$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eafdc91e-bf28-3670-b8f7-b725ece3a88e.roa File: eafdc91e-bf28-3670-b8f7-b725ece3a88e.roa (raw, json) Hash identifier: BueKCuXVkGk5rq5XDiuq+itYuAQzlUIl+NFbevhj5Lo= Subject key identifier: 40:93:4E:36:AA:36:0E:F7:9F:8F:BE:3F:76:11:5F:B6:96:46:99:41 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6DA7AB194C20E60B280E200 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eafdc91e-bf28-3670-b8f7-b725ece3a88e.roa Signing time: Wed 12 Nov 2025 21:30:54 +0000 ROA not before: Wed 12 Nov 2025 21:30:54 +0000 ROA not after: Tue 10 Feb 2026 21:30:54 +0000 asID: 203 IP address blocks: 2607:f028:b11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:da:7a:b1:94:c2:0e:60:b2:80:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:30:54 2025 GMT Not After : Feb 10 21:30:54 2026 GMT Subject: CN=9107a6fe-9763-48f0-a464-b9db54d8c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:ff:be:42:46:5b:26:17:01:12:29:a1:a2:7c: 8e:45:1e:87:25:f6:a3:73:14:23:15:af:b4:45:35: 0c:02:35:b6:d3:8c:a3:90:23:51:8b:52:2c:76:ff: 8c:d0:12:13:d6:19:0b:04:55:6e:cc:72:5c:40:1d: 6c:66:65:23:1a:76:c5:6d:95:6f:a6:42:e5:3a:07: 27:70:66:fa:24:a5:78:af:7b:f9:19:0b:af:e6:61: 83:35:3c:6c:b1:2e:4d:56:bb:4f:7e:63:a4:b8:94: 95:6e:32:2f:4d:fd:15:7d:09:90:6b:b7:9c:4e:86: c7:59:0d:2c:dc:28:b4:66:82:05:83:10:63:85:c1: 1e:9a:53:4e:75:4f:05:8c:a6:e1:23:78:dd:d9:2f: 5e:a5:35:c6:9a:a6:d6:4c:3b:68:9a:d6:0b:f0:6f: 3a:21:be:2f:37:d2:c5:a9:7d:8b:d7:3d:a3:cd:67: e5:e9:2b:c3:17:7a:ac:15:22:7f:ad:e6:1c:1a:63: 61:c5:de:65:fe:5a:b2:87:5c:0c:0d:99:38:c2:5d: 26:c2:73:59:5a:29:23:42:4b:8f:4d:39:52:fc:f6: 1d:ba:0f:b1:7b:2e:8d:4b:5b:4a:36:70:91:d8:2b: 03:2a:71:d0:3d:f7:23:a6:a7:71:10:aa:ad:69:44: 3f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:93:4E:36:AA:36:0E:F7:9F:8F:BE:3F:76:11:5F:B6:96:46:99:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/eafdc91e-bf28-3670-b8f7-b725ece3a88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:fa:4b:ae:20:bd:b3:89:9c:af:b4:74:0f:6a:b1:b8:9b:e9: 09:67:bd:c0:11:36:19:d6:13:ec:a3:c6:a3:67:99:89:23:6f: 49:b0:74:a6:d7:31:be:a2:58:7a:51:c5:37:07:aa:6e:e9:83: eb:da:25:44:9b:15:71:65:ec:f7:95:d7:ba:1c:22:b9:49:56: 21:a8:cd:7c:9a:84:cc:d3:78:26:a3:5f:b1:a0:23:49:1b:7a: 67:31:63:5b:89:8a:52:77:87:d9:41:ea:a5:43:d7:64:a9:c5: 9b:ff:a5:ab:9b:e5:3b:7a:65:9a:db:24:48:05:34:9a:02:db: 6d:d0:65:1e:d3:1d:77:8e:ce:5e:bd:15:13:78:67:70:7b:d3: 7f:03:fa:57:1b:9c:f8:ce:f7:50:00:76:df:81:69:43:11:b2: 24:ad:57:c2:a4:ec:ab:38:82:27:3f:4f:bd:df:88:86:e9:c7: 0f:2c:5d:4a:58:64:28:34:b7:7a:8d:8b:9c:50:20:a6:61:fe: b2:3f:fc:51:86:86:31:85:8a:43:5f:95:eb:f2:de:f8:f9:93: 69:64:57:92:90:6b:68:26:03:a9:2b:03:f7:ec:22:7e:fc:a5: 16:d9:91:b4:be:fe:c3:b9:9c:75:d0:21:60:e9:fe:c7:99:e1: d1:f5:1b:73 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW2nqxlMIOYLKA4gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxMzA1NFoXDTI2MDIxMDIxMzA1NFowLzEtMCsGA1UEAxMk OTEwN2E2ZmUtOTc2My00OGYwLWE0NjQtYjlkYjU0ZDhjMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/++QkZbJhcBEimhonyORR6HJfajcxQjFa+0 RTUMAjW204yjkCNRi1Isdv+M0BIT1hkLBFVuzHJcQB1sZmUjGnbFbZVvpkLlOgcn cGb6JKV4r3v5GQuv5mGDNTxssS5NVrtPfmOkuJSVbjIvTf0VfQmQa7ecTobHWQ0s 3Ci0ZoIFgxBjhcEemlNOdU8FjKbhI3jd2S9epTXGmqbWTDtomtYL8G86Ib4vN9LF qX2L1z2jzWfl6SvDF3qsFSJ/reYcGmNhxd5l/lqyh1wMDZk4wl0mwnNZWikjQkuP TTlS/PYdug+xey6NS1tKNnCR2CsDKnHQPfcjpqdxEKqtaUQ/fQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFECTTjaqNg73n4++P3YRX7aWRplBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZWFmZGM5MWUtYmYyOC0z NjcwLWI4ZjctYjcyNWVjZTNhODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFP6S64gvbOJnK+0dA9qsbib6QlnvcARNhnWE+yjxqNnmYkjb0mw dKbXMb6iWHpRxTcHqm7pg+vaJUSbFXFl7PeV17ocIrlJViGozXyahMzTeCajX7Gg I0kbemcxY1uJilJ3h9lB6qVD12SpxZv/paub5Tt6ZZrbJEgFNJoC223QZR7THXeO zl69FRN4Z3B7038D+lcbnPjO91AAdt+BaUMRsiStV8Kk7Ks4gic/T73fiIbpxw8s XUpYZCg0t3qNi5xQIKZh/rI//FGGhjGFikNflevy3vj5k2lkV5KQa2gmA6krA/fs In78pRbZkbS+/sO5nHXQIWDp/seZ4dH1G3M= -----END CERTIFICATE-----Generated at Mon Nov 17 18:15:36 2025 by rpki-client