$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa File: 9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa (raw, json) Hash identifier: 9nKBhoESk0/LMXRZZ4wkAwcVq+eOi+MfbrHDlqHk7ns= Subject key identifier: 96:D3:B7:C4:00:1C:05:73:42:16:5E:B0:45:3D:85:BF:DD:EF:9D:0D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2D2BE4DBD0576821C700 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 2158 IP address blocks: 2607:f028::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2d:2b:e4:db:d0:57:68:21:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=a4cd56e2-e71e-4953-a19b-ef88a6a74a44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ec:35:93:40:8e:c8:9c:03:61:cc:6a:f7:e8: 0d:8c:20:78:1a:78:14:a0:1a:ec:7b:59:cf:cc:c6: 88:e0:6f:cc:2d:ff:e5:dd:40:62:8a:4f:a6:f0:cd: d6:bf:2b:e4:97:be:b9:62:4e:82:46:bf:3a:c8:f8: 22:61:38:30:81:b0:3c:c5:df:f2:b5:92:4a:01:02: e6:f0:54:8c:51:cc:36:46:74:0a:5b:3c:b5:4d:c0: 12:ff:40:2d:fd:a0:28:e6:aa:13:9f:af:31:af:f3: 2a:d0:04:8e:6a:7c:d7:58:12:cf:7c:1f:f3:c3:e6: 76:17:34:26:03:ee:24:34:3e:ad:6b:a0:01:7a:a7: 10:a9:6f:aa:b6:2a:54:8d:e9:05:c6:bc:1d:a6:f5: ad:92:c5:33:b1:cb:02:f4:fd:82:bd:7c:58:df:f7: a6:3d:f6:f4:8b:db:54:87:6e:4b:8d:30:41:68:2c: 33:cd:69:76:8e:86:3c:4b:70:da:19:40:ef:81:bb: 53:8a:95:f9:90:a3:e2:2c:a1:6f:dd:a8:37:24:c4: 9b:1c:86:a7:24:89:67:36:50:ae:1b:f9:c9:b3:ee: 97:52:fc:0a:71:8f:5b:2e:09:a2:10:05:2c:00:05: 2a:eb:12:62:f1:7a:c8:7f:29:db:52:f6:c5:d4:c0: 6d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:D3:B7:C4:00:1C:05:73:42:16:5E:B0:45:3D:85:BF:DD:EF:9D:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9bc9e0b7-4468-3007-b3a3-7aa49f27c226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2a:33:c1:e7:32:87:19:20:3a:dc:62:d3:67:68:63:29:4e: 73:27:5b:36:35:86:83:bd:62:fe:a4:a9:29:d9:e5:d9:c0:46: fb:aa:2a:8c:2c:50:94:d1:86:01:85:73:43:90:b3:63:79:57: ee:c7:5e:2d:5e:f7:4c:9f:01:56:ca:8e:4a:8f:f3:00:6f:ab: 03:4b:14:e1:9a:e8:e9:fc:35:90:f2:50:df:60:8d:95:33:39: aa:56:5a:81:7b:72:82:c6:89:36:fe:92:5d:e1:f3:61:64:d3: 69:72:17:2b:81:63:5c:b5:ca:dd:e2:5b:99:5c:27:12:b9:8a: 36:a0:bf:54:d0:69:01:d0:48:45:a0:ea:c8:54:b9:98:69:ef: fc:b7:89:6b:9d:26:0e:fe:a2:9c:34:a0:bf:25:0c:32:9c:d6: e0:71:15:e9:b8:94:17:f6:ba:98:08:de:a9:68:b3:6b:0b:c5: 97:f1:d0:95:ce:1d:8a:45:b2:72:14:8f:0e:47:40:99:fa:ae: 63:19:16:41:7c:9b:0c:f2:83:60:be:24:a8:29:d4:95:7d:28: 1b:e1:23:27:3b:e4:0d:b0:21:e4:74:84:99:d0:cc:86:5e:2d: df:61:86:9f:54:6f:56:41:28:1c:e6:8c:de:19:90:2c:9b:f9: 84:63:fc:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XS0r5NvQV2ghxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YTRjZDU2ZTItZTcxZS00OTUzLWExOWItZWY4OGE2YTc0YTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruw1k0COyJwDYcxq9+gNjCB4GngUoBrse1nP zMaI4G/MLf/l3UBiik+m8M3Wvyvkl765Yk6CRr86yPgiYTgwgbA8xd/ytZJKAQLm 8FSMUcw2RnQKWzy1TcAS/0At/aAo5qoTn68xr/Mq0ASOanzXWBLPfB/zw+Z2FzQm A+4kND6ta6ABeqcQqW+qtipUjekFxrwdpvWtksUzscsC9P2CvXxY3/emPfb0i9tU h25LjTBBaCwzzWl2joY8S3DaGUDvgbtTipX5kKPiLKFv3ag3JMSbHIanJIlnNlCu G/nJs+6XUvwKcY9bLgmiEAUsAAUq6xJi8XrIfynbUvbF1MBtJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJbTt8QAHAVzQhZesEU9hb/d750NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWJjOWUwYjctNDQ2OC0z MDA3LWIzYTMtN2FhNDlmMjdjMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAB8qM8HnMocZIDrcYtNnaGMpTnMnWzY1hoO9Yv6kqSnZ5dnARvuq KowsUJTRhgGFc0OQs2N5V+7HXi1e90yfAVbKjkqP8wBvqwNLFOGa6On8NZDyUN9g jZUzOapWWoF7coLGiTb+kl3h82Fk02lyFyuBY1y1yt3iW5lcJxK5ijagv1TQaQHQ SEWg6shUuZhp7/y3iWudJg7+opw0oL8lDDKc1uBxFem4lBf2upgI3qlos2sLxZfx 0JXOHYpFsnIUjw5HQJn6rmMZFkF8mwzyg2C+JKgp1JV9KBvhIyc75A2wIeR0hJnQ zIZeLd9hhp9Ub1ZBKBzmjN4ZkCyb+YRj/Mg= -----END CERTIFICATE-----Generated at Mon Nov 3 21:12:42 2025 by rpki-client