$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa File: f9b8ca72-f475-39d6-8911-8e23862af40f.roa (raw, json) Hash identifier: LSLe+df6NIDsyS+a/+Y3wHt8NvS0APrY7S+qzrkLlJY= Subject key identifier: 01:95:14:97:B1:D6:88:F9:29:F6:09:9E:DA:6A:E3:52:F9:1C:C5:40 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BD6D7DC8A5008ED499A513C40 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa Signing time: Wed 12 Nov 2025 21:25:37 +0000 ROA not before: Wed 12 Nov 2025 21:25:37 +0000 ROA not after: Tue 10 Feb 2026 21:25:37 +0000 asID: 86 IP address blocks: 2607:f028:86::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 19 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:d6:d7:dc:8a:50:08:ed:49:9a:51:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 12 21:25:37 2025 GMT Not After : Feb 10 21:25:37 2026 GMT Subject: CN=c7af41a1-c6fd-40ba-a3a8-1dd76ed95f00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d4:a1:f4:8d:35:c1:f3:e6:00:f1:88:01:d7: b1:91:39:8c:d9:70:7e:7e:39:b1:02:e8:ad:4d:eb: 13:06:d9:6b:08:92:f1:4c:53:1e:5b:cd:73:2b:eb: 39:4b:97:60:12:f5:ed:56:38:35:ff:e6:3a:35:02: 24:c3:99:3a:08:9e:ce:68:1d:03:a1:0a:12:98:b8: 57:ee:b5:ee:92:7e:2c:22:14:9d:28:b8:25:a8:e8: a3:a9:a6:47:95:fb:bf:37:89:66:f1:7f:b2:4e:77: 95:46:68:8d:e8:e4:69:04:47:40:af:35:83:29:17: 62:03:20:42:a9:bb:1c:cc:14:26:2e:5f:92:e5:36: 25:25:ce:ef:f0:80:29:bb:86:c3:6a:d6:f0:e5:99: bd:de:2a:24:90:fd:91:26:a1:97:49:89:56:16:0a: 03:17:40:73:f3:94:71:f8:64:ae:e1:e0:c1:61:c6: 8d:9b:db:57:38:f2:c3:d4:72:0c:66:7b:c7:6c:77: 35:fe:05:c6:af:ea:fd:5d:c5:e4:14:85:fa:69:e7: 4a:6a:e1:b1:c0:de:0b:23:3d:b3:a1:21:5e:99:aa: f7:9f:3b:1b:0f:3d:35:44:11:3d:b3:3e:e0:09:1e: 9f:d1:e6:93:da:fb:a3:d5:58:d9:15:1d:9f:42:7a: c3:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:95:14:97:B1:D6:88:F9:29:F6:09:9E:DA:6A:E3:52:F9:1C:C5:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f9b8ca72-f475-39d6-8911-8e23862af40f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:86::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:77:15:10:e4:b2:77:90:96:13:92:a8:f4:68:69:45:71:91: 9e:2a:10:97:06:bd:2e:10:76:ca:3c:69:69:58:44:ad:e4:92: 95:e5:8c:b7:8b:ed:36:46:6a:38:a5:a6:5b:c0:cb:a4:12:57: 6d:e8:7b:31:76:0e:8e:e4:45:ce:ec:44:bf:49:da:be:b1:75: 7f:b8:e0:04:a4:6b:49:24:b4:15:be:1f:57:6c:9d:1c:17:01: 36:74:17:30:26:0f:8e:89:a9:16:21:17:50:38:3f:44:8e:c3: 70:a4:89:e2:1c:8b:1d:1c:74:69:f5:c5:a0:b7:06:2a:d5:a8: 1c:a5:1f:10:b2:4e:87:9d:6b:82:22:e9:c1:10:e0:03:ba:b3: 9a:fd:22:8c:73:07:86:ef:7b:50:fc:83:52:0f:be:c6:32:16: 2e:f0:9a:1a:83:24:e6:a1:e0:c0:5d:5c:30:2d:d2:98:e4:ff: 8e:79:60:74:45:5c:47:e7:46:ee:3e:28:bd:66:9a:fd:63:e8: 83:b6:bc:21:d7:28:d0:12:88:6c:eb:b8:52:d7:7d:cf:89:2d: 6b:a7:35:e2:d8:81:f5:c2:13:86:cb:03:d8:b1:f9:ab:de:8f: 90:dd:80:f0:e7:96:17:8b:7f:87:b5:e6:ce:31:70:6c:a6:71: d9:3e:68:ed -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEvW19yKUAjtSZpRPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTExMjIxMjUzN1oXDTI2MDIxMDIxMjUzN1owLzEtMCsGA1UEAxMk YzdhZjQxYTEtYzZmZC00MGJhLWEzYTgtMWRkNzZlZDk1ZjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9Sh9I01wfPmAPGIAdexkTmM2XB+fjmxAuit TesTBtlrCJLxTFMeW81zK+s5S5dgEvXtVjg1/+Y6NQIkw5k6CJ7OaB0DoQoSmLhX 7rXukn4sIhSdKLglqOijqaZHlfu/N4lm8X+yTneVRmiN6ORpBEdArzWDKRdiAyBC qbsczBQmLl+S5TYlJc7v8IApu4bDatbw5Zm93iokkP2RJqGXSYlWFgoDF0Bz85Rx +GSu4eDBYcaNm9tXOPLD1HIMZnvHbHc1/gXGr+r9XcXkFIX6aedKauGxwN4LIz2z oSFemar3nzsbDz01RBE9sz7gCR6f0eaT2vuj1VjZFR2fQnrDowIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAGVFJex1oj5KfYJntpq41L5HMVAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjliOGNhNzItZjQ3NS0z OWQ2LTg5MTEtOGUyMzg2MmFmNDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACG MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEt3FRDksneQlhOSqPRoaUVxkZ4qEJcGvS4Qdso8aWlYRK3kkpXl jLeL7TZGajilplvAy6QSV23oezF2Do7kRc7sRL9J2r6xdX+44ASka0kktBW+H1ds nRwXATZ0FzAmD46JqRYhF1A4P0SOw3CkieIcix0cdGn1xaC3BirVqBylHxCyToed a4Ii6cEQ4AO6s5r9IoxzB4bve1D8g1IPvsYyFi7wmhqDJOah4MBdXDAt0pjk/455 YHRFXEfnRu4+KL1mmv1j6IO2vCHXKNASiGzruFLXfc+JLWunNeLYgfXCE4bLA9ix +avej5DdgPDnlheLf4e15s4xcGymcdk+aO0= -----END CERTIFICATE-----Generated at Mon Nov 17 18:07:38 2025 by rpki-client