$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/351dbdb8-5e2a-3c83-b9bf-0e7b1592c952.roa File: 351dbdb8-5e2a-3c83-b9bf-0e7b1592c952.roa (raw, json) Hash identifier: kx3OGSzO8DCc34H2sWnXw55639IZo5hSriy8uMFbMQ4= Subject key identifier: 16:E1:38:C4:ED:C6:FB:06:64:65:62:D1:25:DE:EA:7D:93:E1:AF:AA Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584DA6B00D0124C40110B4FFF0A0 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/351dbdb8-5e2a-3c83-b9bf-0e7b1592c952.roa Signing time: Tue 28 Apr 2026 01:00:24 +0000 ROA not before: Tue 28 Apr 2026 01:00:24 +0000 ROA not after: Mon 27 Jul 2026 01:00:24 +0000 asID: 3356 IP address blocks: 2607:f028:a50::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a6:b0:0d:01:24:c4:01:10:b4:ff:f0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Apr 28 01:00:24 2026 GMT Not After : Jul 27 01:00:24 2026 GMT Subject: CN=a218aaab-555c-4461-942b-2bbf28421c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:3e:77:7d:0d:21:b9:f0:15:56:72:42:28: da:a1:85:b4:f8:04:8f:a7:93:3b:1e:52:14:38:1d: f0:b2:7e:21:36:7c:75:72:76:b1:77:a7:43:4f:23: 05:0c:30:6c:d9:40:58:7e:fb:b3:25:8d:ae:32:1d: 68:b5:a7:88:24:db:66:a5:98:17:72:60:2e:1d:11: ac:41:42:4e:b2:43:5c:7f:1c:1f:54:fc:ef:4d:a7: 0d:9f:3d:1b:35:7a:d8:55:48:9a:c4:db:58:b8:8b: 2d:b6:66:e0:e6:d1:c0:cf:7a:5e:e8:46:7b:e0:f6: 3a:17:92:c9:a3:7b:97:c1:a8:2d:c0:fc:73:90:8c: dc:bc:94:c6:c8:83:7a:88:68:7a:f1:92:26:fd:2d: 56:25:a6:90:c7:b6:47:1b:11:b1:8d:d5:eb:33:a8: f1:0d:42:da:55:29:b7:ad:49:f8:7b:77:00:af:2a: ff:fe:39:d5:96:41:b3:e5:50:10:e4:26:96:8a:19: 51:0c:aa:2e:5c:5f:aa:69:e8:32:0e:ea:41:d4:b2: 28:dd:0b:44:04:63:c0:50:57:af:24:92:07:6b:ad: 6b:85:85:db:71:c9:ea:df:2a:a1:8d:44:68:77:0e: 9e:b6:ca:1f:db:6e:a6:b3:c5:47:ac:44:97:b0:2e: 45:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E1:38:C4:ED:C6:FB:06:64:65:62:D1:25:DE:EA:7D:93:E1:AF:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/351dbdb8-5e2a-3c83-b9bf-0e7b1592c952.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:a50::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5c:51:8a:fd:3f:6e:a1:02:5a:aa:7f:2a:5a:5e:04:f0:d6: 2b:10:fb:0d:61:c7:db:a4:6f:22:1f:d6:7d:59:85:ec:2a:05: a8:eb:64:c6:1a:bd:b5:7b:69:05:b5:0e:0c:eb:d6:46:e3:4b: c2:55:a6:b5:93:1f:0b:b5:18:89:66:41:c6:ff:b3:fd:65:e8: a1:d8:6a:79:b4:ab:3f:37:af:08:42:81:e6:f9:2d:da:97:c1: d3:3a:dd:7b:c7:19:ee:9e:f2:73:97:d3:36:90:c3:98:8a:97: 62:f8:c1:7b:43:74:17:ad:0b:09:90:98:74:c7:e6:1a:c4:87: 47:c8:b7:a9:ad:07:db:47:ec:a4:8a:75:e0:f5:da:dc:15:45: 14:18:18:a9:db:b7:df:e5:f4:1a:5f:73:04:f0:bc:40:7e:92: 98:66:71:bc:9b:cf:f2:9e:46:c7:9f:47:7c:00:cd:3b:e1:6c: da:70:fa:2a:c6:b8:ab:cb:2b:0c:61:18:c1:08:c0:c2:48:af: cb:5e:69:f1:34:fe:b7:b7:5b:4d:11:37:cf:ca:0c:19:4f:62: 2d:46:c5:d7:71:1b:55:65:b4:a8:fd:87:6a:ba:28:7b:e4:bd: c2:c4:63:18:e5:73:7e:8c:bf:6b:3e:af:16:49:af:9c:58:4d: e1:17:a8:14 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2msA0BJMQBELT/8KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI2MDQyODAxMDAyNFoXDTI2MDcyNzAxMDAyNFowLzEtMCsGA1UEAxMk YTIxOGFhYWItNTU1Yy00NDYxLTk0MmItMmJiZjI4NDIxYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWc+d30NIbnwFVZyQijaoYW0+ASPp5M7HlIU OB3wsn4hNnx1cnaxd6dDTyMFDDBs2UBYfvuzJY2uMh1otaeIJNtmpZgXcmAuHRGs QUJOskNcfxwfVPzvTacNnz0bNXrYVUiaxNtYuIsttmbg5tHAz3pe6EZ74PY6F5LJ o3uXwagtwPxzkIzcvJTGyIN6iGh68ZIm/S1WJaaQx7ZHGxGxjdXrM6jxDULaVSm3 rUn4e3cAryr//jnVlkGz5VAQ5CaWihlRDKouXF+qaegyDupB1LIo3QtEBGPAUFev JJIHa61rhYXbccnq3yqhjURodw6etsof226ms8VHrESXsC5F6wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbhOMTtxvsGZGVi0SXe6n2T4a+qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvMzUxZGJkYjgtNWUyYS0z YzgzLWI5YmYtMGU3YjE1OTJjOTUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgfwKApQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADtcUYr9P26hAlqqfypaXgTw1isQ+w1hx9ukbyIf1n1ZhewqBajr ZMYavbV7aQW1Dgzr1kbjS8JVprWTHwu1GIlmQcb/s/1l6KHYanm0qz83rwhCgeb5 LdqXwdM63XvHGe6e8nOX0zaQw5iKl2L4wXtDdBetCwmQmHTH5hrEh0fIt6mtB9tH 7KSKdeD12twVRRQYGKnbt9/l9BpfcwTwvEB+kphmcbybz/KeRsefR3wAzTvhbNpw +irGuKvLKwxhGMEIwMJIr8teafE0/re3W00RN8/KDBlPYi1GxddxG1VltKj9h2q6 KHvkvcLEYxjlc36Mv2s+rxZJr5xYTeEXqBQ= -----END CERTIFICATE-----Generated at Wed May 13 12:10:43 2026 by rpki-client