$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0449e39-8b9e-3ffe-8c11-0b422807b346.roa File: d0449e39-8b9e-3ffe-8c11-0b422807b346.roa (raw, json) Hash identifier: Bm7f2sOnhmGHjKoXlyrdc47AtGFqzW+y1PBNO8cDmm0= Subject key identifier: C6:30:0F:F8:46:7B:BE:25:31:5C:13:73:E9:A6:9D:A4:C1:33:22:01 Certificate issuer: /CN=767ef686-79af-43b0-9354-86aa78f8c407 Certificate serial: 010D0C9F4328584B65EF04EFCB76E1F479C19100 Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0449e39-8b9e-3ffe-8c11-0b422807b346.roa Signing time: Fri 03 Oct 2025 10:45:56 +0000 ROA not before: Fri 03 Oct 2025 10:45:56 +0000 ROA not after: Thu 01 Jan 2026 11:45:56 +0000 asID: 3360 IP address blocks: 2607:f028:97::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:65:ef:04:ef:cb:76:e1:f4:79:c1:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407 Validity Not Before: Oct 3 10:45:56 2025 GMT Not After : Jan 1 11:45:56 2026 GMT Subject: CN=b6214ab4-a981-4a72-88ca-9c3851490956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fd:27:55:66:29:93:10:45:f9:b9:b5:6e:1e: 80:98:f4:70:3f:ef:76:4a:f3:d6:8c:ed:5e:6d:e0: 34:68:3d:8b:92:01:57:f1:74:d6:7f:b5:e5:a1:18: 26:3e:bf:7e:5d:87:8b:71:65:9b:f9:7a:21:60:6c: 9f:cb:d4:b2:fb:95:c0:31:87:b8:69:10:c4:1e:30: 48:0f:9e:6a:bf:47:ac:25:06:7f:57:33:9a:37:df: 4b:92:7d:f6:21:6c:ba:25:18:20:d1:dc:9f:b2:ec: 68:23:45:5f:a6:7f:5f:6d:14:96:de:1b:5f:62:f8: 17:40:7d:c7:33:7b:fc:bb:46:26:b1:24:8d:3f:a3: 79:52:87:fe:38:8e:f6:71:45:7c:2e:29:f0:e2:51: dd:28:67:aa:93:1f:da:a5:89:af:0f:52:cd:05:21: 52:d6:0c:2a:a0:6e:24:d5:ae:30:a3:4a:9a:ad:bd: 30:8c:10:cc:5d:9b:b2:98:1a:84:2c:c9:6d:da:92: ac:34:32:4e:f8:c1:77:cc:27:ef:9c:7d:ca:21:3f: c4:ea:df:cb:68:cf:64:af:53:d8:e1:bf:f1:74:f8: 18:d3:1e:13:c9:53:30:60:f4:96:89:dd:88:c9:a2: 29:8a:27:74:5d:c6:1f:8d:cc:1b:10:7a:a8:37:7f: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:30:0F:F8:46:7B:BE:25:31:5C:13:73:E9:A6:9D:A4:C1:33:22:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/d0449e39-8b9e-3ffe-8c11-0b422807b346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl X509v3 Authority Key Identifier: keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer sbgp-ipAddrBlock: critical IPv6: 2607:f028:97::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:44:12:a0:27:7c:b0:51:39:fc:f1:f8:26:00:da:08:a7:78: 69:86:ea:33:94:3f:9c:ff:78:52:36:41:7d:1a:ad:a0:15:37: d4:fd:c7:63:97:61:83:d1:93:24:bd:0a:24:14:d7:11:90:3c: 42:6b:26:e7:9b:e3:63:e2:46:b4:38:82:95:fe:34:39:02:0f: ad:f9:f0:9d:f8:aa:f9:92:5e:4d:a0:ce:86:94:62:e6:49:c7: 50:79:65:3a:1a:05:b7:72:9a:e5:57:b4:31:01:2a:c8:0d:4b: 58:bb:d6:30:20:61:0b:26:57:5b:81:ac:06:db:91:06:ff:9e: b5:89:fa:ba:c9:cd:85:70:0a:0f:73:bf:7c:7c:9f:39:e2:0e: 46:ed:91:f0:6e:b2:f8:0d:50:16:18:64:32:a5:36:91:a2:a8: 89:db:53:99:b6:6c:57:0a:27:5c:0d:59:b4:69:52:99:fa:c4: a6:62:70:e1:a4:d9:6c:2c:e8:c7:f3:18:39:d0:95:09:0d:1c: b3:5b:18:b1:04:b5:43:a0:73:b9:88:4d:89:ba:0e:1f:06:32: 78:ed:e7:c9:97:52:44:b7:ba:41:1e:75:6a:15:e7:84:44:f5: 62:10:80:9d:6a:e1:d4:8e:fb:b6:d4:44:1c:0a:f3:46:32:9f: 07:f5:22:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEtl7wTvy3bh9HnBkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj NDA3MB4XDTI1MTAwMzEwNDU1NloXDTI2MDEwMTExNDU1NlowLzEtMCsGA1UEAxMk YjYyMTRhYjQtYTk4MS00YTcyLTg4Y2EtOWMzODUxNDkwOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzP0nVWYpkxBF+bm1bh6AmPRwP+92SvPWjO1e beA0aD2LkgFX8XTWf7XloRgmPr9+XYeLcWWb+XohYGyfy9Sy+5XAMYe4aRDEHjBI D55qv0esJQZ/VzOaN99Lkn32IWy6JRgg0dyfsuxoI0Vfpn9fbRSW3htfYvgXQH3H M3v8u0YmsSSNP6N5Uof+OI72cUV8Linw4lHdKGeqkx/apYmvD1LNBSFS1gwqoG4k 1a4wo0qarb0wjBDMXZuymBqELMlt2pKsNDJO+MF3zCfvnH3KIT/E6t/LaM9kr1PY 4b/xdPgY0x4TyVMwYPSWid2IyaIpiid0XcYfjcwbEHqoN38nPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMYwD/hGe74lMVwTc+mmnaTBMyIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvZDA0NDllMzktOGI5ZS0z ZmZlLThjMTEtMGI0MjI4MDdiMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4 YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh NzhmOGM0MDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgfwKACX MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFlEEqAnfLBROfzx+CYA2gineGmG6jOUP5z/eFI2QX0araAVN9T9 x2OXYYPRkyS9CiQU1xGQPEJrJueb42PiRrQ4gpX+NDkCD6358J34qvmSXk2gzoaU YuZJx1B5ZToaBbdymuVXtDEBKsgNS1i71jAgYQsmV1uBrAbbkQb/nrWJ+rrJzYVw Cg9zv3x8nzniDkbtkfBusvgNUBYYZDKlNpGiqInbU5m2bFcKJ1wNWbRpUpn6xKZi cOGk2Wws6MfzGDnQlQkNHLNbGLEEtUOgc7mITYm6Dh8GMnjt58mXUkS3ukEedWoV 54RE9WIQgJ1q4dSO+7bURBwK80Yynwf1IrA= -----END CERTIFICATE-----Generated at Mon Oct 20 01:30:10 2025 by rpki-client