$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa File: 2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa (raw, json) Hash identifier: hUo2QUqXXtC/X+fE4YcJUiedExQX9uZeWsqShf9UYzc= Subject key identifier: 81:A3:07:76:77:B9:6D:A2:AF:F6:04:25:D2:FA:47:3D:7A:10:EB:08 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D271213750D129BEA0070 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:27:12:13:75:0d:12:9b:ea:00:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=339b48b7-af68-4c90-97a3-be22a285cb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:80:20:aa:47:3e:a0:f2:5d:ee:0b:d7:ee:f9: 01:ee:5f:67:cf:b7:33:b9:34:c8:08:61:55:6e:0a: da:9d:30:4e:ce:4e:37:2c:b7:81:7d:7b:8f:74:93: 78:19:4f:40:ab:f8:6a:b0:e3:e9:d1:42:48:8f:31: 4b:75:f7:b6:97:a4:09:b2:04:a0:17:0d:fa:04:8b: ea:bb:e6:3e:87:d4:98:76:4a:02:c4:5a:53:8c:77: 0a:e9:6a:cc:df:45:4b:8e:cb:de:9b:b2:b7:3b:50: b1:47:2f:f4:b6:c2:ba:15:75:de:65:27:a0:57:57: 24:99:72:16:9e:75:c3:0e:f4:e6:31:cd:2d:8e:14: 04:ed:30:d5:79:0b:9b:48:d6:c6:73:d3:b1:47:f8: c8:8b:19:de:d1:35:2b:b9:bd:c3:86:83:69:5c:44: 14:18:44:91:ea:f2:a8:b5:0d:a0:00:e5:96:04:59: 97:52:2a:81:10:33:de:f8:6a:ad:2f:29:b4:55:69: 0e:16:25:07:80:31:33:4b:82:82:1b:7c:55:4c:0c: 01:5a:76:f8:9b:5e:b1:c9:65:b8:37:8e:e8:4b:f6: 7b:39:91:98:66:37:90:ef:eb:3e:2c:a2:f1:de:a5: 5c:bc:11:b9:00:18:18:8c:81:15:19:34:a3:98:07: f5:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:07:76:77:B9:6D:A2:AF:F6:04:25:D2:FA:47:3D:7A:10:EB:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:51:e1:4c:98:8f:88:2d:f2:ff:67:29:ca:a1:a8:fb:50:51: 0c:36:a4:c8:8e:98:b5:cf:3d:f8:fa:0f:f0:ab:61:b5:fa:62: f6:d2:b6:e4:8a:38:d1:7d:36:9a:e2:df:8e:88:3d:f6:10:d7: 39:4f:56:53:13:4b:e7:84:36:41:fb:ea:4a:ca:72:f7:d8:67: c9:77:60:be:29:b9:00:4c:38:fb:25:85:a2:54:3c:e8:6b:d9: 3a:1a:f1:38:3f:f2:cc:22:0b:ea:8f:97:a6:2f:e0:2d:31:60: 9f:a2:93:ed:2a:bb:65:e9:be:d3:e3:b2:ac:47:16:c0:51:74: d8:d8:fa:ae:df:37:a6:65:30:a0:ef:62:b6:41:f7:79:08:87: 3c:15:e8:33:3a:e2:9b:68:b7:81:f0:5c:50:ed:38:8c:4f:8a: e7:1e:0c:0d:80:04:f2:b2:30:fe:27:96:22:a0:8e:8d:9a:24: 57:32:4a:b7:8d:e4:48:11:ee:8b:b3:4e:f8:ba:99:08:83:8d: 91:54:e6:af:6b:1b:4a:76:28:cb:a3:63:c8:f8:cf:68:89:00: f4:0e:58:ec:30:4e:43:9c:0c:f4:87:fb:99:20:83:65:a3:06: 9a:f4:fd:f9:e5:69:b3:7f:14:e8:86:d8:92:c0:b5:a7:3a:9d: e8:ef:df:27 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XScSE3UNEpvqAHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk MzM5YjQ4YjctYWY2OC00YzkwLTk3YTMtYmUyMmEyODVjYjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYAgqkc+oPJd7gvX7vkB7l9nz7czuTTICGFV bgranTBOzk43LLeBfXuPdJN4GU9Aq/hqsOPp0UJIjzFLdfe2l6QJsgSgFw36BIvq u+Y+h9SYdkoCxFpTjHcK6WrM30VLjsvem7K3O1CxRy/0tsK6FXXeZSegV1ckmXIW nnXDDvTmMc0tjhQE7TDVeQubSNbGc9OxR/jIixne0TUrub3DhoNpXEQUGESR6vKo tQ2gAOWWBFmXUiqBEDPe+GqtLym0VWkOFiUHgDEzS4KCG3xVTAwBWnb4m16xyWW4 N47oS/Z7OZGYZjeQ7+s+LKLx3qVcvBG5ABgYjIEVGTSjmAf1vQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIGjB3Z3uW2ir/YEJdL6Rz16EOsIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjg5NWE1ZWMtNDUxYS0z ZjJiLWI5ZmMtMzdlYmY1MmRmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFVR4UyYj4gt8v9nKcqhqPtQUQw2pMiOmLXPPfj6D/CrYbX6YvbS tuSKONF9Npri346IPfYQ1zlPVlMTS+eENkH76krKcvfYZ8l3YL4puQBMOPslhaJU POhr2Toa8Tg/8swiC+qPl6Yv4C0xYJ+ik+0qu2XpvtPjsqxHFsBRdNjY+q7fN6Zl MKDvYrZB93kIhzwV6DM64ptot4HwXFDtOIxPiuceDA2ABPKyMP4nliKgjo2aJFcy SreN5EgR7ouzTvi6mQiDjZFU5q9rG0p2KMujY8j4z2iJAPQOWOwwTkOcDPSH+5kg g2WjBpr0/fnlabN/FOiG2JLAtac6nejv3yc= -----END CERTIFICATE-----Generated at Wed Nov 5 03:09:55 2025 by rpki-client