:9d:6d:b5:ce:0b:a4: 0c:02:24:d9:82:22:24:92:95:7f:8e:e8:51:66:fd: 50:4d:1a:5f:ff:0f:6a:6b:a1:6d:14:75:9e:b1:ed: 2f:47:b5:aa:71:fd:91:04:56:78:3b:6f:e5:80:a6: 88:05:02:a8:77:b6:87:28:f4:14:e3:5d:de:f8:12: c4:f5:54:9f:78:bc:0f:1e:f1:81:22:6a:00:41:4a: b5:b2:ef:6a:b3:4a:92:5c:0e:75:d4:32:94:ea:39: 0f:d0:57:86:a3:83:a8:74:78:12:81:5e:a0:34:f4: 00:77:c2:70:e9:93:69:45:9e:a1:6a:c6:9f:87:39: e7:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:20:BB:B9:63:5D:3C:C2:CF:ED:13:0A:8D:30:E9:0C:4B:67:89:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/935ca3b7-98d6-35a2-9e06-b2f5f0f8a19e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:65:e1:af:ef:bc:2f:a1:f6:0b:eb:19:fe:c1:4a:46:49:2e: e3:e5:2f:cf:9e:d9:2f:cf:1a:09:e2:32:3e:9c:d9:48:0d:39: 59:48:9c:f1:c5:fc:20:a7:7f:96:7c:06:41:70:bd:0c:20:e4: 83:5d:76:3d:54:7f:d8:a2:1a:e1:40:d3:75:12:f6:b1:9c:46: 49:ef:01:2c:7b:8d:5a:42:ff:88:49:a7:ce:e4:63:f4:44:1d: c3:85:87:fd:b9:9e:f6:0f:7d:b2:75:03:17:ad:0e:6b:db:18: 9c:21:a3:20:ab:c2:61:a7:3b:54:b4:9e:b3:83:ce:99:9e:6c: da:e2:98:e0:2f:55:71:84:eb:d7:ef:4e:30:e4:17:93:da:44: 45:d5:c3:30:a2:0e:73:5d:97:48:98:23:3e:01:34:43:f3:4d: 55:71:44:5b:89:16:f2:0c:01:21:92:e0:9a:f0:02:dd:a0:7e: d6:74:cc:20:45:db:37:bc:dc:cc:a8:61:0d:5b:9c:72:1b:f9: 11:68:6d:cc:95:09:08:61:fc:15:4a:45:2f:f4:d8:9b:75:f1: a4:1c:37:a2:22:af:c4:4a:29:4f:e5:26:e3:81:5d:2f:c4:ef: 5e:24:c9:1d:e0:ff:25:ec:f0:d0:98:18:2a:0b:35:65:9e:f8: 03:a7:c7:6b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW60y3jJ6PxZ7BqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIyMDQ0N1oXDTI2MDIxMDIyMDQ0N1owLzEtMCsGA1UEAxMk NWI3MWI3MmUtYWQ0NS00OTFkLWExNjItNzk3NWIzZjljNWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLTEopS5k3tUmtUzJu8XPGFa3REUgO5ZVjwj oGEnGDSslWRmfAD+X65Dlbk2zoa8BeW11QoucAjR1YhvL39XDpFx6pwvh2KTstYe 80wm+acNmCXiozZyiNRwKUJEYatz3/Dk1+z7emE3A9kJI9YOxEnBL+2kYsDzbXvv L6OYnI2dbbXOC6QMAiTZgiIkkpV/juhRZv1QTRpf/w9qa6FtFHWese0vR7Wqcf2R BFZ4O2/lgKaIBQKod7aHKPQU413e+BLE9VSfeLwPHvGBImoAQUq1su9qs0qSXA51 1DKU6jkP0FeGo4OodHgSgV6gNPQAd8Jw6ZNpRZ6hasafhznnBwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFM8gu7ljXTzCz+0TCo0w6QxLZ4nxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOTM1Y2EzYjctOThkNi0z NWEyLTllMDYtYjJmNWYwZjhhMTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAti MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH9l4a/vvC+h9gvrGf7BSkZJLuPlL8+e2S/PGgniMj6c2UgNOVlI nPHF/CCnf5Z8BkFwvQwg5INddj1Uf9iiGuFA03US9rGcRknvASx7jVpC/4hJp87k Y/REHcOFh/25nvYPfbJ1AxetDmvbGJwhoyCrwmGnO1S0nrODzpmebNrimOAvVXGE 69fvTjDkF5PaREXVwzCiDnNdl0iYIz4BNEPzTVVxRFuJFvIMASGS4JrwAt2gftZ0 zCBF2ze83MyoYQ1bnHIb+RFobcyVCQhh/BVKRS/02Jt18aQcN6Iir8RKKU/lJuOB XS/E714kyR3g/yXs8NCYGCoLNWWe+AOnx2s= -----END CERTIFICATE-----Generated at Mon Nov 17 18:15:33 2025 by rpki-client