$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8fb554ae-a556-3262-8e4f-aad2ab0208d4.roa File: 8fb554ae-a556-3262-8e4f-aad2ab0208d4.roa (raw, json) Hash identifier: 6yqf6g96Umh0dR3sYozN0nWdtKojL6kAEhbrSqxjOdM= Subject key identifier: 64:51:5B:36:B0:82:8E:40:0D:59:C2:42:11:6E:4F:42:81:77:00:5D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D3142B5401153615F4000 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8fb554ae-a556-3262-8e4f-aad2ab0208d4.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 203 IP address blocks: 2607:f028:91::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:31:42:b5:40:11:53:61:5f:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=8f53fc00-296b-492e-ac14-8d2509a66ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:39:37:18:ed:51:2d:2c:c1:32:0f:be:61:fb: fd:cc:38:cd:27:6e:40:77:f6:a0:66:24:88:4f:dc: b3:0e:ed:f1:a0:7a:45:cc:31:69:c1:b5:6b:08:67: 41:16:4a:b0:10:f8:db:b7:8d:b8:bd:1a:95:7d:a2: 2c:11:47:3f:4e:05:12:2b:23:80:ae:ea:b7:ab:9c: 5d:4a:8a:66:6d:1f:32:78:e3:e6:e0:6b:c7:09:ce: 66:3a:ef:90:28:5c:6e:71:d2:2a:75:a3:ef:44:cb: c8:99:e3:75:28:fd:3a:ec:77:ca:0e:6d:36:9f:b9: 9d:f8:d3:c7:78:eb:bf:ce:cf:be:f2:6a:0b:14:08: 7e:df:49:5e:03:ca:c8:0e:84:c3:34:5b:82:9a:ec: 1a:37:66:52:b9:77:a8:9c:ed:24:16:2f:07:52:62: 36:26:ed:07:f2:65:6c:d6:11:c5:72:1f:25:49:6e: fe:34:be:17:30:2b:c3:29:47:f3:fd:a0:9f:d9:8e: 12:b9:bf:7a:2e:51:f9:41:fe:2f:40:9c:d1:09:2d: ac:23:23:f4:55:86:43:43:a3:cf:d4:81:ca:40:56: 8d:54:a1:72:68:57:61:ef:f9:70:60:30:a0:35:7e: b5:ef:e5:44:b1:ad:4c:10:32:34:e3:36:c6:4a:e7: 67:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:51:5B:36:B0:82:8E:40:0D:59:C2:42:11:6E:4F:42:81:77:00:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/8fb554ae-a556-3262-8e4f-aad2ab0208d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:91::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:77:66:02:4f:f4:d7:98:ac:77:0c:34:ed:d6:57:2c:a4:25: ea:aa:2d:58:90:3d:6b:1b:d6:31:b9:5e:69:a8:2b:12:00:be: 24:8f:b3:97:3a:d6:0f:d6:7d:da:2f:d7:76:26:b1:da:1b:0c: 49:46:39:df:28:d3:00:a5:e3:2b:bd:01:cc:3e:4e:9a:c9:55: 9b:b2:d8:a8:81:c2:89:f4:72:2f:c9:b9:61:36:f8:87:28:a5: 1f:4a:37:8b:e9:35:de:5f:f4:2e:9c:2e:2f:9e:50:b5:e9:22: d1:8c:e5:0c:30:d4:cc:75:7b:ca:11:df:36:aa:f5:31:98:99: 67:19:b0:12:dc:c8:25:83:d2:c1:5d:79:ab:f9:66:52:9e:6f: a6:c9:2a:1e:57:2a:8b:1f:f5:58:6d:37:d8:70:82:64:f3:f3: df:8e:61:00:7a:90:e1:13:7f:e3:4d:43:49:75:1e:4f:1d:e5: e1:f9:15:ac:9a:94:27:02:35:50:b4:91:3a:14:8f:5f:e0:2a: e6:51:2b:65:23:56:6b:29:e2:3a:05:21:de:5a:02:fe:5c:ca: 67:ad:cf:8a:b0:ef:73:f4:e0:8e:d2:8b:63:03:1e:73:6a:0d: 48:83:9f:f3:66:bc:8c:5a:6f:41:bb:19:eb:e7:3b:46:5e:96: 89:1c:eb:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XTFCtUARU2FfQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OGY1M2ZjMDAtMjk2Yi00OTJlLWFjMTQtOGQyNTA5YTY2Y2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojk3GO1RLSzBMg++Yfv9zDjNJ25Ad/agZiSI T9yzDu3xoHpFzDFpwbVrCGdBFkqwEPjbt424vRqVfaIsEUc/TgUSKyOAruq3q5xd SopmbR8yeOPm4GvHCc5mOu+QKFxucdIqdaPvRMvImeN1KP067HfKDm02n7md+NPH eOu/zs++8moLFAh+30leA8rIDoTDNFuCmuwaN2ZSuXeonO0kFi8HUmI2Ju0H8mVs 1hHFch8lSW7+NL4XMCvDKUfz/aCf2Y4Sub96LlH5Qf4vQJzRCS2sIyP0VYZDQ6PP 1IHKQFaNVKFyaFdh7/lwYDCgNX617+VEsa1MEDI04zbGSudntQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGRRWzawgo5ADVnCQhFuT0KBdwBdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOGZiNTU0YWUtYTU1Ni0z MjYyLThlNGYtYWFkMmFiMDIwOGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEJ3ZgJP9NeYrHcMNO3WVyykJeqqLViQPWsb1jG5XmmoKxIAviSP s5c61g/Wfdov13YmsdobDElGOd8o0wCl4yu9Acw+TprJVZuy2KiBwon0ci/JuWE2 +IcopR9KN4vpNd5f9C6cLi+eULXpItGM5Qww1Mx1e8oR3zaq9TGYmWcZsBLcyCWD 0sFdeav5ZlKeb6bJKh5XKosf9VhtN9hwgmTz89+OYQB6kOETf+NNQ0l1Hk8d5eH5 FayalCcCNVC0kToUj1/gKuZRK2UjVmsp4joFId5aAv5cymetz4qw73P04I7Si2MD HnNqDUiDn/NmvIxab0G7GevnO0Zelokc67s= -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:36 2025 by rpki-client