$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa File: 2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa (raw, json) Hash identifier: DhisxK1oYw+cxV29nmHwEcb7kHT70hnAUDandVq4lSE= Subject key identifier: 62:D9:F4:3D:AE:5C:D4:EA:5C:CD:78:6E:2F:20:EC:93:99:ED:3D:1A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D75D53C593C0B98B26569AC80 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 202 IP address blocks: 2607:f028:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:3c:59:3c:0b:98:b2:65:69:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=d160caf3-4304-4116-8484-1673ed5fd24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1a:e1:38:1b:02:e1:7a:21:b2:d9:16:0c:cd: 17:78:dc:f4:d6:d0:19:77:55:f2:03:3d:b6:07:d4: af:cb:4a:ad:e5:23:6c:f7:1e:e6:d0:85:fb:9f:64: 7b:da:b0:ce:a1:c6:18:74:05:ee:14:50:a3:84:43: cb:95:a1:d2:8d:b3:e7:21:86:89:bb:8d:61:e0:54: d0:88:d0:a7:b7:d9:5d:ed:8a:30:5b:53:b4:de:16: 7e:fa:85:8e:b5:ce:f6:1e:7f:30:d0:88:32:89:57: 2b:a0:a0:32:0a:e2:bf:3e:75:92:33:65:3e:3e:c1: 04:11:0a:e6:e3:38:d6:92:90:92:57:cd:3d:48:67: 22:8b:7b:35:d5:5c:44:ff:8f:80:0a:54:93:cb:28: 17:10:9e:cc:96:cd:7c:9e:10:b7:cf:6e:1f:4e:0b: 58:db:3b:e8:04:54:67:33:08:05:76:78:e9:19:fb: 02:43:60:83:3e:d2:eb:23:a8:c6:4a:a8:59:34:0d: 94:39:f8:16:cb:e4:23:67:8c:07:4a:b6:17:75:36: 94:66:cd:d7:33:04:25:7f:6f:a8:f2:01:32:c6:03: 96:1b:7c:ad:39:30:3c:6e:10:5c:06:0c:ae:e0:60: 9e:0c:33:b9:72:8c:ea:09:9b:49:0f:60:10:6c:fb: f3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:D9:F4:3D:AE:5C:D4:EA:5C:CD:78:6E:2F:20:EC:93:99:ED:3D:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/2cf98dc0-393d-3c50-ab23-b688e9675fe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:8d:eb:32:ea:1c:29:15:c9:23:7e:f0:26:af:c8:02:45:0b: d4:b4:5f:04:4b:42:3b:ce:31:86:a4:64:5d:8a:b7:18:fe:5c: b8:e2:49:a4:ff:90:ce:c4:4c:9a:02:16:6e:67:c8:a0:4f:fb: e9:2a:86:31:39:d7:ac:09:08:04:87:87:f4:f7:13:2e:cd:62: 06:1e:94:71:9b:7c:17:23:98:53:b2:6d:88:33:ce:d9:32:98: 60:57:8c:5f:41:a5:24:a2:9d:9b:36:39:28:7e:09:ec:e8:6e: 3a:19:62:77:1b:bd:fd:7f:fe:41:07:50:0e:69:27:b2:6a:62: 2f:0e:c1:b2:e7:8e:1e:e2:c6:f7:96:9a:6c:c4:9c:c0:40:7f: 2f:27:aa:94:3f:44:50:29:62:d2:e9:78:cb:1b:8c:1b:5f:d6: 78:59:43:57:90:1d:29:d5:08:84:df:37:b2:70:3c:34:cd:b0: d3:4b:93:52:18:0c:47:81:31:53:45:ac:72:36:92:87:f9:0f: b8:c6:44:95:fe:37:ed:0d:de:c5:f8:a8:18:20:50:43:1a:be: d3:a1:b3:4c:2d:ac:d1:cb:9d:27:72:85:01:7e:e8:4b:65:ad: 0f:66:ad:08:c0:b5:aa:7c:db:ad:a4:a5:fc:34:f3:3a:49:7a: 27:93:63:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111TxZPAuYsmVprIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk ZDE2MGNhZjMtNDMwNC00MTE2LTg0ODQtMTY3M2VkNWZkMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhrhOBsC4XohstkWDM0XeNz01tAZd1XyAz22 B9Svy0qt5SNs9x7m0IX7n2R72rDOocYYdAXuFFCjhEPLlaHSjbPnIYaJu41h4FTQ iNCnt9ld7YowW1O03hZ++oWOtc72Hn8w0IgyiVcroKAyCuK/PnWSM2U+PsEEEQrm 4zjWkpCSV809SGcii3s11VxE/4+AClSTyygXEJ7Mls18nhC3z24fTgtY2zvoBFRn MwgFdnjpGfsCQ2CDPtLrI6jGSqhZNA2UOfgWy+QjZ4wHSrYXdTaUZs3XMwQlf2+o 8gEyxgOWG3ytOTA8bhBcBgyu4GCeDDO5cozqCZtJD2AQbPvz5wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGLZ9D2uXNTqXM14bi8g7JOZ7T0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMmNmOThkYzAtMzkzZC0z YzUwLWFiMjMtYjY4OGU5Njc1ZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFqN6zLqHCkVySN+8CavyAJFC9S0XwRLQjvOMYakZF2Ktxj+XLji SaT/kM7ETJoCFm5nyKBP++kqhjE516wJCASHh/T3Ey7NYgYelHGbfBcjmFOybYgz ztkymGBXjF9BpSSinZs2OSh+CezobjoZYncbvf1//kEHUA5pJ7JqYi8OwbLnjh7i xveWmmzEnMBAfy8nqpQ/RFApYtLpeMsbjBtf1nhZQ1eQHSnVCITfN7JwPDTNsNNL k1IYDEeBMVNFrHI2kof5D7jGRJX+N+0N3sX4qBggUEMavtOhs0wtrNHLnSdyhQF+ 6EtlrQ9mrQjAtap8262kpfw08zpJeieTY5M= -----END CERTIFICATE-----Generated at Fri Apr 17 21:37:08 2026 by rpki-client