$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa File: 9a840488-c07a-3581-887a-8072852ad622.roa (raw, json) Hash identifier: 7xeX7CDqZSsVfTGb7g5fKia9MBfrZe1LUx8FlO1JoaA= Subject key identifier: 82:58:9E:22:DD:C0:A3:4D:A1:4E:B5:F8:BE:9B:87:79:EC:27:27:32 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584CB6B71454177165165793AFC0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa Signing time: Sun 01 Feb 2026 02:00:32 +0000 ROA not before: Sun 01 Feb 2026 02:00:32 +0000 ROA not after: Sat 02 May 2026 01:00:32 +0000 asID: 202 IP address blocks: 2607:f028:b42::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b6:b7:14:54:17:71:65:16:57:93:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Feb 1 02:00:32 2026 GMT Not After : May 2 01:00:32 2026 GMT Subject: CN=ac3a2707-0ca9-4511-ab9d-956842b668f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:16:72:c9:47:53:71:9c:e1:1a:cb:9e:9a: 7d:95:10:d3:a7:5e:06:29:a3:28:7c:ef:2e:b9:6d: 48:91:09:d6:24:98:dd:cd:68:99:ff:bc:46:1d:a0: f4:26:53:df:23:e9:4b:c5:57:45:83:d1:d2:31:44: ad:b5:d9:13:4a:59:fd:71:47:0d:3d:da:eb:d9:7f: 58:7e:23:c2:89:76:5b:e1:0e:97:d4:1e:58:ee:55: c7:73:78:e6:25:96:e5:ad:f3:b2:ca:39:a5:ae:88: 06:84:50:d7:0b:20:b5:04:04:14:aa:ae:b6:24:b2: 26:b4:65:96:b0:a7:ec:49:01:ee:dc:4c:04:0a:a7: 02:d8:65:1d:39:10:b3:0e:6b:bc:d0:fb:16:a9:14: d2:49:70:b4:3a:61:51:13:72:0c:c2:40:6d:76:ca: f1:8c:a0:c6:80:dc:d8:89:f9:76:c3:34:1f:ab:5d: 55:57:08:ae:21:53:b9:77:34:81:9d:e1:c0:0d:b6: e6:b9:0c:26:a4:3e:c3:4a:8d:16:7a:4b:0f:ea:f2: d6:73:4f:7c:ec:34:e3:7d:0f:e2:65:ee:3f:b0:77: ba:93:68:b6:74:a2:41:21:64:de:bb:e5:f8:78:b2: 72:ba:64:41:26:6b:cb:60:f2:d2:e4:90:26:0f:cf: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:58:9E:22:DD:C0:A3:4D:A1:4E:B5:F8:BE:9B:87:79:EC:27:27:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9a840488-c07a-3581-887a-8072852ad622.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:b42::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:04:c7:49:53:fd:5d:0a:7f:69:76:52:1f:9f:83:f4:5a:c3: 8f:26:fc:b7:c9:34:d0:fb:c9:85:c3:3e:99:4f:b0:08:28:6c: 7e:fb:da:18:b5:74:1d:c1:55:36:8b:c1:53:82:96:a3:8f:31: fc:1a:6a:d3:de:df:04:2f:a5:51:66:00:af:b6:d1:92:24:a8: 36:76:73:f8:af:d2:12:b0:d2:2c:c2:f0:ea:b5:a5:d1:4b:85: 27:3f:bc:d7:ee:82:b0:d2:b5:3f:6a:07:7a:4b:f4:11:78:f6: d1:53:87:83:92:f2:a7:8a:ac:b9:89:0d:6b:37:5e:51:df:7c: fc:93:2d:45:e3:0a:ea:18:31:60:1f:32:d7:02:ab:7f:21:30: 4b:b8:85:61:88:9b:53:47:5f:c3:cd:aa:c9:e8:7d:87:65:d4: ef:22:23:93:cf:4e:7c:b9:53:dc:b8:82:64:d8:46:cb:f8:fe: 45:70:06:f7:62:71:85:9e:8b:48:a1:5c:17:2b:69:46:26:84: cf:83:98:af:91:41:d0:1d:ba:17:6c:26:8d:f6:b2:61:05:d1: 7a:40:30:e4:10:bb:c4:36:14:5c:44:65:87:42:91:ae:b4:97: d8:84:7b:e3:29:c8:65:a7:0d:08:49:81:ab:3b:71:07:bf:0b: b9:50:03:19 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEy2txRUF3FlFleTr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDIwMTAyMDAzMloXDTI2MDUwMjAxMDAzMlowLzEtMCsGA1UEAxMk YWMzYTI3MDctMGNhOS00NTExLWFiOWQtOTU2ODQyYjY2OGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3icWcslHU3Gc4RrLnpp9lRDTp14GKaMofO8u uW1IkQnWJJjdzWiZ/7xGHaD0JlPfI+lLxVdFg9HSMUSttdkTSln9cUcNPdrr2X9Y fiPCiXZb4Q6X1B5Y7lXHc3jmJZblrfOyyjmlrogGhFDXCyC1BAQUqq62JLImtGWW sKfsSQHu3EwECqcC2GUdORCzDmu80PsWqRTSSXC0OmFRE3IMwkBtdsrxjKDGgNzY ifl2wzQfq11VVwiuIVO5dzSBneHADbbmuQwmpD7DSo0WeksP6vLWc0987DTjfQ/i Ze4/sHe6k2i2dKJBIWTeu+X4eLJyumRBJmvLYPLS5JAmD8+buQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIJYniLdwKNNoU61+L6bh3nsJycyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvOWE4NDA0ODgtYzA3YS0z NTgxLTg4N2EtODA3Mjg1MmFkNjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAtC MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACgEx0lT/V0Kf2l2Uh+fg/Raw48m/LfJNND7yYXDPplPsAgobH77 2hi1dB3BVTaLwVOClqOPMfwaatPe3wQvpVFmAK+20ZIkqDZ2c/iv0hKw0izC8Oq1 pdFLhSc/vNfugrDStT9qB3pL9BF49tFTh4OS8qeKrLmJDWs3XlHffPyTLUXjCuoY MWAfMtcCq38hMEu4hWGIm1NHX8PNqsnofYdl1O8iI5PPTny5U9y4gmTYRsv4/kVw BvdicYWei0ihXBcraUYmhM+DmK+RQdAduhdsJo32smEF0XpAMOQQu8Q2FFxEZYdC ka60l9iEe+MpyGWnDQhJgas7cQe/C7lQAxk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:38:29 2026 by rpki-client