$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa File: b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa (raw, json) Hash identifier: lKLh7R0jqnBq6TlPGnNzkAzdakI7vOC3b+LLIP4Np3w= Subject key identifier: 58:00:BB:E9:F8:10:CE:6B:57:5D:DE:34:97:1E:A9:EE:29:39:74:FF Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584F19FCFEB9A90FE3BA8DCD9BE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 202 IP address blocks: 2607:f028:b62::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Sep 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fe:b9:a9:0f:e3:ba:8d:cd:9b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=31ae72a2-6df8-4bf2-a882-2f9e293e7acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8d:45:f5:80:51:e0:01:32:f6:dc:a8:bd:62: 51:15:36:fb:47:31:5f:de:12:88:30:15:8a:35:97: a0:10:1f:85:10:1b:eb:04:0e:0e:78:74:e1:9e:67: 34:72:c5:7b:11:be:6a:dc:4d:d2:1d:50:ac:48:cc: 66:35:a9:b4:1b:80:ef:77:27:a7:c2:71:ad:0c:4e: 6a:5f:e5:cb:89:83:68:2f:45:cd:87:04:3e:bd:a2: cc:74:3a:37:7d:02:ff:01:07:79:aa:2d:37:bb:8a: 2f:fc:a2:60:cf:8e:b5:ba:97:fd:c3:53:e0:f6:40: 1e:16:18:cd:c3:05:1c:ce:c9:c0:15:03:66:03:19: d5:8f:84:80:79:69:ac:7f:d1:eb:12:c3:cf:a2:04: 8c:21:a6:55:a3:b0:83:d1:31:d0:5a:fa:66:b3:1d: 8f:7b:28:88:55:a3:90:33:c3:f6:61:8e:f6:da:17: 9e:82:9e:3a:d1:62:7f:93:8e:04:c0:cf:e9:78:d3: 3c:f3:2b:56:20:b1:e1:33:b2:46:88:cf:02:75:f1: 69:fd:6d:8e:0f:ce:9e:b1:ae:29:4b:74:28:dc:d8: 0f:93:bc:14:72:27:94:63:79:c2:b8:21:22:82:d8: 28:55:d2:11:b9:35:b7:c9:d6:c6:8a:25:69:b6:84: b6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:00:BB:E9:F8:10:CE:6B:57:5D:DE:34:97:1E:A9:EE:29:39:74:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b553a2c7-55db-3f83-aa1a-8a56b8b78a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b62::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:87:b8:3c:db:8d:fa:36:08:2b:49:61:40:d8:34:85:db:6d: 8b:8f:39:e3:e1:ef:43:f1:c2:67:9f:4c:d8:ee:d1:1d:4a:8b: cf:1f:d5:d1:27:1c:2e:5d:b9:de:74:d4:df:94:c9:5d:02:de: 9e:c8:89:5c:3e:60:1e:d1:cc:b6:bc:de:a5:23:fc:dd:e5:e5: f8:02:0a:1f:5d:2b:6f:3e:cd:70:49:41:c4:53:cc:b2:6f:79: 35:08:2b:72:f5:a5:33:59:3a:2c:13:6d:b7:07:70:1f:a3:59: fb:3a:8c:d1:00:3c:73:86:bd:b4:91:3d:eb:61:6c:9c:cc:36: 63:07:7b:a7:a7:58:a9:ef:e3:95:9f:ed:24:84:f5:cc:c2:a8: a7:cb:2c:dd:15:a2:1b:6a:9c:93:4e:5d:3a:cb:40:e1:c3:09: f5:f4:63:8a:ec:e1:77:09:6f:70:ff:b5:50:93:2d:24:b6:a8: 3d:0b:1e:e6:85:30:4e:47:83:33:0b:be:91:83:58:c2:28:70: c4:01:4b:ca:c5:1e:cb:3f:1c:e1:66:e3:ab:5b:24:3e:fa:63: 12:dc:26:30:4e:1d:97:a5:41:77:4e:45:d2:e8:49:9d:76:02: ff:b6:dc:92:17:fd:06:c2:57:6d:4a:cf:33:01:06:81:97:41: 94:f3:d7:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8Z/P65qQ/juo3Nm+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk MzFhZTcyYTItNmRmOC00YmYyLWE4ODItMmY5ZTI5M2U3YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiI1F9YBR4AEy9tyovWJRFTb7RzFf3hKIMBWK NZegEB+FEBvrBA4OeHThnmc0csV7Eb5q3E3SHVCsSMxmNam0G4DvdyenwnGtDE5q X+XLiYNoL0XNhwQ+vaLMdDo3fQL/AQd5qi03u4ov/KJgz461upf9w1Pg9kAeFhjN wwUczsnAFQNmAxnVj4SAeWmsf9HrEsPPogSMIaZVo7CD0THQWvpmsx2PeyiIVaOQ M8P2YY722heegp460WJ/k44EwM/peNM88ytWILHhM7JGiM8CdfFp/W2OD86esa4p S3Qo3NgPk7wUcieUY3nCuCEigtgoVdIRuTW3ydbGiiVptoS2wwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFgAu+n4EM5rV13eNJceqe4pOXT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjU1M2EyYzctNTVkYi0z ZjgzLWFhMWEtOGE1NmI4Yjc4YTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAti MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAASHuDzbjfo2CCtJYUDYNIXbbYuPOePh70PxwmefTNju0R1Ki88f 1dEnHC5dud501N+UyV0C3p7IiVw+YB7RzLa83qUj/N3l5fgCCh9dK28+zXBJQcRT zLJveTUIK3L1pTNZOiwTbbcHcB+jWfs6jNEAPHOGvbSRPethbJzMNmMHe6enWKnv 45Wf7SSE9czCqKfLLN0VohtqnJNOXTrLQOHDCfX0Y4rs4XcJb3D/tVCTLSS2qD0L HuaFME5HgzMLvpGDWMIocMQBS8rFHss/HOFm46tbJD76YxLcJjBOHZelQXdORdLo SZ12Av+23JIX/QbCV21KzzMBBoGXQZTz13I= -----END CERTIFICATE-----Generated at Wed Sep 9 03:41:59 2026 by rpki-client