$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf938b3a-2c7a-34a4-8e9a-f2bacb4d6bf3.roa File: bf938b3a-2c7a-34a4-8e9a-f2bacb4d6bf3.roa (raw, json) Hash identifier: 30PsySAmC59jKV3evoIXMUH79twkhE3wv5hHSz1+j/Q= Subject key identifier: 45:A7:A5:D7:CB:F4:43:D1:9F:8D:05:ED:8D:A0:A6:2F:E7:9E:AF:C7 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA6B00BE5A6C8D3764A80FB00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf938b3a-2c7a-34a4-8e9a-f2bacb4d6bf3.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 86 IP address blocks: 2607:f028:a40::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0b:e5:a6:c8:d3:76:4a:80:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=870a0748-9816-48f3-9bc4-ed192f521408 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a1:05:7a:a0:c3:7d:f1:b4:d8:95:7b:38:6d: d8:95:67:b5:bf:06:f7:77:a7:68:a9:51:f6:41:51: f1:c4:8a:8e:cc:f5:db:b1:e2:6f:25:b5:6c:66:18: 93:3b:b3:64:1c:f7:21:45:72:d8:c5:19:9b:03:b4: 20:c5:90:f3:da:c6:b6:f8:4a:b7:d0:94:4f:e6:d6: 70:fc:86:8d:e9:0b:e8:43:b9:53:5f:d7:3a:c3:91: 31:dc:3b:e4:20:22:48:7c:d6:72:36:8c:3f:3b:a8: 7d:96:1e:1b:94:e8:d4:31:92:43:e4:d2:48:0b:58: f8:39:8a:dc:fb:61:70:a5:c2:59:0b:0f:79:1c:bc: 19:94:4c:51:58:c2:78:56:cc:1e:82:99:c5:16:73: ed:80:48:20:32:75:d3:90:93:c2:5d:56:b0:03:e8: 90:4f:a9:75:2f:56:17:5e:00:49:f0:7a:28:10:d0: fd:91:9d:c6:c2:f7:83:44:85:cc:b3:09:10:cf:4a: b6:bb:96:9f:5a:1c:82:56:7c:ea:5d:c5:cb:1b:6c: 18:16:33:49:09:5c:22:5c:02:3c:b7:15:c4:43:e5: 20:64:83:af:6a:e2:d1:cd:dc:85:03:66:bf:b7:b0: 6a:20:9c:8e:5c:a2:fb:bf:6b:9e:36:a9:89:ac:f9: 9e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A7:A5:D7:CB:F4:43:D1:9F:8D:05:ED:8D:A0:A6:2F:E7:9E:AF:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/bf938b3a-2c7a-34a4-8e9a-f2bacb4d6bf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:a40::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:c0:81:67:f5:f7:4a:84:e1:bf:bf:57:00:c8:1a:ca:0a:b5: 78:c7:f7:b2:b9:31:58:c1:32:d0:70:b1:cd:bc:7a:4a:78:43: 59:fb:6a:62:83:2d:6d:27:2c:98:ad:5b:9b:b1:b3:44:ff:4d: 70:da:51:12:2d:c6:5a:ce:25:44:8a:d7:d3:2f:48:5f:05:13: ef:13:0f:25:b4:2f:eb:b0:45:77:2b:59:c0:86:8b:f2:b8:ff: 55:9f:41:61:32:88:ce:55:38:f6:56:1d:79:40:bd:f7:68:a1: 95:75:dc:af:5c:9a:49:c9:09:6b:14:0c:83:04:a6:d0:e4:4f: 24:8e:55:a8:c2:b7:02:fe:95:66:e5:19:7a:3a:97:f1:d1:a1: 6c:1d:6d:04:a4:07:c5:72:dd:ee:99:43:57:89:5a:36:8d:5a: 21:12:8e:dc:66:79:b9:60:4a:ea:e4:28:64:2b:18:d2:1e:5c: 82:d8:e1:dd:84:04:7e:2c:86:bf:2b:d5:c0:24:1c:9b:c1:a3: e6:28:8c:6b:a4:e9:3b:b4:8b:0d:29:73:a1:06:6e:03:0c:80: 73:79:4b:76:62:d2:a0:45:3e:3b:a6:2b:d9:ff:8b:0d:df:d8: 42:04:bd:3a:39:f5:ec:8e:b0:50:be:40:00:8a:75:34:d3:fe: 37:9f:aa:4f -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msAvlpsjTdkqA+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk ODcwYTA3NDgtOTgxNi00OGYzLTliYzQtZWQxOTJmNTIxNDA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqEFeqDDffG02JV7OG3YlWe1vwb3d6doqVH2 QVHxxIqOzPXbseJvJbVsZhiTO7NkHPchRXLYxRmbA7QgxZDz2sa2+Eq30JRP5tZw /IaN6QvoQ7lTX9c6w5Ex3DvkICJIfNZyNow/O6h9lh4blOjUMZJD5NJIC1j4OYrc +2FwpcJZCw95HLwZlExRWMJ4VswegpnFFnPtgEggMnXTkJPCXVawA+iQT6l1L1YX XgBJ8HooEND9kZ3GwveDRIXMswkQz0q2u5afWhyCVnzqXcXLG2wYFjNJCVwiXAI8 txXEQ+UgZIOvauLRzdyFA2a/t7BqIJyOXKL7v2ueNqmJrPmeFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEWnpdfL9EPRn40F7Y2gpi/nnq/HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYmY5MzhiM2EtMmM3YS0z NGE0LThlOWEtZjJiYWNiNGQ2YmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKApA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGfAgWf190qE4b+/VwDIGsoKtXjH97K5MVjBMtBwsc28ekp4Q1n7 amKDLW0nLJitW5uxs0T/TXDaURItxlrOJUSK19MvSF8FE+8TDyW0L+uwRXcrWcCG i/K4/1WfQWEyiM5VOPZWHXlAvfdooZV13K9cmknJCWsUDIMEptDkTySOVajCtwL+ lWblGXo6l/HRoWwdbQSkB8Vy3e6ZQ1eJWjaNWiESjtxmeblgSurkKGQrGNIeXILY 4d2EBH4shr8r1cAkHJvBo+YojGuk6Tu0iw0pc6EGbgMMgHN5S3Zi0qBFPjumK9n/ iw3f2EIEvTo59eyOsFC+QACKdTTT/jefqk8= -----END CERTIFICATE-----Generated at Sat May 9 17:32:21 2026 by rpki-client