$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1aef4fab-6f62-3263-b0a4-6d6302ce3873.roa File: 1aef4fab-6f62-3263-b0a4-6d6302ce3873.roa (raw, json) Hash identifier: hGEjyUtOBqR7PbcukNdoyu77Enu33jmOMgbi+A5+LG8= Subject key identifier: 46:87:43:BA:E6:64:33:A9:4A:BD:3D:6E:76:33:FD:96:53:16:F9:5A Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004BFFF213C6917A2F84DE00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1aef4fab-6f62-3263-b0a4-6d6302ce3873.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:4370::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4b:ff:f2:13:c6:91:7a:2f:84:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=1fa3f648-f070-4d52-b6f8-012620ea92a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:bf:aa:58:b5:b3:13:ca:6b:ff:21:45:22:fc: 35:66:b1:60:d2:d3:80:5f:5e:ee:dd:cc:96:e5:7d: 64:5e:05:c2:bf:99:bc:08:be:ca:2d:4c:e4:39:80: f9:e8:90:52:10:17:3f:8c:e9:09:3b:46:5d:12:3e: 33:b2:63:c5:c3:56:4e:8e:1d:6c:3d:cc:ea:b5:50: 99:8a:cc:91:60:b9:78:cd:6a:eb:35:ec:c9:43:b8: 02:61:03:fd:15:a6:76:d5:38:ea:ab:98:33:d0:ab: 2f:e9:45:1a:bf:3b:9a:17:a0:56:0d:6a:2f:1c:46: 82:05:d2:ea:27:8c:0f:0d:1e:b4:a5:85:4e:09:d9: 9e:d3:b4:ff:72:34:12:4b:79:e1:5b:cf:b6:84:53: c2:a7:4f:24:c6:00:bc:7f:13:7a:fa:ac:60:43:10: 1c:5d:31:68:5c:75:b2:c9:a3:53:c6:b2:af:11:ca: 16:5a:cb:9d:6e:4e:6d:d4:e4:aa:ea:be:95:aa:88: a1:22:64:35:06:5d:97:77:ec:bc:ad:dc:ae:6f:66: db:d4:f0:2e:ae:c9:a3:8b:bd:b2:fa:6e:3f:2b:40: a2:42:a1:64:d4:ce:76:ff:f4:c5:29:3e:43:b6:2c: c4:16:74:39:2e:28:ec:cd:c9:d1:f1:f1:e9:8b:28: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:43:BA:E6:64:33:A9:4A:BD:3D:6E:76:33:FD:96:53:16:F9:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/1aef4fab-6f62-3263-b0a4-6d6302ce3873.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4370::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:5b:58:66:cd:59:cc:aa:7c:88:c4:24:ba:a1:13:33:2e:5a: 10:69:13:eb:9f:63:27:02:da:46:72:ad:6d:2e:94:f1:bb:b9: 25:85:a0:09:d6:8c:32:3c:75:75:94:13:73:c3:a9:f4:48:0f: 0c:2a:1c:f7:35:3d:8e:0b:3d:ea:9f:5d:e0:6b:b6:2e:70:ef: d2:92:4c:5c:b9:90:1c:ce:ca:b0:9d:bb:ee:63:a6:70:85:d3: f0:d1:ea:d0:9f:1b:60:db:7c:d6:7c:f2:c7:47:82:50:77:f4: 2c:61:e0:29:31:00:0c:68:9f:54:9d:b3:93:56:db:2b:d2:92: 0b:09:ee:86:cf:8e:fd:8d:67:90:94:2e:95:68:35:0d:45:d8: 38:33:05:81:71:34:44:3a:45:13:5d:58:9e:06:9f:b8:44:3a: f5:9f:7e:22:3a:4b:8b:a0:b8:c9:23:88:20:f1:da:a2:f7:b0: e5:d5:da:3a:50:10:e1:19:a5:67:b4:67:1f:38:e1:a0:9e:f6: f3:6e:c3:a1:a3:5b:ef:99:ce:bb:43:4f:5b:c3:e9:d7:d1:96: 0c:97:71:29:eb:59:a5:31:77:df:c6:a0:6a:7e:19:6f:ad:4e: 93:60:20:c3:e8:04:34:1c:a5:c1:ae:8e:9b:a5:d7:fd:64:23: 23:60:7c:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsAS//yE8aRei+E3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MWZhM2Y2NDgtZjA3MC00ZDUyLWI2ZjgtMDEyNjIwZWE5MmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7+qWLWzE8pr/yFFIvw1ZrFg0tOAX17u3cyW 5X1kXgXCv5m8CL7KLUzkOYD56JBSEBc/jOkJO0ZdEj4zsmPFw1ZOjh1sPczqtVCZ isyRYLl4zWrrNezJQ7gCYQP9FaZ21Tjqq5gz0Ksv6UUavzuaF6BWDWovHEaCBdLq J4wPDR60pYVOCdme07T/cjQSS3nhW8+2hFPCp08kxgC8fxN6+qxgQxAcXTFoXHWy yaNTxrKvEcoWWsudbk5t1OSq6r6VqoihImQ1Bl2Xd+y8rdyub2bb1PAursmji72y +m4/K0CiQqFk1M52//TFKT5DtizEFnQ5LijszcnR8fHpiyhH7QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEaHQ7rmZDOpSr09bnYz/ZZTFvlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMWFlZjRmYWItNmY2Mi0z MjYzLWIwYTQtNmQ2MzAyY2UzODczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQENw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAH1bWGbNWcyqfIjEJLqhEzMuWhBpE+ufYycC2kZyrW0ulPG7uSWF oAnWjDI8dXWUE3PDqfRIDwwqHPc1PY4LPeqfXeBrti5w79KSTFy5kBzOyrCdu+5j pnCF0/DR6tCfG2DbfNZ88sdHglB39Cxh4CkxAAxon1Sds5NW2yvSkgsJ7obPjv2N Z5CULpVoNQ1F2DgzBYFxNEQ6RRNdWJ4Gn7hEOvWffiI6S4uguMkjiCDx2qL3sOXV 2jpQEOEZpWe0Zx844aCe9vNuw6GjW++ZzrtDT1vD6dfRlgyXcSnrWaUxd9/GoGp+ GW+tTpNgIMPoBDQcpcGujpul1/1kIyNgfOU= -----END CERTIFICATE-----Generated at Wed Nov 5 09:14:19 2025 by rpki-client