$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa File: 132b22f4-2cb9-3d60-add7-7e81814fea2e.roa (raw, json) Hash identifier: lHH+ULfIzDUCdbmaau+0slB2CCkhFtxEu9g0hVhm97Y= Subject key identifier: 2F:30:6A:71:78:D6:14:8B:CF:69:98:72:F3:65:71:96:DC:A8:4E:79 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BBFA5A15505EDFB5ECE1F9800 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa Signing time: Tue 04 Nov 2025 14:00:39 +0000 ROA not before: Tue 04 Nov 2025 14:00:39 +0000 ROA not after: Mon 02 Feb 2026 14:00:39 +0000 asID: 3356 IP address blocks: 2607:f028:111::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a5:a1:55:05:ed:fb:5e:ce:1f:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Nov 4 14:00:39 2025 GMT Not After : Feb 2 14:00:39 2026 GMT Subject: CN=dcdd4762-c617-481d-8f25-33f9d79f1ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:07:69:ce:d3:25:37:88:8e:52:02:0d:39:1c: 4f:e9:19:9e:e5:43:82:e1:0f:13:c4:ed:cd:f1:87: ce:86:f3:9f:f3:eb:63:ae:db:4a:08:ca:8c:97:80: 78:88:43:cc:0c:5d:c3:36:d5:3f:19:92:74:b3:bc: 57:a9:44:da:95:78:43:16:89:8b:60:36:2b:32:cd: 3d:cb:37:78:f4:0d:6a:39:43:dd:55:dd:53:1a:25: 71:0c:6f:3f:d0:d2:8a:8b:5b:20:04:80:fa:b5:31: 8f:44:6d:be:10:37:13:68:d2:5b:fe:69:08:7c:d1: 87:3e:30:f9:62:08:5e:db:1c:b6:96:99:2a:b3:e7: 42:87:95:fc:c1:06:de:30:29:d7:ab:23:2f:aa:79: 7b:ee:8a:77:cf:78:b0:e9:6b:92:df:b7:97:2d:b4: 69:0b:77:6f:6b:d6:7a:19:86:41:54:af:04:57:1f: fc:a1:4c:3d:09:48:17:3e:93:2d:e9:09:7e:63:29: 6b:07:1e:15:18:fa:d7:9b:b3:37:7c:80:49:5c:9e: 55:2c:52:d5:74:0a:1c:75:ff:52:13:88:d8:a7:10: f9:dc:c9:55:49:b0:aa:a2:b7:3d:b3:92:e9:e6:cd: aa:4d:c9:f4:b9:c0:47:a0:df:6d:3e:ff:76:ee:85: 3b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:30:6A:71:78:D6:14:8B:CF:69:98:72:F3:65:71:96:DC:A8:4E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/132b22f4-2cb9-3d60-add7-7e81814fea2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:111::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:93:0f:cf:2f:8e:fa:e0:cf:34:ad:73:28:b6:52:4f:36:44: bf:ab:5c:29:b3:1e:f6:fc:34:63:ac:08:83:f6:90:d3:70:96: ec:89:7e:09:28:a2:a4:9e:f1:31:0f:a1:1c:3d:a3:35:a3:0f: ba:cd:bf:68:78:ed:a3:d4:3c:a1:8e:72:fc:1e:80:08:94:a0: 28:aa:dc:18:15:36:d3:f1:aa:68:7d:1b:1c:dc:dc:88:40:92: ad:ea:41:f3:3d:59:71:e0:c4:93:a6:22:c3:fe:0c:14:04:ea: 3f:67:e4:18:61:8f:7c:02:d7:d3:68:fd:66:25:57:75:55:9f: 1a:29:29:e7:9d:bd:45:07:1d:cb:25:49:5c:7f:49:37:31:1a: 7c:f9:a4:35:56:f5:f9:47:11:42:7e:d4:9c:0f:c4:a8:73:95: d1:68:06:fe:9e:7a:da:6b:95:0b:45:3b:68:09:8b:d5:9f:17: a1:c3:e2:04:b0:9c:3e:04:99:86:d1:de:e3:ab:7f:d2:86:6f: ec:1e:0f:93:29:4c:c5:70:36:62:34:2f:c0:09:84:49:e3:d9: 12:6f:05:5d:56:34:14:9d:8e:3b:4e:10:f4:eb:98:86:4b:86: 45:33:99:31:30:16:03:76:e0:1a:c7:0a:74:b9:a0:a9:27:cc: e6:70:d6:7c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu/paFVBe37Xs4fmAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTEwNDE0MDAzOVoXDTI2MDIwMjE0MDAzOVowLzEtMCsGA1UEAxMk ZGNkZDQ3NjItYzYxNy00ODFkLThmMjUtMzNmOWQ3OWYxZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAigdpztMlN4iOUgINORxP6Rme5UOC4Q8TxO3N 8YfOhvOf8+tjrttKCMqMl4B4iEPMDF3DNtU/GZJ0s7xXqUTalXhDFomLYDYrMs09 yzd49A1qOUPdVd1TGiVxDG8/0NKKi1sgBID6tTGPRG2+EDcTaNJb/mkIfNGHPjD5 Yghe2xy2lpkqs+dCh5X8wQbeMCnXqyMvqnl77op3z3iw6WuS37eXLbRpC3dva9Z6 GYZBVK8EVx/8oUw9CUgXPpMt6Ql+YylrBx4VGPrXm7M3fIBJXJ5VLFLVdAocdf9S E4jYpxD53MlVSbCqorc9s5Lp5s2qTcn0ucBHoN9tPv927oU7/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC8wanF41hSLz2mYcvNlcZbcqE55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTMyYjIyZjQtMmNiOS0z ZDYwLWFkZDctN2U4MTgxNGZlYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAER MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHCTD88vjvrgzzStcyi2Uk82RL+rXCmzHvb8NGOsCIP2kNNwluyJ fgkooqSe8TEPoRw9ozWjD7rNv2h47aPUPKGOcvwegAiUoCiq3BgVNtPxqmh9Gxzc 3IhAkq3qQfM9WXHgxJOmIsP+DBQE6j9n5Bhhj3wC19No/WYlV3VVnxopKeedvUUH HcslSVx/STcxGnz5pDVW9flHEUJ+1JwPxKhzldFoBv6eetprlQtFO2gJi9WfF6HD 4gSwnD4EmYbR3uOrf9KGb+weD5MpTMVwNmI0L8AJhEnj2RJvBV1WNBSdjjtOEPTr mIZLhkUzmTEwFgN24BrHCnS5oKknzOZw1nw= -----END CERTIFICATE-----Generated at Tue Nov 4 21:04:41 2025 by rpki-client