$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa File: 1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa (raw, json) Hash identifier: 3FD8KxHcVfMGwfvWwEeflp59aexi8KQUQLM6QGSZWHw= Subject key identifier: 3A:9B:B8:10:C1:C6:32:B4:24:32:E2:EE:AC:BA:BC:E8:22:24:9C:64 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D2A8A0CB7683D101D14C0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 2607:f028:71::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:2a:8a:0c:b7:68:3d:10:1d:14:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=90c2a6dc-58fe-407b-b78d-caa32eb48cd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a0:fb:d5:fd:d7:0c:b7:82:66:3e:8e:55:b9: 34:56:52:26:d6:99:9c:a6:48:08:f0:83:eb:f7:6b: d9:0e:e7:bc:3c:5b:48:ba:a5:1a:33:3c:4a:a7:16: c3:5a:56:11:c5:bc:c4:4d:3d:3b:c6:6b:b8:d5:dd: 13:de:66:1a:5a:32:0a:82:b2:ad:bb:82:0a:15:8b: a1:3a:95:4b:15:17:a8:3f:17:9a:bc:31:15:4d:da: 3a:50:a7:51:62:cd:79:1b:47:9d:4a:72:b7:fc:b0: 79:a4:94:4f:60:94:32:be:f0:57:2b:58:40:e6:94: c5:7f:65:63:37:5c:a5:40:67:a7:8d:8b:d0:f1:4e: 73:1b:49:60:54:72:f5:97:c1:bc:a3:39:7f:9b:33: 37:82:a5:c6:4e:8a:7b:61:1a:7a:a1:66:eb:2e:3e: 18:a0:46:48:c2:70:25:f8:4e:e3:5c:f5:8b:f2:97: 13:45:4a:d2:8b:99:d6:e0:88:cc:13:04:fc:1c:e9: ba:8f:8f:ca:86:6b:e2:ec:c8:73:8d:02:f0:72:62: 70:54:45:2c:1d:89:8c:24:dc:42:32:b1:6a:bc:13: 08:33:eb:e3:7b:ba:8e:be:fb:5d:d6:c8:bc:21:a7: ce:35:b1:f3:c5:0d:32:a3:a8:68:56:e7:f6:6b:f0: b0:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:9B:B8:10:C1:C6:32:B4:24:32:E2:EE:AC:BA:BC:E8:22:24:9C:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/1ca9f5cb-6cc0-309d-ab60-3f50a8dfb322.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:71::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:54:a6:5d:9f:45:e7:13:58:16:4a:37:50:8d:f2:85:c7:e9: d4:45:30:3d:55:93:9d:22:a8:44:68:24:8a:89:b1:d4:69:eb: b7:51:87:ee:c5:da:21:97:9e:d0:df:f1:38:82:76:66:b4:b0: 67:9b:65:f2:84:3f:a2:9c:04:72:b9:72:3d:5e:64:71:6d:b5: ea:a6:33:92:21:c2:f3:28:58:9c:82:15:7c:3c:7d:b9:20:a4: a5:6f:f7:9a:dc:1d:c1:3f:15:2d:1a:8b:1d:0c:cf:78:73:c6: 74:b1:2a:6d:20:93:e1:ef:51:98:cf:48:f8:2f:4d:5a:a2:6e: e8:25:7e:db:70:07:9e:22:44:6a:31:03:71:ae:97:d5:83:6a: 54:3d:88:21:0c:da:a7:2b:b7:9f:93:f6:22:fa:6f:c0:ce:9b: 03:c8:02:e5:71:7a:7b:4f:73:97:19:5a:71:e9:06:ef:c0:9b: f2:a0:4e:23:3d:f8:f9:38:e1:d6:71:8a:8e:ed:a7:cf:ae:99: 96:27:f7:44:ec:30:f2:27:6c:2d:8f:b4:cf:63:20:3a:14:d4: be:f1:f5:3d:3f:52:a9:6f:3b:ef:d5:cd:a9:d2:f8:7b:bc:9e: e3:f9:75:d1:6a:1f:cb:25:4e:a6:9e:f1:aa:b1:7d:bd:53:50: e8:b1:f4:c7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSqKDLdoPRAdFMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OTBjMmE2ZGMtNThmZS00MDdiLWI3OGQtY2FhMzJlYjQ4Y2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6KD71f3XDLeCZj6OVbk0VlIm1pmcpkgI8IPr 92vZDue8PFtIuqUaMzxKpxbDWlYRxbzETT07xmu41d0T3mYaWjIKgrKtu4IKFYuh OpVLFReoPxeavDEVTdo6UKdRYs15G0edSnK3/LB5pJRPYJQyvvBXK1hA5pTFf2Vj N1ylQGenjYvQ8U5zG0lgVHL1l8G8ozl/mzM3gqXGTop7YRp6oWbrLj4YoEZIwnAl +E7jXPWL8pcTRUrSi5nW4IjMEwT8HOm6j4/Khmvi7MhzjQLwcmJwVEUsHYmMJNxC MrFqvBMIM+vje7qOvvtd1si8IafONbHzxQ0yo6hoVuf2a/CwpwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDqbuBDBxjK0JDLi7qy6vOgiJJxkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMWNhOWY1Y2ItNmNjMC0z MDlkLWFiNjAtM2Y1MGE4ZGZiMzIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABx MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAC1Upl2fRecTWBZKN1CN8oXH6dRFMD1Vk50iqERoJIqJsdRp67dR h+7F2iGXntDf8TiCdma0sGebZfKEP6KcBHK5cj1eZHFtteqmM5IhwvMoWJyCFXw8 fbkgpKVv95rcHcE/FS0aix0Mz3hzxnSxKm0gk+HvUZjPSPgvTVqibuglfttwB54i RGoxA3Gul9WDalQ9iCEM2qcrt5+T9iL6b8DOmwPIAuVxentPc5cZWnHpBu/Am/Kg TiM9+Pk44dZxio7tp8+umZYn90TsMPInbC2PtM9jIDoU1L7x9T0/UqlvO+/VzanS +Hu8nuP5ddFqH8slTqae8aqxfb1TUOix9Mc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:28:41 2025 by rpki-client