$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa File: 1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa (raw, json) Hash identifier: q4h0oF/W4aF0G2gsUv/d9gEXrcCujsft5hTzyGy3k8o= Subject key identifier: 8E:78:57:97:AE:C1:C4:F1:67:FA:E1:5A:2E:19:69:81:D1:1D:28:5A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2AD4DC168097EFF2AFE0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 2607:f028:72::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2a:d4:dc:16:80:97:ef:f2:af:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=c9863822-bb2d-41fd-ab89-dc31ccd9d8ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:3a:33:be:55:a8:6d:73:79:1b:4b:f8:13:a2: a1:50:c1:05:4f:f4:1b:82:ce:41:11:01:01:c8:b5: 19:1e:ba:ca:43:c0:32:e6:1b:87:f6:5d:81:04:21: c1:3f:cb:46:82:2c:e2:8a:8a:71:63:46:c5:86:bb: e0:35:cc:50:1b:5f:f7:1b:a3:e0:53:e1:57:6a:62: 11:78:18:18:e2:0f:fa:b2:50:0b:4c:37:55:88:b4: fa:77:85:b5:0f:f5:bd:88:be:9f:b6:e5:91:38:c9: c4:3e:88:12:0d:0d:64:c6:be:f0:b1:75:fe:ba:70: c6:4f:43:c0:92:0f:e4:05:b1:28:3e:1d:29:6f:88: 9d:dd:2d:69:b5:e0:2c:36:45:29:60:f2:54:76:5c: 8c:f4:f4:f1:8e:f7:e0:22:e4:cc:8b:73:55:48:ec: 24:c1:0b:11:34:f0:6b:06:1f:cb:89:53:51:c6:7c: 85:23:f5:d6:5d:06:4c:05:2a:ee:c1:56:6e:fa:9b: c0:9d:75:91:b4:f6:ca:5b:cd:d5:92:f6:b1:9a:f6: da:47:ef:a1:93:43:56:c9:9b:85:ab:df:e8:94:69: a6:f4:eb:60:0e:f4:f0:1b:93:46:e5:90:4f:bc:9f: ab:aa:76:53:87:03:2f:56:61:10:fb:86:b1:98:cb: c0:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:78:57:97:AE:C1:C4:F1:67:FA:E1:5A:2E:19:69:81:D1:1D:28:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1c0d2452-9b55-3695-b35b-a6d65bba0a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:72::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:f6:a0:4d:a7:a8:6f:51:9a:e2:84:49:31:be:76:4d:4b:3e: f3:0c:fd:10:16:68:fa:fe:33:48:21:6c:aa:f8:36:c0:41:06: 78:1c:d6:79:dc:a3:97:1a:22:01:bd:a1:bb:e4:12:ef:a4:6a: bf:8c:50:47:d9:73:fc:b5:73:d2:c2:1d:38:6f:c6:4a:03:56: fb:e9:9e:32:75:3f:ef:6e:c9:50:4b:2c:b3:66:f6:87:1a:09: 9f:ba:ad:57:b6:13:39:4d:9c:d4:5d:a1:44:a8:d0:00:f0:92: 19:a3:87:cd:94:51:2a:ca:a0:7a:e1:ef:97:53:e8:82:6a:c7: 48:9d:fb:8a:09:cc:f0:da:b5:eb:8c:4b:49:32:b9:ba:70:78: 35:b0:5c:da:22:4d:0e:b9:cc:c9:35:e6:34:43:c9:3b:ad:20: fa:a4:7e:c9:8b:04:20:9e:59:54:d2:d3:a2:07:5a:32:e3:8d: 93:7d:23:f2:29:6d:18:a9:e3:21:7d:d4:46:36:11:95:fe:81: d7:42:66:3d:80:dd:93:3e:49:c0:f6:1d:f2:f8:58:0b:eb:33: ef:a1:d7:b1:30:c4:af:0d:69:df:78:20:da:8c:01:5a:2a:42: 4f:12:2b:0b:f4:bc:75:e3:d9:fa:2a:b0:c9:4b:78:dc:1a:f6: 4e:05:ea:72 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSrU3BaAl+/yr+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk Yzk4NjM4MjItYmIyZC00MWZkLWFiODktZGMzMWNjZDlkOGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjozvlWobXN5G0v4E6KhUMEFT/Qbgs5BEQEB yLUZHrrKQ8Ay5huH9l2BBCHBP8tGgiziiopxY0bFhrvgNcxQG1/3G6PgU+FXamIR eBgY4g/6slALTDdViLT6d4W1D/W9iL6ftuWROMnEPogSDQ1kxr7wsXX+unDGT0PA kg/kBbEoPh0pb4id3S1pteAsNkUpYPJUdlyM9PTxjvfgIuTMi3NVSOwkwQsRNPBr Bh/LiVNRxnyFI/XWXQZMBSruwVZu+pvAnXWRtPbKW83VkvaxmvbaR++hk0NWyZuF q9/olGmm9OtgDvTwG5NG5ZBPvJ+rqnZThwMvVmEQ+4axmMvA+QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI54V5euwcTxZ/rhWi4ZaYHRHShaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWMwZDI0NTItOWI1NS0z Njk1LWIzNWItYTZkNjViYmEwYTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABy MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEL2oE2nqG9RmuKESTG+dk1LPvMM/RAWaPr+M0ghbKr4NsBBBngc 1nnco5caIgG9obvkEu+kar+MUEfZc/y1c9LCHThvxkoDVvvpnjJ1P+9uyVBLLLNm 9ocaCZ+6rVe2EzlNnNRdoUSo0ADwkhmjh82UUSrKoHrh75dT6IJqx0id+4oJzPDa teuMS0kyubpweDWwXNoiTQ65zMk15jRDyTutIPqkfsmLBCCeWVTS06IHWjLjjZN9 I/IpbRip4yF91EY2EZX+gddCZj2A3ZM+ScD2HfL4WAvrM++h17EwxK8Nad94INqM AVoqQk8SKwv0vHXj2foqsMlLeNwa9k4F6nI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:27:03 2025 by rpki-client