$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa File: 21dd65ff-f301-3724-8668-56e32ad90863.roa (raw, json) Hash identifier: 71emG4sw1lZwvmXBGGwKr9iKdAmyZOeoRM4Bq4Yr9Xw= Subject key identifier: 69:31:CF:33:AC:4B:CE:99:DD:23:4F:B0:AE:23:87:44:4F:6F:84:0C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584CC07CC33F07E031265D15E180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:4b70::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:c3:3f:07:e0:31:26:5d:15:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=82f810bb-f3ad-497a-a571-e3b4dc16d264 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6f:a1:de:8e:b1:b0:76:ed:e3:9d:56:2d:54: 3e:09:b0:44:33:68:0f:22:bc:c8:ff:1e:73:ea:62: 76:4f:bd:e2:93:6e:af:8a:36:7d:2b:41:76:2e:55: 1c:32:e0:99:ef:5c:35:15:15:61:7f:8c:26:0d:24: 20:8a:8a:36:47:3f:5c:0c:60:93:23:29:f7:c4:80: d6:f4:ea:8a:ab:6f:01:3f:a2:29:86:ac:0f:27:3e: 77:fb:0e:bb:db:1b:06:e6:30:a4:73:aa:9b:51:31: 38:2c:e3:88:df:b1:1e:50:69:34:e4:96:12:6f:fe: 28:c8:b1:f5:7f:17:bb:5e:dc:b7:1f:e0:0a:b2:b3: 00:6e:22:ae:a2:2c:93:c7:70:b1:88:76:5b:80:07: b4:7d:1e:70:11:2f:e4:44:78:0e:da:d7:cd:36:09: de:19:91:09:9a:88:d5:34:7b:90:f2:cd:29:36:69: 8d:4e:ed:93:74:93:ef:f0:16:92:5d:6c:28:ea:b3: 3c:33:d2:78:b5:4d:66:77:02:81:c0:9e:fa:17:81: b8:1d:66:1d:13:e7:de:9c:83:4d:d8:0a:ed:be:93: c9:ee:6a:07:20:32:2f:a6:b5:4b:07:d4:a3:49:2c: 61:eb:ec:72:ca:1a:cd:d9:ae:0e:06:84:34:86:3f: 6a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:31:CF:33:AC:4B:CE:99:DD:23:4F:B0:AE:23:87:44:4F:6F:84:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21dd65ff-f301-3724-8668-56e32ad90863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4b70::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:ae:b3:71:e5:23:3f:f0:f8:35:e9:0e:00:17:41:5a:76:e6: 44:c6:0f:30:de:20:18:2b:41:b1:d9:86:74:9d:e2:01:e5:82: 16:d0:ce:40:6e:aa:0b:b2:4a:0f:90:7e:84:85:b9:b3:36:a5: 81:41:4c:f3:68:f5:5f:0a:28:94:5a:06:d3:59:5f:c6:99:2d: 03:17:02:2d:9f:9f:9a:93:cc:f3:e5:44:53:f2:a8:b3:77:52: bc:32:e9:3c:96:12:3b:8b:99:8b:b7:81:0e:02:9e:ca:2e:42: ec:0a:e3:ca:b8:96:42:1e:02:88:df:2f:02:b4:e3:6c:94:e2: 94:a5:9a:3f:a4:fe:7b:2c:c4:f2:91:eb:9c:48:74:66:60:e5: 6a:b1:b4:62:89:16:ab:4b:96:13:99:41:f0:a9:55:a1:d5:c1: 97:60:0a:f2:2e:bd:68:b1:20:ae:2a:cb:d8:f5:9b:3c:e2:3e: 0f:cf:19:bd:7b:fc:e6:8f:0d:55:fc:8c:ef:5a:47:b2:d5:66: 83:25:56:0f:da:ec:85:8b:27:5f:2e:63:23:62:47:10:15:11: 4e:ac:87:7c:15:91:62:91:b8:bd:9c:03:4f:67:9f:58:e7:e5: ab:8c:69:72:29:2c:42:f0:2b:a2:dd:fc:e1:3f:43:81:6e:f8: 12:77:ea:7a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfMM/B+AxJl0V4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk ODJmODEwYmItZjNhZC00OTdhLWE1NzEtZTNiNGRjMTZkMjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2+h3o6xsHbt451WLVQ+CbBEM2gPIrzI/x5z 6mJ2T73ik26vijZ9K0F2LlUcMuCZ71w1FRVhf4wmDSQgioo2Rz9cDGCTIyn3xIDW 9OqKq28BP6IphqwPJz53+w672xsG5jCkc6qbUTE4LOOI37EeUGk05JYSb/4oyLH1 fxe7Xty3H+AKsrMAbiKuoiyTx3CxiHZbgAe0fR5wES/kRHgO2tfNNgneGZEJmojV NHuQ8s0pNmmNTu2TdJPv8BaSXWwo6rM8M9J4tU1mdwKBwJ76F4G4HWYdE+fenINN 2ArtvpPJ7moHIDIvprVLB9SjSSxh6+xyyhrN2a4OBoQ0hj9qFwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGkxzzOsS86Z3SNPsK4jh0RPb4QMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFkZDY1ZmYtZjMwMS0z NzI0LTg2NjgtNTZlMzJhZDkwODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEtw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACCus3HlIz/w+DXpDgAXQVp25kTGDzDeIBgrQbHZhnSd4gHlghbQ zkBuqguySg+QfoSFubM2pYFBTPNo9V8KKJRaBtNZX8aZLQMXAi2fn5qTzPPlRFPy qLN3Urwy6TyWEjuLmYu3gQ4CnsouQuwK48q4lkIeAojfLwK042yU4pSlmj+k/nss xPKR65xIdGZg5WqxtGKJFqtLlhOZQfCpVaHVwZdgCvIuvWixIK4qy9j1mzziPg/P Gb17/OaPDVX8jO9aR7LVZoMlVg/a7IWLJ18uYyNiRxAVEU6sh3wVkWKRuL2cA09n n1jn5auMaXIpLELwK6Ld/OE/Q4Fu+BJ36no= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:56 2026 by rpki-client