$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa File: 2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa (raw, json) Hash identifier: ooWL5gyb6CGGiSEHb3+aiZUoupAlKCZWrr0w6nNVgso= Subject key identifier: 2C:E4:5C:9E:92:37:4E:66:95:AC:53:5B:21:9E:39:CC:A4:61:D0:07 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D75D538770567D841DFD46440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 203 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:38:77:05:67:d8:41:df:d4:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=706845e2-bb27-4ce4-9fae-fc456be9cb00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:23:43:00:18:1b:93:91:f5:d2:a3:ae:dd: 7a:5c:ce:4c:19:b0:58:f2:09:17:29:19:9a:c0:c3: 39:c1:f0:41:85:bd:92:82:2d:df:72:9d:7b:92:cc: ed:e0:27:82:58:a2:57:73:ca:c4:53:41:f1:72:03: 45:18:88:64:9f:1d:2d:cb:ce:47:65:b2:79:f3:47: 79:0a:af:23:5e:f0:2d:86:45:27:2f:3c:1f:c5:4b: a6:4c:df:90:cc:e5:39:b3:82:5c:c5:67:1e:44:29: 2d:f2:6d:3e:f5:e9:e7:2c:a5:6d:f2:41:56:df:2a: 1f:f3:c6:e4:3e:ec:c6:03:dc:19:0b:6e:74:11:27: 08:af:ea:f7:f2:d0:91:be:4a:50:82:7e:85:3c:80: 5d:d6:f1:96:32:12:08:83:7c:0f:97:36:e6:94:94: 28:74:de:55:d5:8b:8e:23:13:45:5a:12:b0:3f:30: 4f:1a:66:77:1e:bf:9d:49:80:1b:4d:bd:e1:0e:08: 83:c5:55:ba:ea:1b:a2:31:79:4b:1b:0d:de:73:d6: 01:68:11:dc:3b:35:e5:f0:80:62:c4:c5:6c:c6:0c: ea:04:18:a0:bb:ae:15:17:e7:37:c0:7d:9d:75:c8: 71:52:d4:bf:e8:90:39:ec:2f:a9:a8:9d:0e:a5:0e: 36:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E4:5C:9E:92:37:4E:66:95:AC:53:5B:21:9E:39:CC:A4:61:D0:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2895a5ec-451a-3f2b-b9fc-37ebf52df3de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:aa:39:af:59:b3:8e:06:bf:15:c6:19:c4:b1:c2:ad:47:91: 56:ed:f2:a9:db:e3:78:7c:4a:60:c7:0b:de:75:8f:6c:5b:2b: 9e:58:61:b8:14:4f:63:51:bd:c2:b5:ac:26:65:01:d9:37:ca: 3e:29:02:62:ca:88:b1:15:f3:74:8d:43:8f:f2:01:9b:b5:8a: fb:bf:ac:10:6e:45:58:b5:f2:c1:36:77:ed:8a:bc:5b:b2:c6: 97:a1:1c:3b:9d:1e:13:cc:c4:74:48:6a:83:50:a3:2e:0f:46: d5:31:0a:73:16:32:19:0f:49:48:fc:4e:72:03:af:1b:d8:0e: c7:fc:3d:5e:54:25:0d:e9:c6:af:b9:a5:16:d2:62:14:c8:34: 0e:fb:02:aa:04:34:6e:6c:a5:c6:51:91:89:38:96:5d:cd:50: c7:c2:da:b9:3b:52:97:4b:37:19:78:53:69:0d:b3:a7:6b:c5: 18:54:13:90:ff:12:ef:c3:53:39:86:6d:fb:24:b5:0c:58:70: 71:c6:9d:6f:1e:37:15:ed:29:2b:92:2f:0f:ba:9b:77:4b:de: e9:8e:4e:24:60:f9:dd:db:f7:53:64:a5:05:e3:a3:02:07:44: e2:c0:87:2e:4d:76:62:91:15:7b:06:b9:ba:0a:0c:94:d1:2e: e1:93:b2:bf -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111Th3BWfYQd/UZEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk NzA2ODQ1ZTItYmIyNy00Y2U0LTlmYWUtZmM0NTZiZTljYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC4jQwAYG5OR9dKjrt16XM5MGbBY8gkXKRma wMM5wfBBhb2Sgi3fcp17kszt4CeCWKJXc8rEU0HxcgNFGIhknx0ty85HZbJ580d5 Cq8jXvAthkUnLzwfxUumTN+QzOU5s4JcxWceRCkt8m0+9ennLKVt8kFW3yof88bk PuzGA9wZC250EScIr+r38tCRvkpQgn6FPIBd1vGWMhIIg3wPlzbmlJQodN5V1YuO IxNFWhKwPzBPGmZ3Hr+dSYAbTb3hDgiDxVW66huiMXlLGw3ec9YBaBHcOzXl8IBi xMVsxgzqBBigu64VF+c3wH2ddchxUtS/6JA57C+pqJ0OpQ42bwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCzkXJ6SN05mlaxTWyGeOcykYdAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMjg5NWE1ZWMtNDUxYS0z ZjJiLWI5ZmMtMzdlYmY1MmRmM2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIKqOa9Zs44GvxXGGcSxwq1HkVbt8qnb43h8SmDHC951j2xbK55Y YbgUT2NRvcK1rCZlAdk3yj4pAmLKiLEV83SNQ4/yAZu1ivu/rBBuRVi18sE2d+2K vFuyxpehHDudHhPMxHRIaoNQoy4PRtUxCnMWMhkPSUj8TnIDrxvYDsf8PV5UJQ3p xq+5pRbSYhTINA77AqoENG5spcZRkYk4ll3NUMfC2rk7UpdLNxl4U2kNs6drxRhU E5D/Eu/DUzmGbfsktQxYcHHGnW8eNxXtKSuSLw+6m3dL3umOTiRg+d3b91NkpQXj owIHROLAhy5NdmKRFXsGuboKDJTRLuGTsr8= -----END CERTIFICATE-----Generated at Fri Apr 17 11:47:21 2026 by rpki-client