$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa File: f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa (raw, json) Hash identifier: wFGxs56I5cd1ja7vQL79uHfLOkWHVAjU8uTqMktCwm0= Subject key identifier: 1D:3B:B2:2D:99:FC:8B:4F:68:4E:AC:9D:43:04:9B:48:B5:D5:3E:3D Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584BB45D27014E4DA4387E51F680 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 202 IP address blocks: 2607:f028:11::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:27:01:4e:4d:a4:38:7e:51:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=ac72df9c-92ae-4b02-846d-9fd566e0acce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:46:4a:02:fc:f5:eb:d6:12:70:87:5b:96:c8: d5:93:55:a3:c7:74:6c:7c:82:2a:9e:d3:8e:b3:c2: 67:ba:59:b4:4e:cc:b8:7b:20:92:5b:54:b2:f4:c5: 2b:b8:0e:65:62:13:b3:93:e7:b3:ee:29:cd:0c:37: 01:c8:58:e4:b2:c0:f1:6f:72:42:2a:f4:b3:74:f5: 21:7f:9e:af:91:57:cd:3f:ad:53:94:d7:ef:94:b7: 5c:cc:7c:8c:43:c8:f4:90:d1:c7:1e:55:9a:9b:b2: eb:4d:93:e5:98:86:b4:76:ee:36:8e:30:df:a6:1c: 9a:94:d3:5c:6a:73:82:5e:b0:36:89:23:89:d6:92: 1e:d2:50:cd:66:7f:d7:9f:2d:14:98:24:5e:55:a4: ae:a3:8e:a6:fc:8c:06:21:18:47:81:a2:91:b5:c6: 04:d8:0f:d8:49:e4:fc:f5:7d:0d:0e:a7:c8:8a:d7: a1:9d:9f:15:78:b6:cf:7c:b4:9d:fd:29:b5:42:9d: 7d:88:f2:64:29:c2:9d:3e:69:b5:90:27:d1:46:35: b5:27:0f:62:fc:72:c2:74:b2:45:3f:77:ce:25:92: 46:f5:b8:5e:ad:b9:d8:2e:b6:e9:8f:84:7f:70:de: 46:e5:c9:c0:ba:c9:74:7e:79:aa:64:43:eb:88:99: bf:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:3B:B2:2D:99:FC:8B:4F:68:4E:AC:9D:43:04:9B:48:B5:D5:3E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/f8c656ec-419e-3a5b-91b1-96f07c6ab1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:11::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:ee:fe:27:68:4b:d5:f8:71:d2:b8:06:7b:54:8e:c8:e9:8d: 52:9d:ba:c6:1a:7d:6f:9c:74:28:39:44:aa:33:3a:2f:cd:5b: fe:2f:89:d2:e7:5a:f3:3c:05:f6:a5:05:fc:ab:89:95:1a:15: 7b:f6:0e:a9:e1:82:db:39:57:2d:88:7d:b2:ce:51:37:b6:27: 65:3f:25:14:76:a0:3c:82:e1:86:1b:2e:52:cb:e6:5e:0c:3f: c7:0d:68:70:e2:c8:e6:44:74:1f:09:a6:2f:a7:f2:dd:c6:d7: 13:0b:98:45:d3:8b:5f:bf:e3:58:4b:f1:9f:a0:12:e2:fd:9b: 88:5a:b2:8e:2a:11:af:16:0c:8b:54:95:59:25:7d:ce:b2:fe: a2:55:cb:b5:63:52:7a:17:08:44:cf:34:49:76:2c:b8:4f:63: c5:37:b7:e6:f7:f8:f7:42:9a:ec:17:1d:df:35:09:ba:37:23: 89:54:2b:37:16:a2:82:8f:0b:b2:aa:8c:d8:8c:a5:4e:4b:8e: 10:b5:74:db:15:4c:7b:f5:3d:dc:30:33:6d:57:8e:67:0f:73: 28:c3:4d:1e:e5:98:77:b5:9d:2a:28:0e:f0:c5:0f:39:69:45: b8:b5:e7:41:cd:e6:70:65:ee:e5:10:e0:91:ec:91:98:4a:ab: 4c:a1:0f:36 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEu0XScBTk2kOH5R9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk YWM3MmRmOWMtOTJhZS00YjAyLTg0NmQtOWZkNTY2ZTBhY2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkZKAvz169YScIdblsjVk1Wjx3RsfIIqntOO s8Jnulm0Tsy4eyCSW1Sy9MUruA5lYhOzk+ez7inNDDcByFjkssDxb3JCKvSzdPUh f56vkVfNP61TlNfvlLdczHyMQ8j0kNHHHlWam7LrTZPlmIa0du42jjDfphyalNNc anOCXrA2iSOJ1pIe0lDNZn/Xny0UmCReVaSuo46m/IwGIRhHgaKRtcYE2A/YSeT8 9X0NDqfIitehnZ8VeLbPfLSd/Sm1Qp19iPJkKcKdPmm1kCfRRjW1Jw9i/HLCdLJF P3fOJZJG9bherbnYLrbpj4R/cN5G5cnAusl0fnmqZEPriJm/TwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFB07si2Z/ItPaE6snUMEm0i11T49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZjhjNjU2ZWMtNDE5ZS0z YTViLTkxYjEtOTZmMDdjNmFiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKAAR MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGzu/idoS9X4cdK4BntUjsjpjVKdusYafW+cdCg5RKozOi/NW/4v idLnWvM8BfalBfyriZUaFXv2Dqnhgts5Vy2IfbLOUTe2J2U/JRR2oDyC4YYbLlLL 5l4MP8cNaHDiyOZEdB8Jpi+n8t3G1xMLmEXTi1+/41hL8Z+gEuL9m4haso4qEa8W DItUlVklfc6y/qJVy7VjUnoXCETPNEl2LLhPY8U3t+b3+PdCmuwXHd81Cbo3I4lU KzcWooKPC7KqjNiMpU5LjhC1dNsVTHv1PdwwM21XjmcPcyjDTR7lmHe1nSooDvDF DzlpRbi150HN5nBl7uUQ4JHskZhKq0yhDzY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:58:43 2025 by rpki-client