$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d4ea550-3588-3c55-9baf-32690d69352a.roa File: 9d4ea550-3588-3c55-9baf-32690d69352a.roa (raw, json) Hash identifier: pHZi9NGNbID1iPqtYlFn/6PmpSym/ORPDUxx/oPZu7Q= Subject key identifier: BF:99:31:98:9C:79:B8:8A:02:7A:1C:AB:06:45:80:A4:F2:D6:55:24 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2CBBAE0D2BDD02AB7E80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d4ea550-3588-3c55-9baf-32690d69352a.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 2607:f028:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2c:bb:ae:0d:2b:dd:02:ab:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=3a8ece33-ca48-4d9a-b5fa-ed2d33bda8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:86:1c:95:1d:08:5e:61:99:d7:f6:c3:dc:e3: d0:08:af:f4:ca:e2:ec:ce:68:19:0b:f1:41:b4:bd: fb:22:d2:b2:b5:f6:7f:d0:89:5b:52:73:29:53:1a: dd:53:9b:e5:22:cc:75:f9:63:2b:7a:c8:90:39:78: 38:30:ab:25:69:e2:1b:71:22:c0:11:c5:78:9d:f3: 02:2f:ee:78:d8:b9:ad:81:3e:a5:0c:9d:b3:1c:8f: 9a:20:0f:b8:b5:68:81:41:f4:cf:4a:aa:e0:6c:e0: 0c:33:6a:ae:f6:1a:04:20:64:c8:6f:d7:4f:4b:47: d6:5b:fe:b6:ca:50:49:21:b4:96:d4:c8:02:fd:95: 17:c2:9f:56:e1:5d:b8:1a:c2:72:bb:6b:c9:24:df: 2d:01:38:d6:2e:fc:b3:96:ec:8d:6b:b0:33:0f:c9: 86:01:2a:55:f2:4f:ac:d4:4e:89:c8:ee:3f:fa:3e: 84:9f:ab:62:28:8e:57:8c:f7:c2:68:21:9d:ee:12: fa:58:4c:dc:1c:90:3b:50:c4:a6:55:80:41:0e:02: 26:5c:e3:7f:d4:45:36:33:ac:94:e6:89:32:aa:15: ab:77:69:3f:2f:90:20:44:ec:c1:34:89:b5:6d:a7: fe:d3:ab:7f:3f:69:8c:c9:fa:03:13:b1:09:2f:d1: 83:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:99:31:98:9C:79:B8:8A:02:7A:1C:AB:06:45:80:A4:F2:D6:55:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d4ea550-3588-3c55-9baf-32690d69352a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:71:c9:ef:f6:ca:8a:ed:63:e9:9a:83:9e:d3:e5:44:4e:04: 46:bf:a2:a6:65:47:e1:1e:0b:73:e4:90:58:bb:e4:77:62:c3: 28:dd:db:5a:bb:dd:cf:3b:26:f6:01:05:93:00:b9:56:cd:ee: 96:ab:3e:09:03:b3:ad:3a:0d:de:37:99:e3:6d:32:fa:51:8d: 84:18:ed:52:12:9a:c4:70:e1:18:e3:e3:ec:b5:fe:6a:ca:6a: 26:3a:02:95:3d:1b:90:23:b1:0a:fe:1d:24:97:64:bd:32:04: a1:b6:84:b9:cd:2c:e1:36:30:38:6c:76:4f:18:88:d0:7b:4b: 70:4d:99:27:40:00:25:c6:9c:10:02:11:42:a8:27:b4:db:c7: 88:75:31:27:ac:31:38:28:ba:f1:aa:6a:f2:86:84:62:93:ee: 1b:91:cf:44:04:7f:98:c3:83:b0:02:39:16:dd:16:2d:d9:c9: ff:ad:d2:7b:4f:22:69:ec:53:a9:76:e5:4d:2d:e3:a8:16:12: ad:36:f4:e5:50:e3:d9:2e:3e:e9:bc:d7:17:43:6e:6b:31:11: 9b:91:88:76:53:bb:9e:85:57:64:6f:19:96:db:66:db:ce:f2: e5:76:ec:a3:1a:f5:6f:05:76:ca:d6:3e:4f:a5:2f:48:0f:dc: 08:a4:39:7f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSy7rg0r3QKrfoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk M2E4ZWNlMzMtY2E0OC00ZDlhLWI1ZmEtZWQyZDMzYmRhOGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIYclR0IXmGZ1/bD3OPQCK/0yuLszmgZC/FB tL37ItKytfZ/0IlbUnMpUxrdU5vlIsx1+WMresiQOXg4MKslaeIbcSLAEcV4nfMC L+542LmtgT6lDJ2zHI+aIA+4tWiBQfTPSqrgbOAMM2qu9hoEIGTIb9dPS0fWW/62 ylBJIbSW1MgC/ZUXwp9W4V24GsJyu2vJJN8tATjWLvyzluyNa7AzD8mGASpV8k+s 1E6JyO4/+j6En6tiKI5XjPfCaCGd7hL6WEzcHJA7UMSmVYBBDgImXON/1EU2M6yU 5okyqhWrd2k/L5AgROzBNIm1baf+06t/P2mMyfoDE7EJL9GDEQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL+ZMZicebiKAnocqwZFgKTy1lUkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWQ0ZWE1NTAtMzU4OC0z YzU1LTliYWYtMzI2OTBkNjkzNTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEdxye/2yortY+mag57T5UROBEa/oqZlR+EeC3PkkFi75Hdiwyjd 21q73c87JvYBBZMAuVbN7parPgkDs606Dd43meNtMvpRjYQY7VISmsRw4Rjj4+y1 /mrKaiY6ApU9G5AjsQr+HSSXZL0yBKG2hLnNLOE2MDhsdk8YiNB7S3BNmSdAACXG nBACEUKoJ7Tbx4h1MSesMTgouvGqavKGhGKT7huRz0QEf5jDg7ACORbdFi3Zyf+t 0ntPImnsU6l25U0t46gWEq029OVQ49kuPum81xdDbmsxEZuRiHZTu56FV2RvGZbb ZtvO8uV27KMa9W8FdsrWPk+lL0gP3AikOX8= -----END CERTIFICATE-----Generated at Mon Nov 3 21:11:02 2025 by rpki-client