$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0abfe3cc-36b8-3983-bf82-fe17b3b457f6.roa File: 0abfe3cc-36b8-3983-bf82-fe17b3b457f6.roa (raw, json) Hash identifier: 1dD1qyO7ODeykE0I9lgf9UDldujpH5uJVgROsCdF2Es= Subject key identifier: 10:4A:B1:D9:95:87:6A:E9:68:62:EC:4F:03:81:A0:88:5A:9E:F3:0A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C277E9E0344E9738C4E680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0abfe3cc-36b8-3983-bf82-fe17b3b457f6.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:45b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:77:e9:e0:34:4e:97:38:c4:e6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=3965eca1-e188-4833-96b3-b4bd5b1e5381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ed:06:80:02:d1:b9:04:21:44:6e:ab:b4:30: c4:8c:f3:27:23:91:5e:fc:e5:77:57:48:e5:8b:53: ab:a9:11:df:1c:46:fc:1f:7e:a6:ae:7a:c8:6f:58: f3:b2:30:76:7d:fc:93:da:58:b1:ae:3e:89:87:ac: c3:fb:e9:41:48:8a:0d:ab:6b:d0:3d:d0:65:86:55: f1:60:7f:d4:32:d4:82:22:f5:dc:95:03:1a:9c:a6: c7:e1:27:bb:ca:0f:a0:7c:76:cf:88:04:03:3d:29: 2b:b9:be:48:b4:bd:5b:4f:aa:8c:30:61:e5:11:1d: 3f:4c:bf:ef:e8:30:98:3f:c1:3b:c9:c1:a1:42:a4: cf:47:ac:06:b5:65:5d:c5:d9:4c:f8:38:ac:99:9c: 68:a7:86:f9:97:07:2a:3e:42:8d:05:77:89:e0:99: a1:ca:02:60:2c:d9:18:e4:31:61:2f:2b:e2:9f:69: 22:32:37:07:91:a4:fa:04:0f:c0:a7:73:71:9c:80: 4c:73:92:ed:e6:1e:7d:55:91:2f:90:ef:47:c9:d0: 0e:63:31:30:10:36:1c:ba:3e:00:10:54:3b:96:cf: 4b:e5:81:09:77:38:99:11:b7:c7:5e:1c:3e:cb:ca: 40:bb:7e:ff:90:ee:a3:c2:25:05:8b:83:9d:17:0f: be:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:4A:B1:D9:95:87:6A:E9:68:62:EC:4F:03:81:A0:88:5A:9E:F3:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0abfe3cc-36b8-3983-bf82-fe17b3b457f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:45b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:43:0b:a1:8d:0b:80:cc:51:f3:10:ab:77:54:16:10:a0:92: 0c:71:d7:7f:5c:14:a8:89:4d:96:ee:43:52:68:38:5a:f5:db: 1a:29:74:58:48:38:3c:50:af:ad:54:ba:59:6a:97:a7:a2:f4: 56:7d:e8:fe:08:66:c5:5c:d1:2a:93:bf:fe:21:72:d4:a6:1f: 90:6f:e3:b1:c3:3d:89:70:75:93:38:59:c8:ed:e0:4b:61:bb: 44:8f:1a:28:44:c4:0a:03:a1:4a:0d:e4:f8:5b:4a:8b:20:6c: 4b:3b:b8:74:05:be:7f:98:ac:ab:bc:f0:2c:4c:24:5b:66:81: 49:9f:4b:1b:28:6e:55:db:96:b1:b2:c6:13:52:7f:0a:07:a6: c3:df:19:c6:2f:35:84:c3:ca:a4:3c:d6:85:5f:ce:55:74:59: 04:2e:57:61:a5:a3:f7:29:b1:ee:c4:1f:00:ec:97:f9:e4:dd: ce:78:af:e9:62:59:b5:7c:7b:16:77:77:38:be:60:c8:8c:ad: f2:40:a1:e0:b3:ef:22:60:23:34:be:4f:e2:cd:e9:93:6d:90: 87:b4:51:5a:62:02:5b:09:32:1b:a7:ce:c4:40:5c:6f:bb:2b: 9f:3b:f6:6f:8c:34:a7:0f:0b:12:f6:12:c2:ee:31:22:00:41: 06:44:eb:fb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnfp4DROlzjE5oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk Mzk2NWVjYTEtZTE4OC00ODMzLTk2YjMtYjRiZDViMWU1MzgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu0GgALRuQQhRG6rtDDEjPMnI5Fe/OV3V0jl i1OrqRHfHEb8H36mrnrIb1jzsjB2ffyT2lixrj6Jh6zD++lBSIoNq2vQPdBlhlXx YH/UMtSCIvXclQManKbH4Se7yg+gfHbPiAQDPSkrub5ItL1bT6qMMGHlER0/TL/v 6DCYP8E7ycGhQqTPR6wGtWVdxdlM+DismZxop4b5lwcqPkKNBXeJ4JmhygJgLNkY 5DFhLyvin2kiMjcHkaT6BA/Ap3NxnIBMc5Lt5h59VZEvkO9HydAOYzEwEDYcuj4A EFQ7ls9L5YEJdziZEbfHXhw+y8pAu37/kO6jwiUFi4OdFw++BQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBBKsdmVh2rpaGLsTwOBoIhanvMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGFiZmUzY2MtMzZiOC0z OTgzLWJmODItZmUxN2IzYjQ1N2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEWw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFxDC6GNC4DMUfMQq3dUFhCgkgxx139cFKiJTZbuQ1JoOFr12xop dFhIODxQr61Uullql6ei9FZ96P4IZsVc0SqTv/4hctSmH5Bv47HDPYlwdZM4Wcjt 4Ethu0SPGihExAoDoUoN5PhbSosgbEs7uHQFvn+YrKu88CxMJFtmgUmfSxsoblXb lrGyxhNSfwoHpsPfGcYvNYTDyqQ81oVfzlV0WQQuV2Glo/cpse7EHwDsl/nk3c54 r+liWbV8exZ3dzi+YMiMrfJAoeCz7yJgIzS+T+LN6ZNtkIe0UVpiAlsJMhunzsRA XG+7K5879m+MNKcPCxL2EsLuMSIAQQZE6/s= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:59 2026 by rpki-client