$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa File: caed1a73-2386-3e15-9598-454e430ce7c9.roa (raw, json) Hash identifier: 1OPGRkvjGVbJPFKDGGsrDczYUIvaiGwF6e+/tim8RKU= Subject key identifier: D8:59:E9:67:F8:1E:E6:F3:07:14:E8:8F:23:A8:72:5E:88:51:39:48 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D29FA6E2014C8ED552E00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 2607:f028:61::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:29:fa:6e:20:14:c8:ed:55:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=f42ce020-af6b-4d1e-8b0a-3e259830d79c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:25:43:19:b8:18:df:aa:51:4f:e9:79:57:d8: 94:68:33:a1:5d:6d:88:73:89:76:60:d3:30:66:99: b7:14:cb:f9:2c:58:aa:22:9e:f2:fd:24:e9:af:4c: 19:cd:32:59:91:3e:a7:15:09:14:cf:79:8b:87:b9: f1:66:49:8c:0a:ea:40:6c:23:92:d5:f0:32:49:7f: d2:ea:d1:4a:8d:b5:b6:e6:af:e9:f7:c1:12:8e:35: 93:74:15:59:8f:cd:9d:f7:92:cf:ce:6c:79:d4:60: 3e:8e:42:5e:d3:43:5d:b0:1f:8d:eb:bd:7d:40:15: 54:e3:58:23:0d:58:4a:6f:07:ab:49:8d:96:3a:c4: 11:8d:40:6d:be:86:0f:cc:3e:00:ae:e4:1e:1e:14: 9d:e3:c9:91:60:a7:a1:86:f8:17:51:e7:ed:3d:82: 64:00:57:52:6d:eb:a6:21:0c:40:b0:96:a2:3e:12: 38:68:11:78:6d:8e:4e:ef:93:82:5b:fd:79:8f:87: 8c:01:28:0e:60:64:8c:83:26:a1:2b:1e:f4:18:f4: 02:23:a0:eb:9c:d8:c6:65:02:3d:6a:d9:5d:11:c5: 11:b9:8c:68:0a:d8:b7:1d:15:e3:da:ed:e7:c5:8b: 7d:99:24:94:89:6f:c2:2f:4f:9b:2b:87:1e:2e:15: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:59:E9:67:F8:1E:E6:F3:07:14:E8:8F:23:A8:72:5E:88:51:39:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/caed1a73-2386-3e15-9598-454e430ce7c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:61::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a7:94:2a:5b:50:70:7b:41:3a:11:54:86:5d:14:fb:5d:b9: 4a:88:1c:4c:bd:f7:06:f0:86:36:9d:12:09:b9:0f:c5:08:4f: 78:57:f5:1e:36:1b:bc:e8:e0:ae:43:63:1e:fa:3b:af:bf:61: 64:47:df:62:2c:ef:f2:66:31:e5:35:b7:23:f4:70:cd:5a:94: a1:4c:1a:73:ec:2a:3f:0b:6a:d1:42:c2:51:38:a0:1d:fa:83: 07:05:66:ff:02:1a:74:e9:5b:c2:5a:bf:67:09:73:56:4f:03: 59:7a:dc:06:10:6f:d2:e9:8d:85:bc:23:88:63:21:7e:57:f8: 3e:e1:c5:0e:f1:aa:f8:a1:73:e5:7e:2e:81:27:63:18:7f:18: 80:c7:d8:ae:4f:43:42:6e:24:c2:46:69:ea:63:d5:e9:df:5e: 46:55:06:5f:64:4d:1b:83:88:48:8c:76:a8:10:8f:11:fe:81: 5f:da:d2:dd:f2:e8:9c:9e:ba:e1:06:f5:31:41:41:7a:91:20: 29:ea:b8:94:1f:bf:be:50:28:4d:7b:a9:ac:ac:e5:01:e2:4e: a4:1a:a1:dc:9f:8d:fc:59:5f:61:66:e7:05:c5:ba:c7:ed:00: 53:a4:78:5b:77:9a:09:90:3c:83:a1:bc:40:29:ea:ec:af:8a: 4c:39:c2:e1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XSn6biAUyO1VLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk ZjQyY2UwMjAtYWY2Yi00ZDFlLThiMGEtM2UyNTk4MzBkNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliVDGbgY36pRT+l5V9iUaDOhXW2Ic4l2YNMw Zpm3FMv5LFiqIp7y/STpr0wZzTJZkT6nFQkUz3mLh7nxZkmMCupAbCOS1fAySX/S 6tFKjbW25q/p98ESjjWTdBVZj82d95LPzmx51GA+jkJe00NdsB+N6719QBVU41gj DVhKbwerSY2WOsQRjUBtvoYPzD4AruQeHhSd48mRYKehhvgXUeftPYJkAFdSbeum IQxAsJaiPhI4aBF4bY5O75OCW/15j4eMASgOYGSMgyahKx70GPQCI6DrnNjGZQI9 atldEcURuYxoCti3HRXj2u3nxYt9mSSUiW/CL0+bK4ceLhVZdwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNhZ6Wf4HubzBxTojyOocl6IUTlIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvY2FlZDFhNzMtMjM4Ni0z ZTE1LTk1OTgtNDU0ZTQzMGNlN2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKABh MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCnlCpbUHB7QToRVIZdFPtduUqIHEy99wbwhjadEgm5D8UIT3hX 9R42G7zo4K5DYx76O6+/YWRH32Is7/JmMeU1tyP0cM1alKFMGnPsKj8LatFCwlE4 oB36gwcFZv8CGnTpW8Jav2cJc1ZPA1l63AYQb9LpjYW8I4hjIX5X+D7hxQ7xqvih c+V+LoEnYxh/GIDH2K5PQ0JuJMJGaepj1enfXkZVBl9kTRuDiEiMdqgQjxH+gV/a 0t3y6JyeuuEG9TFBQXqRICnquJQfv75QKE17qays5QHiTqQaodyfjfxZX2Fm5wXF usftAFOkeFt3mgmQPIOhvEAp6uyvikw5wuE= -----END CERTIFICATE-----Generated at Tue Nov 4 21:43:52 2025 by rpki-client