$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa File: b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa (raw, json) Hash identifier: piysVhOPIzUtac4pceskhfIGnyPpeQtCCRP36qyBXqU= Subject key identifier: BA:CA:52:10:64:58:BE:49:B0:81:94:57:4C:90:58:D5:74:25:83:19 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584D75D53C4D4B23DA21DDDFC580 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa Signing time: Fri 10 Apr 2026 13:00:31 +0000 ROA not before: Fri 10 Apr 2026 13:00:31 +0000 ROA not after: Thu 09 Jul 2026 13:00:31 +0000 asID: 3360 IP address blocks: 2607:f028:122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:75:d5:3c:4d:4b:23:da:21:dd:df:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 10 13:00:31 2026 GMT Not After : Jul 9 13:00:31 2026 GMT Subject: CN=bfba8cbe-54a7-4fac-83a2-56abb8d252fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:ed:c3:a3:35:a2:25:95:3e:5b:f7:a5:03:08: 4e:20:33:10:63:34:0d:9c:77:ba:ec:c8:80:b0:6a: c4:8e:e3:a2:d6:22:d7:3b:13:6f:01:0a:0c:1c:20: 1a:c5:f4:8d:8d:05:3f:fe:31:c6:98:f0:54:42:04: 90:f1:13:b2:e9:d5:77:ea:67:2d:75:73:54:92:34: 88:7c:7a:ee:4a:a8:42:d6:8a:e8:4f:3e:f1:e0:50: f1:2d:c2:2c:b6:b2:8e:2b:5f:65:a0:f2:2b:42:2a: c4:2a:08:31:da:c8:0c:df:e6:b5:13:e2:49:64:b2: 72:e7:0a:60:a6:f2:c4:63:55:7f:7b:88:39:6a:ac: bf:9c:90:74:6d:4a:d3:96:7f:b8:68:41:08:7f:1e: b8:85:00:29:fc:ef:1d:90:1d:3c:60:b6:39:0d:1b: 13:95:da:56:df:ce:71:b6:c4:7f:e2:83:45:6e:2b: 1b:62:cc:f1:1f:dd:66:51:de:f2:6c:03:ff:85:18: cb:61:03:83:75:46:2c:46:9c:02:19:06:ac:dc:e2: 70:41:e3:31:0f:b3:98:10:fa:d1:86:5c:26:20:27: c6:39:a2:ed:e7:a1:5c:dc:8b:f3:cd:b2:3a:d8:32: cf:84:8b:a1:62:a4:f9:f4:dc:e0:73:08:9f:07:d6: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:CA:52:10:64:58:BE:49:B0:81:94:57:4C:90:58:D5:74:25:83:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b34b4cc7-14c7-3b1f-bf89-ef9f60211037.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:7c:0c:61:69:27:b0:30:e3:c0:75:a1:01:47:a0:b0:f4:cd: 9f:88:67:5d:3a:2a:40:89:3c:5f:c2:d1:aa:52:20:ad:ef:e9: 26:fc:90:24:31:87:1c:ac:83:04:14:92:d1:b9:65:b3:7f:76: c9:33:95:b7:17:48:72:a6:f8:11:29:b2:fc:2a:28:f6:52:36: a4:b6:27:09:d4:b7:d5:35:be:dd:6c:1c:16:c3:1f:74:27:28: 64:94:f4:db:d4:cf:bd:12:c9:c1:52:76:5a:8e:54:f2:58:5f: 67:cb:39:09:61:62:56:57:79:85:32:1e:52:c1:82:4c:79:66: ae:6c:e6:14:19:79:3a:8d:85:4c:60:10:30:ad:c8:ac:1a:e7: f4:b9:1c:77:cb:b4:25:ac:66:4c:8b:51:36:0f:d6:4f:5f:be: c8:93:79:df:ab:2c:bf:0e:44:5e:7d:15:47:68:34:61:04:f1: 0f:4e:8c:90:80:10:64:90:be:77:5e:c5:8e:10:31:a7:4d:9b: 36:82:55:e3:78:c6:85:39:95:ca:68:76:67:a1:56:5c:49:b6: 96:03:35:f9:d6:fc:f9:4b:2d:64:af:67:e7:9f:8f:84:fc:dc: c8:00:0e:05:39:40:15:30:f3:83:22:c5:e8:2f:90:2b:ec:15: 23:2b:0c:d9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE111TxNSyPaId3fxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQxMDEzMDAzMVoXDTI2MDcwOTEzMDAzMVowLzEtMCsGA1UEAxMk YmZiYThjYmUtNTRhNy00ZmFjLTgzYTItNTZhYmI4ZDI1MmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmu3DozWiJZU+W/elAwhOIDMQYzQNnHe67MiA sGrEjuOi1iLXOxNvAQoMHCAaxfSNjQU//jHGmPBUQgSQ8ROy6dV36mctdXNUkjSI fHruSqhC1oroTz7x4FDxLcIstrKOK19loPIrQirEKggx2sgM3+a1E+JJZLJy5wpg pvLEY1V/e4g5aqy/nJB0bUrTln+4aEEIfx64hQAp/O8dkB08YLY5DRsTldpW385x tsR/4oNFbisbYszxH91mUd7ybAP/hRjLYQODdUYsRpwCGQas3OJwQeMxD7OYEPrR hlwmICfGOaLt56Fc3IvzzbI62DLPhIuhYqT59NzgcwifB9YzdQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLrKUhBkWL5JsIGUV0yQWNV0JYMZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjM0YjRjYzctMTRjNy0z YjFmLWJmODktZWY5ZjYwMjExMDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAEi MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEt8DGFpJ7Aw48B1oQFHoLD0zZ+IZ106KkCJPF/C0apSIK3v6Sb8 kCQxhxysgwQUktG5ZbN/dskzlbcXSHKm+BEpsvwqKPZSNqS2JwnUt9U1vt1sHBbD H3QnKGSU9NvUz70SycFSdlqOVPJYX2fLOQlhYlZXeYUyHlLBgkx5Zq5s5hQZeTqN hUxgEDCtyKwa5/S5HHfLtCWsZkyLUTYP1k9fvsiTed+rLL8ORF59FUdoNGEE8Q9O jJCAEGSQvndexY4QMadNmzaCVeN4xoU5lcpodmehVlxJtpYDNfnW/PlLLWSvZ+ef j4T83MgADgU5QBUw84MixegvkCvsFSMrDNk= -----END CERTIFICATE-----Generated at Fri Apr 17 17:55:57 2026 by rpki-client