$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa File: 539e0d8a-caac-3da5-a704-e6922158c3c1.roa (raw, json) Hash identifier: fBkl7lLczW6jes5GO+jiK3qCPcQINeIGHOQrtD05pIg= Subject key identifier: 27:DF:32:19:DA:C5:C8:F2:70:F0:82:F1:82:4E:7F:48:D6:E3:37:4A Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584CB6B71292B1452D303FAF9440 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 203 IP address blocks: 2607:f028:b12::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:12:92:b1:45:2d:30:3f:af:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=c76b731d-0c01-4f93-82fa-308bab85d6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:3a:f9:36:12:75:81:be:5a:74:c2:13:23:c5: 82:d6:df:3f:4a:b5:dc:bc:03:6d:cc:96:16:3f:f9: 9b:f4:92:61:a4:0c:34:a5:d7:38:5e:58:c3:ae:f9: da:c3:37:7e:f9:81:46:c8:d3:7f:0e:2b:d9:e0:41: 66:9a:db:59:7e:74:af:9b:fb:8d:43:f5:75:70:b8: af:1b:a7:b9:c6:a3:7f:db:0e:87:98:2b:01:55:5f: ec:b4:b4:25:dc:95:3c:42:84:22:f3:07:87:cb:74: 54:5e:79:b7:7f:ef:15:87:a6:7a:4a:ef:0e:6e:73: 8f:38:cd:d6:27:7e:72:82:26:e2:7a:27:65:6d:98: e0:30:1c:3a:e2:37:f4:bc:0b:5a:ca:6e:bb:97:94: 89:37:89:2f:36:2e:69:b9:d0:2a:c3:c4:23:50:ad: b1:e5:39:46:86:37:5b:4b:99:40:98:42:a8:7b:a2: 1f:a8:4c:3f:25:5e:55:1c:21:a7:41:21:c4:bb:e8: 9f:9c:83:0a:b8:f9:da:a0:fa:6d:e3:67:1b:0d:c0: 41:05:00:6a:d5:db:66:bb:87:83:0e:87:9c:2d:51: e4:0e:7d:5d:75:72:c7:32:26:6c:20:45:d9:d9:9c: 90:57:28:64:11:96:ea:6e:9a:45:5e:b1:bf:d4:cd: 9a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DF:32:19:DA:C5:C8:F2:70:F0:82:F1:82:4E:7F:48:D6:E3:37:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/539e0d8a-caac-3da5-a704-e6922158c3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b12::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:a5:a2:83:00:0e:b2:21:7d:f2:d5:e8:10:ee:dc:0a:f7:ca: 01:fa:52:d6:ef:1d:5c:a8:01:a8:5a:06:76:63:28:33:39:cf: f8:ec:81:75:25:5a:45:c5:9b:54:a6:7b:5d:96:a2:d0:72:b8: 91:a9:f2:9a:d5:be:a6:eb:db:6a:ba:da:33:48:5a:af:78:f4: df:bb:b0:4e:e5:77:ee:30:69:ba:83:c2:dc:94:0b:6f:6f:ef: c6:81:9e:23:ff:b4:54:e5:0a:b8:a8:17:37:99:7a:38:67:1c: e6:6e:4e:ef:5a:66:18:6e:30:77:ed:27:31:81:5b:30:43:45: 43:15:63:6b:33:be:45:73:7a:08:59:ed:14:bc:5a:51:9e:04: 71:70:61:9d:a6:a2:74:5c:46:5c:b4:24:dd:7e:c7:a4:65:13: 5f:b3:95:14:04:a3:e1:ea:b0:71:ca:93:c4:65:1e:b0:72:26: 3f:0a:1b:2b:a6:8e:f0:d5:d5:59:1b:c1:8d:1a:4e:02:d4:5a: 3e:1b:40:0e:4f:51:d0:9b:e6:24:b4:3b:26:32:5c:40:6a:7a: 93:f1:03:91:06:87:a6:03:d7:4b:cc:04:60:ac:94:7e:c3:e5: 02:96:22:a0:02:2b:57:90:59:fa:0a:5c:69:f7:c8:e0:86:c2: 56:7f:41:74 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy2txKSsUUtMD+vlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk Yzc2YjczMWQtMGMwMS00ZjkzLTgyZmEtMzA4YmFiODVkNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Tr5NhJ1gb5adMITI8WC1t8/SrXcvANtzJYW P/mb9JJhpAw0pdc4XljDrvnawzd++YFGyNN/DivZ4EFmmttZfnSvm/uNQ/V1cLiv G6e5xqN/2w6HmCsBVV/stLQl3JU8QoQi8weHy3RUXnm3f+8Vh6Z6Su8ObnOPOM3W J35ygibieidlbZjgMBw64jf0vAtaym67l5SJN4kvNi5pudAqw8QjUK2x5TlGhjdb S5lAmEKoe6IfqEw/JV5VHCGnQSHEu+ifnIMKuPnaoPpt42cbDcBBBQBq1dtmu4eD DoecLVHkDn1ddXLHMiZsIEXZ2ZyQVyhkEZbqbppFXrG/1M2aFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCffMhnaxcjycPCC8YJOf0jW4zdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvNTM5ZTBkOGEtY2FhYy0z ZGE1LWE3MDQtZTY5MjIxNThjM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAsS MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGOlooMADrIhffLV6BDu3Ar3ygH6UtbvHVyoAahaBnZjKDM5z/js gXUlWkXFm1Sme12WotByuJGp8prVvqbr22q62jNIWq949N+7sE7ld+4wabqDwtyU C29v78aBniP/tFTlCrioFzeZejhnHOZuTu9aZhhuMHftJzGBWzBDRUMVY2szvkVz eghZ7RS8WlGeBHFwYZ2monRcRly0JN1+x6RlE1+zlRQEo+HqsHHKk8RlHrByJj8K GyumjvDV1VkbwY0aTgLUWj4bQA5PUdCb5iS0OyYyXEBqepPxA5EGh6YD10vMBGCs lH7D5QKWIqACK1eQWfoKXGn3yOCGwlZ/QXQ= -----END CERTIFICATE-----Generated at Sun Mar 1 22:52:10 2026 by rpki-client