$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa File: 9a840488-c07a-3581-887a-8072852ad622.roa (raw, json) Hash identifier: QLCooXB8kAE3B0txrfk44jDKjwRNQx5E4bqEhcDU0fg= Subject key identifier: 8B:C2:E6:60:D4:89:A4:78:79:2F:A6:51:22:81:6C:97:17:A5:64:ED Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6E72F9358E21D611BCC9900 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa Signing time: Wed 12 Nov 2025 21:56:30 +0000 ROA not before: Wed 12 Nov 2025 21:56:30 +0000 ROA not after: Tue 10 Feb 2026 21:56:30 +0000 asID: 202 IP address blocks: 2607:f028:b42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:e7:2f:93:58:e2:1d:61:1b:cc:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:56:30 2025 GMT Not After : Feb 10 21:56:30 2026 GMT Subject: CN=18f4c83f-acb2-426c-886b-ad75f1a8171f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:07:6e:f8:53:de:65:57:a0:f4:cb:c7:e8:8c: 4b:80:c4:22:9d:a9:09:fb:78:0a:5c:6f:01:c6:13: f8:5a:70:53:74:e3:75:e8:10:3a:be:c2:96:cd:66: 71:00:88:4c:24:11:85:cf:15:ac:c1:12:0e:75:68: 89:a5:2a:33:a0:45:e2:ab:7e:9d:b9:11:a5:5c:ac: 1c:06:50:bc:bf:37:eb:d9:da:0c:01:07:39:8d:21: 61:f8:f5:12:5d:4b:6a:7f:08:7e:61:f9:13:03:51: 7e:90:41:60:19:2d:f7:e8:12:4a:5c:8a:63:a0:f8: 01:a6:d4:08:13:79:ce:80:af:14:5f:29:14:c1:72: 5f:1a:21:b2:08:bc:44:96:7b:50:40:46:cd:f5:aa: de:ae:41:b5:12:fd:db:f4:6a:27:0e:ca:cc:dd:ff: 04:10:72:b5:f7:33:47:b1:3c:84:de:48:2a:30:40: b7:d7:d3:bb:30:fe:c5:1d:f7:e2:45:56:04:e6:a9: d6:a9:d9:a5:6d:35:be:2a:3e:66:62:19:c3:1a:d2: 8d:a1:86:f7:c0:ca:48:51:f6:6c:8f:7c:16:d8:6a: 86:42:00:45:9c:b3:18:e6:81:0d:2f:2e:3b:c5:77: fd:1e:93:6d:7e:f3:9a:f6:be:56:42:59:bc:34:82: 3c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C2:E6:60:D4:89:A4:78:79:2F:A6:51:22:81:6C:97:17:A5:64:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4a:4d:74:f1:42:e6:00:7d:96:4c:5b:85:a6:e3:57:5d:d9: c4:2e:6a:34:4d:c1:cd:b6:d5:55:3d:d3:ce:72:9c:a2:91:97: 21:8e:22:a3:2f:2c:80:46:2f:6f:87:36:a1:52:e0:bc:73:e7: 61:22:b6:44:87:96:a7:42:f1:ef:f9:03:2d:f2:53:25:7a:a6: 8a:f1:73:12:cd:ee:a7:37:9a:13:94:31:97:68:1c:41:84:31: 44:c8:0a:ee:ab:10:6d:e4:ee:36:f5:4e:a5:2f:58:8d:50:88: ac:d5:3f:8d:0d:69:59:ed:f5:48:bc:88:60:16:f1:81:04:7a: 43:b7:32:34:13:05:60:84:a3:9f:eb:02:fe:f5:5d:fc:7d:26: 7b:28:72:79:b0:60:71:cd:6f:44:fa:1a:14:39:df:be:97:3b: 0f:48:59:77:46:23:62:0f:de:3e:f1:26:8f:0e:27:50:b4:c0: 05:46:f9:21:c3:f5:2b:35:26:41:3f:6c:03:49:b8:12:22:3c: ad:b5:74:60:6f:d4:9b:f5:b3:e1:3f:72:51:0a:5d:61:0a:36: 59:9f:dc:09:0c:12:d7:20:81:e2:ba:b3:01:ef:3b:44:be:e9: 14:fa:22:a4:6b:98:9f:bc:bf:a3:e1:ba:06:7e:46:e7:28:3e: 90:9a:6c:83 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW5y+TWOIdYRvMmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxNTYzMFoXDTI2MDIxMDIxNTYzMFowLzEtMCsGA1UEAxMk MThmNGM4M2YtYWNiMi00MjZjLTg4NmItYWQ3NWYxYTgxNzFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggdu+FPeZVeg9MvH6IxLgMQinakJ+3gKXG8B xhP4WnBTdON16BA6vsKWzWZxAIhMJBGFzxWswRIOdWiJpSozoEXiq36duRGlXKwc BlC8vzfr2doMAQc5jSFh+PUSXUtqfwh+YfkTA1F+kEFgGS336BJKXIpjoPgBptQI E3nOgK8UXykUwXJfGiGyCLxElntQQEbN9arerkG1Ev3b9GonDsrM3f8EEHK19zNH sTyE3kgqMEC319O7MP7FHffiRVYE5qnWqdmlbTW+Kj5mYhnDGtKNoYb3wMpIUfZs j3wW2GqGQgBFnLMY5oENLy47xXf9HpNtfvOa9r5WQlm8NII8xQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIvC5mDUiaR4eS+mUSKBbJcXpWTtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE4NDA0ODgtYzA3YS0z NTgxLTg4N2EtODA3Mjg1MmFkNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAtC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIRKTXTxQuYAfZZMW4Wm41dd2cQuajRNwc221VU9085ynKKRlyGO IqMvLIBGL2+HNqFS4Lxz52EitkSHlqdC8e/5Ay3yUyV6porxcxLN7qc3mhOUMZdo HEGEMUTICu6rEG3k7jb1TqUvWI1QiKzVP40NaVnt9Ui8iGAW8YEEekO3MjQTBWCE o5/rAv71Xfx9JnsocnmwYHHNb0T6GhQ5376XOw9IWXdGI2IP3j7xJo8OJ1C0wAVG +SHD9Ss1JkE/bANJuBIiPK21dGBv1Jv1s+E/clEKXWEKNlmf3AkMEtcggeK6swHv O0S+6RT6IqRrmJ+8v6PhugZ+RucoPpCabIM= -----END CERTIFICATE-----Generated at Mon Nov 17 18:12:11 2025 by rpki-client