$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/13d04436-a1de-328b-98e7-ef93706f3961.roa File: 13d04436-a1de-328b-98e7-ef93706f3961.roa (raw, json) Hash identifier: 61Tg4CfMgmSQ5tlrwGNnGtKtef+XwqV8zXciPej3sTI= Subject key identifier: 50:40:D7:4E:AF:51:13:9E:FE:8B:C0:DD:2E:C7:0C:48:BA:29:51:C9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D29D7BD0096CC1D84C980 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/13d04436-a1de-328b-98e7-ef93706f3961.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 3360 IP address blocks: 2607:f028:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:29:d7:bd:00:96:cc:1d:84:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=5f70feb9-adaf-498b-981e-7f2599989e81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d1:e8:54:b6:5a:3f:e1:26:b5:31:53:b5:4e: fd:eb:69:7a:64:83:a4:09:85:15:4e:d6:09:9c:77: 94:db:f5:47:b3:c2:66:2a:dd:e3:b8:ba:a8:a8:cc: 8e:26:ac:0b:ae:e0:dd:b4:98:2c:05:97:ac:36:76: 9c:99:57:15:33:08:2a:20:6c:88:02:80:3e:34:23: 26:c8:b2:55:e1:d6:b0:29:73:4c:fb:06:00:a7:70: 70:76:d1:1e:86:f5:51:a6:ed:36:ca:b6:d3:93:6f: 7c:ce:f5:e2:c2:d6:c4:d8:2b:97:31:9c:64:87:24: 09:09:20:22:6a:83:c0:52:7e:fc:cc:d1:73:a3:58: 6e:9e:7a:27:a4:8f:58:3e:50:8a:0b:43:b5:0b:72: 15:60:90:22:5c:d2:7f:ee:56:b7:bd:6d:c7:a2:eb: 2a:97:a7:35:45:0e:cb:cd:b3:5c:9f:b0:e8:3e:91: 1c:27:2d:06:35:c1:62:10:ed:b3:0a:fa:86:a1:68: b6:71:19:6b:c1:91:25:b5:6a:a3:c2:45:c4:c0:37: 62:71:02:81:d8:57:a4:8f:a1:1e:0c:d7:27:e3:11: f4:5d:22:6d:c0:42:76:68:ad:bc:61:71:6a:11:d7: 3d:f8:ec:85:7b:42:6e:91:24:9a:be:e4:cb:11:be: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:40:D7:4E:AF:51:13:9E:FE:8B:C0:DD:2E:C7:0C:48:BA:29:51:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/13d04436-a1de-328b-98e7-ef93706f3961.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d7:bf:40:5e:9b:fe:2d:3f:33:0e:78:f4:fb:34:83:bc:75: 59:0c:91:04:89:e2:d1:20:0b:ba:3f:ee:ce:0e:09:ef:8a:7b: e1:15:e8:f2:f5:52:7b:2b:0a:ef:f0:e4:d9:bd:ab:c2:2d:e0: 6c:11:c7:95:9b:20:98:51:f7:62:36:c4:56:48:f5:4a:15:29: 31:9e:f8:39:e5:31:ba:25:4f:d0:56:18:2a:7c:be:a2:38:e2: c1:2e:af:8c:8d:d7:4a:2f:85:56:22:c8:03:83:9d:1d:94:cd: f0:97:3c:8e:7a:d7:90:03:4f:ea:9d:30:09:4b:40:34:01:23: bc:10:07:77:b2:04:fd:5c:93:a7:97:36:52:56:55:2c:2f:ef: 7e:29:38:7f:ac:9f:ef:5c:6f:9c:24:60:17:fc:69:b8:f5:be: ee:b5:ca:54:29:99:50:b1:77:e7:54:87:63:29:e7:32:f8:c3: 9e:d3:49:e4:67:3a:40:12:72:ed:bc:d4:13:5e:75:78:a5:d5: 07:a4:49:1b:18:8b:ee:f3:d3:c4:15:22:b9:38:e0:09:dc:69: 7b:1c:1f:e7:4a:b4:69:5a:70:a4:df:4d:ad:ad:59:68:37:1d: 72:df:2f:51:b1:d8:4c:94:b9:9f:d8:b3:f4:4a:45:57:14:1e: a0:8b:7c:21 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSnXvQCWzB2EyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NWY3MGZlYjktYWRhZi00OThiLTk4MWUtN2YyNTk5OTg5ZTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9HoVLZaP+EmtTFTtU7962l6ZIOkCYUVTtYJ nHeU2/VHs8JmKt3juLqoqMyOJqwLruDdtJgsBZesNnacmVcVMwgqIGyIAoA+NCMm yLJV4dawKXNM+wYAp3BwdtEehvVRpu02yrbTk298zvXiwtbE2CuXMZxkhyQJCSAi aoPAUn78zNFzo1hunnonpI9YPlCKC0O1C3IVYJAiXNJ/7la3vW3Housql6c1RQ7L zbNcn7DoPpEcJy0GNcFiEO2zCvqGoWi2cRlrwZEltWqjwkXEwDdicQKB2Fekj6Ee DNcn4xH0XSJtwEJ2aK28YXFqEdc9+OyFe0JukSSavuTLEb4o1QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFBA106vUROe/ovA3S7HDEi6KVHJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMTNkMDQ0MzYtYTFkZS0z MjhiLTk4ZTctZWY5MzcwNmYzOTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGXXv0Bem/4tPzMOePT7NIO8dVkMkQSJ4tEgC7o/7s4OCe+Ke+EV 6PL1UnsrCu/w5Nm9q8It4GwRx5WbIJhR92I2xFZI9UoVKTGe+DnlMbolT9BWGCp8 vqI44sEur4yN10ovhVYiyAODnR2UzfCXPI5615ADT+qdMAlLQDQBI7wQB3eyBP1c k6eXNlJWVSwv734pOH+sn+9cb5wkYBf8abj1vu61ylQpmVCxd+dUh2Mp5zL4w57T SeRnOkAScu281BNedXil1QekSRsYi+7z08QVIrk44AncaXscH+dKtGlacKTfTa2t WWg3HXLfL1Gx2EyUuZ/Ys/RKRVcUHqCLfCE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:59 2025 by rpki-client