$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa File: 0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa (raw, json) Hash identifier: i+T0OD55vCS2JvnN9S+9cGYsrfUg7k++bRGOG8g7ECc= Subject key identifier: 91:B7:A1:ED:6C:B1:48:D7:7C:BB:6C:8E:73:CF:BE:B4:7A:DF:25:52 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C271C538A1DDECD8AFBC40 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5600::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:71:c5:38:a1:dd:ec:d8:af:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=edc7f3e2-652d-4283-b87a-47fbda0374e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:dd:8a:a1:92:6e:2c:ff:7d:27:84:7a:87:d9: c9:3c:5e:a5:57:a9:6b:82:ea:8c:67:48:92:a8:90: 00:56:05:96:b5:c3:61:1a:29:0a:c3:7a:a0:b4:cd: 78:09:43:0a:47:29:19:e1:fb:46:4b:f4:dd:bf:c0: b1:a1:bf:13:c4:89:ab:3d:a5:23:98:7b:c2:b9:f9: d1:26:48:46:84:36:12:f2:fa:18:c7:22:b6:48:29: 28:c3:5e:0b:f9:7e:46:c6:4c:b6:f4:72:cd:e9:cc: 59:b9:c8:43:a7:60:33:c2:d5:ad:e4:82:57:ff:92: 1d:b2:04:e2:2a:03:e9:78:37:6c:99:54:79:c5:2c: 51:b3:db:e5:ba:7c:03:e6:91:8a:57:f5:3d:6f:21: 6c:1d:4a:50:9a:01:99:12:22:d1:24:e7:7b:39:e6: 69:e5:f1:e5:f2:70:40:46:c0:d1:0f:bc:fd:2f:84: fc:c4:0e:38:ca:11:a0:30:ff:15:61:78:70:ba:49: 5f:8d:11:a0:de:1c:2e:7e:22:1b:75:48:6f:b4:d0: bc:03:1b:28:f2:93:8e:80:cc:54:cd:26:95:6b:bd: 24:16:02:27:68:c2:57:8a:2e:7c:cc:e9:89:55:96: 24:3f:87:2e:54:6a:0d:fe:73:6e:ed:c6:04:c7:fb: e5:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B7:A1:ED:6C:B1:48:D7:7C:BB:6C:8E:73:CF:BE:B4:7A:DF:25:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0ffe8475-c7c7-3bfa-85cd-70fd14896814.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5600::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:aa:07:d3:f4:c7:f0:43:43:59:2a:7e:2f:6a:42:e0:d5:ff: 7a:67:b9:1b:30:8d:13:34:ac:87:79:a0:51:a8:f1:dd:01:f4: 3e:6b:32:9a:72:e3:6e:f8:5b:15:bd:61:fb:99:07:6d:36:04: 21:ce:fc:99:43:63:45:53:04:d4:58:e9:c2:04:18:bc:54:12: 16:da:a7:e6:43:7c:bd:83:cf:be:0a:1a:5a:a1:15:42:4b:9c: 50:8b:a3:e4:32:37:dd:8a:c0:8e:cb:99:2f:11:65:6a:80:c9: 36:25:bd:bd:78:73:69:13:64:4f:bf:61:39:c8:45:ba:a4:80: 58:25:0e:92:8d:15:d0:47:25:87:2c:a1:23:55:af:79:c7:c8: ab:e5:f9:46:d2:d0:4c:cd:82:d2:98:b5:40:01:04:43:f2:9d: eb:02:bc:1a:ba:98:b5:8d:75:17:41:fb:6b:c1:0f:47:37:ea: c1:48:5c:75:9d:7c:a0:54:01:3f:37:79:b8:24:ad:88:32:65: 66:5a:83:25:aa:d9:d5:cb:d9:bc:c2:14:56:44:79:db:f7:9f: b4:b1:69:cb:f0:d0:d1:74:c4:8b:e0:c5:e5:32:46:b4:18:ff: 16:b8:e0:1d:2e:f3:f9:68:28:33:e1:c0:bc:e3:4b:6d:39:57: ad:40:9a:dd -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnHFOKHd7NivvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWRjN2YzZTItNjUyZC00MjgzLWI4N2EtNDdmYmRhMDM3NGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN2KoZJuLP99J4R6h9nJPF6lV6lrguqMZ0iS qJAAVgWWtcNhGikKw3qgtM14CUMKRykZ4ftGS/Tdv8Cxob8TxImrPaUjmHvCufnR JkhGhDYS8voYxyK2SCkow14L+X5Gxky29HLN6cxZuchDp2AzwtWt5IJX/5IdsgTi KgPpeDdsmVR5xSxRs9vlunwD5pGKV/U9byFsHUpQmgGZEiLRJOd7OeZp5fHl8nBA RsDRD7z9L4T8xA44yhGgMP8VYXhwuklfjRGg3hwufiIbdUhvtNC8Axso8pOOgMxU zSaVa70kFgInaMJXii58zOmJVZYkP4cuVGoN/nNu7cYEx/vlPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJG3oe1ssUjXfLtsjnPPvrR63yVSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGZmZTg0NzUtYzdjNy0z YmZhLTg1Y2QtNzBmZDE0ODk2ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFYA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIqqB9P0x/BDQ1kqfi9qQuDV/3pnuRswjRM0rId5oFGo8d0B9D5r Mppy4274WxW9YfuZB202BCHO/JlDY0VTBNRY6cIEGLxUEhbap+ZDfL2Dz74KGlqh FUJLnFCLo+QyN92KwI7LmS8RZWqAyTYlvb14c2kTZE+/YTnIRbqkgFglDpKNFdBH JYcsoSNVr3nHyKvl+UbS0EzNgtKYtUABBEPynesCvBq6mLWNdRdB+2vBD0c36sFI XHWdfKBUAT83ebgkrYgyZWZagyWq2dXL2bzCFFZEedv3n7Sxacvw0NF0xIvgxeUy RrQY/xa44B0u8/loKDPhwLzjS205V61Amt0= -----END CERTIFICATE-----Generated at Sun Sep 20 23:30:46 2026 by rpki-client