$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f22751a-0701-3f54-b4e3-a476218e5e7f.roa File: 0f22751a-0701-3f54-b4e3-a476218e5e7f.roa (raw, json) Hash identifier: Ezde45HPQ/2vCMTmXtETaYqIh07E+RgObzAynn9jPUE= Subject key identifier: 2C:BA:06:B7:91:23:B8:BD:4D:95:5A:3A:D6:F7:FF:59:8E:E7:D3:F2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C27776F2E687F79CD7FF00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f22751a-0701-3f54-b4e3-a476218e5e7f.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4990::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:77:76:f2:e6:87:f7:9c:d7:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=655efee5-455e-4597-9620-e56bcdbbf9b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:84:66:6d:3f:5d:e0:e2:04:61:03:7e:47:7a: 24:80:e5:d1:5d:60:4d:df:e1:5a:28:ff:2f:3f:f0: d6:58:5d:a9:94:f4:b1:5a:fc:ac:36:39:f0:9c:2d: 3e:d3:1f:86:2e:27:0c:e3:d9:a9:32:db:57:a8:f1: ab:00:26:f3:39:ef:5a:3a:a1:8a:79:20:ff:00:08: fd:e8:ce:fd:04:d4:69:bd:22:f4:01:98:94:9b:f5: 07:2e:85:08:a0:a4:bd:81:a8:15:25:9a:e1:2b:03: 5c:23:70:62:9f:0c:f2:fe:79:81:31:07:6a:10:86: 16:e1:9e:05:ea:b3:a0:b6:01:55:bc:e0:2a:f2:d1: ce:16:02:1b:f5:4b:4c:9d:69:60:25:35:c7:48:61: 3f:8b:26:e1:79:6c:54:b7:e2:da:83:43:78:bb:01: 3b:fc:8f:2a:63:54:b4:76:0e:0f:cf:0e:94:7a:81: 68:65:47:75:43:39:9a:61:f5:9f:22:20:5d:eb:c3: a3:c1:42:30:d4:43:af:45:3e:52:2b:eb:b3:1e:8d: 36:0a:ad:63:31:ed:06:ef:3a:49:68:7d:c2:7a:db: bb:c9:d6:a8:4e:ab:ae:38:50:eb:29:7a:8b:de:bb: 6c:5c:17:ae:8f:e2:de:79:5e:80:be:0a:06:99:db: ae:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BA:06:B7:91:23:B8:BD:4D:95:5A:3A:D6:F7:FF:59:8E:E7:D3:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0f22751a-0701-3f54-b4e3-a476218e5e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4990::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:28:c6:9e:6d:34:05:15:2f:08:ea:a9:bd:93:01:57:d5:a3: 9a:7e:bf:d7:a3:72:ed:14:1c:b2:dc:e7:fe:c7:f0:9f:66:5b: e4:e6:d7:7d:bb:71:dc:61:2d:13:d9:86:cb:f9:57:8e:75:67: b1:40:22:b8:cc:76:5e:00:91:4e:70:89:be:03:ca:e6:c0:39: bb:bd:bb:6c:4b:cf:3b:86:c5:8a:bb:08:18:56:c1:69:66:b4: 42:aa:70:70:32:77:84:35:db:cc:83:59:31:b7:30:d1:bd:03: 59:f6:b3:19:25:62:d3:54:9c:34:4e:3c:56:29:1f:d5:b1:7d: 79:00:c6:8c:37:b6:66:48:3a:38:71:17:76:05:04:a6:3f:94: 83:2d:c6:da:28:46:d9:91:58:69:3f:27:23:01:45:16:5a:ed: e9:97:44:02:65:c1:4f:74:f6:44:83:a1:a9:2f:f8:e9:10:26: b5:91:2a:b5:8e:bb:6e:dd:c4:ff:2c:10:62:57:79:06:15:30: 20:56:69:89:fd:01:85:f1:d3:b0:5e:4e:63:94:f0:52:c5:a7: 75:49:32:71:a6:c9:67:2f:49:a4:7d:2c:c0:48:bf:db:61:86: bb:33:9a:1e:f7:81:5c:dc:8d:00:e7:d0:31:9c:1d:8d:62:b7: 30:56:e7:58 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnd28uaH95zX/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NjU1ZWZlZTUtNDU1ZS00NTk3LTk2MjAtZTU2YmNkYmJmOWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIRmbT9d4OIEYQN+R3okgOXRXWBN3+FaKP8v P/DWWF2plPSxWvysNjnwnC0+0x+GLicM49mpMttXqPGrACbzOe9aOqGKeSD/AAj9 6M79BNRpvSL0AZiUm/UHLoUIoKS9gagVJZrhKwNcI3Binwzy/nmBMQdqEIYW4Z4F 6rOgtgFVvOAq8tHOFgIb9UtMnWlgJTXHSGE/iybheWxUt+Lag0N4uwE7/I8qY1S0 dg4Pzw6UeoFoZUd1QzmaYfWfIiBd68OjwUIw1EOvRT5SK+uzHo02Cq1jMe0G7zpJ aH3Cetu7ydaoTquuOFDrKXqL3rtsXBeuj+LeeV6AvgoGmduuuwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCy6BreRI7i9TZVaOtb3/1mO59PyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGYyMjc1MWEtMDcwMS0z ZjU0LWI0ZTMtYTQ3NjIxOGU1ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEmQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQoxp5tNAUVLwjqqb2TAVfVo5p+v9ejcu0UHLLc5/7H8J9mW+Tm 1327cdxhLRPZhsv5V451Z7FAIrjMdl4AkU5wib4DyubAObu9u2xLzzuGxYq7CBhW wWlmtEKqcHAyd4Q128yDWTG3MNG9A1n2sxklYtNUnDROPFYpH9WxfXkAxow3tmZI OjhxF3YFBKY/lIMtxtooRtmRWGk/JyMBRRZa7emXRAJlwU909kSDoakv+OkQJrWR KrWOu27dxP8sEGJXeQYVMCBWaYn9AYXx07BeTmOU8FLFp3VJMnGmyWcvSaR9LMBI v9thhrszmh73gVzcjQDn0DGcHY1itzBW51g= -----END CERTIFICATE-----Generated at Mon Sep 21 11:02:51 2026 by rpki-client