$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa File: f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa (raw, json) Hash identifier: Va8TeFydCUihjBsKUv72+N5Do7ldeENrUdV9scLx7c8= Subject key identifier: 40:EE:72:D8:2F:E3:90:75:3E:0A:F0:19:71:49:35:F7:2C:14:A0:E9 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584C9536EDAAE95DB99495AFDE00 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa Signing time: Tue 20 Jan 2026 02:00:29 +0000 ROA not before: Tue 20 Jan 2026 02:00:29 +0000 ROA not after: Mon 20 Apr 2026 01:00:29 +0000 asID: 202 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:95:36:ed:aa:e9:5d:b9:94:95:af:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Jan 20 02:00:29 2026 GMT Not After : Apr 20 01:00:29 2026 GMT Subject: CN=ae1d37ad-f3b9-4f6f-ba9f-fce6345df754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:27:e1:cb:c7:3f:92:42:d7:d3:55:a1:2f:cb: f8:bc:9f:37:a5:c5:70:5b:30:22:c9:55:ad:d0:1e: 3f:33:e0:36:c2:e6:63:3f:38:cc:5f:d5:2b:5b:24: da:42:b3:2d:64:aa:de:58:83:fa:55:df:51:74:9a: 5f:ff:65:55:57:1e:87:2b:ec:24:84:3d:9e:78:59: 4b:3f:6e:d4:66:ee:78:95:e9:2e:f4:64:13:ee:4c: 90:b6:d0:39:77:8a:07:90:3e:e1:22:bf:03:b5:d8: 10:ee:9d:9c:17:bc:56:85:de:fe:79:24:68:50:85: 53:e3:fd:cd:74:0c:70:d0:19:32:07:f6:9d:33:fe: b5:15:3e:46:ee:9c:b7:3a:9f:24:fb:ee:00:b7:02: 95:91:53:fc:21:d0:b9:b2:08:e2:de:b4:85:00:e2: 52:39:76:e4:32:2d:89:7e:de:db:2d:9a:fa:d0:dd: 49:89:76:ae:43:53:e9:b9:e0:01:ae:96:49:3a:b0: 98:50:4d:e5:be:e2:21:dc:4f:7e:84:49:ef:27:4d: 9c:e2:ad:43:32:cf:37:9c:ee:2b:c4:be:3a:8c:94: 7c:4f:72:b0:09:1f:71:d5:6c:d2:2e:76:b3:4e:53: 48:11:00:64:89:78:41:27:87:57:d2:9e:d4:b2:3e: 51:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EE:72:D8:2F:E3:90:75:3E:0A:F0:19:71:49:35:F7:2C:14:A0:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:79:f0:c1:ae:4a:fa:d6:9e:ff:be:85:4c:ee:78:6c:65:cd: f3:51:e9:35:da:f8:15:3a:c4:66:ec:3b:2b:51:be:56:a6:a6: 18:a9:56:1e:47:77:32:b4:10:29:2f:20:e1:8e:53:ed:d2:c0: 6a:15:e5:b0:6a:68:b9:90:3f:fe:1b:53:9e:1f:5e:a6:26:87: 58:8e:68:b7:c5:7a:89:38:e7:20:91:7c:ca:90:3c:b3:e0:24: 91:2a:37:2d:3b:03:3a:48:34:b9:f8:84:ea:af:24:6c:7b:64: 7d:d5:29:5a:72:15:ad:44:59:35:27:02:12:05:a8:48:6a:5d: 87:5c:c7:ff:95:b3:1f:99:5c:f4:23:01:7e:cf:95:fd:29:40: 38:07:02:49:72:c7:1c:96:45:27:56:fa:71:8f:a4:d7:7e:7f: f0:fe:8e:4c:5a:50:be:b1:36:b9:d2:c0:71:70:e8:0d:6a:1e: 74:47:6c:b3:9b:f0:56:32:7b:a4:29:09:9b:c9:f5:8b:4b:ca: b0:ab:3e:ce:5c:53:18:50:25:9b:19:de:84:77:55:02:be:b6: 53:3e:56:f5:43:c0:67:df:b9:af:84:85:33:64:5d:df:7e:f7: ad:17:85:a2:f0:4e:84:00:f5:c0:27:d7:07:8c:b8:98:1c:5f: 97:1c:97:e9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyVNu2q6V25lJWv3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDEyMDAyMDAyOVoXDTI2MDQyMDAxMDAyOVowLzEtMCsGA1UEAxMk YWUxZDM3YWQtZjNiOS00ZjZmLWJhOWYtZmNlNjM0NWRmNzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyfhy8c/kkLX01WhL8v4vJ83pcVwWzAiyVWt 0B4/M+A2wuZjPzjMX9UrWyTaQrMtZKreWIP6Vd9RdJpf/2VVVx6HK+wkhD2eeFlL P27UZu54leku9GQT7kyQttA5d4oHkD7hIr8DtdgQ7p2cF7xWhd7+eSRoUIVT4/3N dAxw0BkyB/adM/61FT5G7py3Op8k++4AtwKVkVP8IdC5sgji3rSFAOJSOXbkMi2J ft7bLZr60N1JiXauQ1PpueABrpZJOrCYUE3lvuIh3E9+hEnvJ02c4q1DMs83nO4r xL46jJR8T3KwCR9x1WzSLnazTlNIEQBkiXhBJ4dX0p7Usj5RgwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEDuctgv45B1PgrwGXFJNfcsFKDpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjhjNjU2ZWMtNDE5ZS0z YTViLTkxYjEtOTZmMDdjNmFiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAG958MGuSvrWnv++hUzueGxlzfNR6TXa+BU6xGbsOytRvlamphip Vh5HdzK0ECkvIOGOU+3SwGoV5bBqaLmQP/4bU54fXqYmh1iOaLfFeok45yCRfMqQ PLPgJJEqNy07AzpINLn4hOqvJGx7ZH3VKVpyFa1EWTUnAhIFqEhqXYdcx/+Vsx+Z XPQjAX7Plf0pQDgHAklyxxyWRSdW+nGPpNd+f/D+jkxaUL6xNrnSwHFw6A1qHnRH bLOb8FYye6QpCZvJ9YtLyrCrPs5cUxhQJZsZ3oR3VQK+tlM+VvVDwGffua+EhTNk Xd9+960XhaLwToQA9cAn1weMuJgcX5ccl+k= -----END CERTIFICATE-----Generated at Mon Mar 2 17:26:58 2026 by rpki-client