$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa File: 21ff802b-6dbd-3b24-9336-bec9da6b7921.roa (raw, json) Hash identifier: 8WXUsaDEKeDeg1Um1popEuCJ9kdMxL2yzvbsviZKYt0= Subject key identifier: 5A:3A:03:56:B2:16:E8:04:08:8C:09:8E:F2:49:30:DA:BA:39:C6:62 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C26648E19FE8AF4D204700 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:66:48:e1:9f:e8:af:4d:20:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=14a98433-2f9f-4818-ab45-65139bcd2cc3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fa:53:7a:2c:44:ec:55:75:ce:83:97:06:50: 0f:ea:b1:72:2d:00:78:fb:6e:10:10:31:f5:4f:47: ab:bb:f0:d8:54:a5:a4:dc:9b:88:50:7f:1a:20:8b: 61:44:2c:c8:7a:44:25:f5:c7:08:38:42:2b:99:98: 78:3f:4a:61:a3:3b:85:43:a4:09:7f:03:69:f8:97: 23:6f:5a:22:54:5b:56:d3:c1:15:2a:4f:c2:a0:8c: a2:23:a9:31:2f:b8:bf:3d:3f:5f:4e:5d:9e:c3:f8: b3:7b:50:73:a6:39:4f:c2:31:98:18:82:b3:32:9a: 84:81:29:8c:7f:3c:39:f5:77:03:d2:c3:f3:93:fc: 1a:80:f7:18:bc:ce:ef:b9:0f:3d:32:83:96:5c:7b: 92:8b:90:c8:d9:0c:5a:b9:36:a0:28:18:89:af:6f: 35:72:5c:b5:5b:19:f5:2b:d9:44:d7:d2:13:76:6c: 65:46:17:a9:b1:e6:06:22:9a:a1:f3:e6:12:15:6a: 65:18:3e:d9:37:1a:e5:7b:19:c7:b7:90:b9:83:ab: 34:7e:7f:72:2c:52:92:ca:e7:43:71:a1:79:d5:12: a0:6b:8f:e0:57:a9:7d:2d:88:66:22:93:fe:4e:c9: 08:86:c4:6b:10:44:19:2e:96:df:03:64:3d:6a:63: 95:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3A:03:56:B2:16:E8:04:08:8C:09:8E:F2:49:30:DA:BA:39:C6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5fd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:05:ca:69:96:90:ae:1d:30:da:36:d4:1a:cc:8f:bb:bc:2a: d5:3b:77:c6:d6:01:cc:a9:b4:9f:cf:73:74:5f:e4:69:4f:f1: 0c:52:3d:bf:c6:ac:4e:db:ea:9a:4c:20:8c:3e:ba:3d:8d:f9: 02:1d:0d:1f:eb:9b:bf:92:e2:be:6f:a6:df:b5:75:0c:d1:2a: 9a:fe:63:61:45:af:e3:5c:72:d0:ad:75:1e:0a:3b:35:1f:55: 69:7d:a3:31:01:92:64:df:d8:a2:56:56:85:f3:54:78:55:ab: 56:fc:66:b8:e5:bc:b1:86:f0:43:6c:24:9a:73:fd:48:3e:13: 83:53:1a:0f:39:70:ff:b3:31:01:8e:21:81:b9:54:c4:f9:4f: f8:4b:be:0a:0d:36:27:81:67:9f:a2:0b:04:8d:36:37:3c:f9: 2c:39:2d:25:ad:93:4a:7a:c6:dc:37:71:ce:7f:fd:45:34:1f: 40:3b:b7:85:8e:78:98:11:f6:2a:98:22:ef:cc:15:99:73:f4: e6:41:db:a5:67:ef:dc:9e:4d:8a:e2:91:af:7f:aa:1b:c4:c5: 69:8e:1b:3d:c8:f6:61:0b:f2:08:02:6a:bf:70:ea:f2:ad:9b: 2b:cf:4a:ba:75:4e:81:95:82:a1:52:3c:ef:74:7f:8f:9e:3a: 3d:ac:24:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmZI4Z/or00gRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MTRhOTg0MzMtMmY5Zi00ODE4LWFiNDUtNjUxMzliY2QyY2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPpTeixE7FV1zoOXBlAP6rFyLQB4+24QEDH1 T0eru/DYVKWk3JuIUH8aIIthRCzIekQl9ccIOEIrmZh4P0phozuFQ6QJfwNp+Jcj b1oiVFtW08EVKk/CoIyiI6kxL7i/PT9fTl2ew/ize1BzpjlPwjGYGIKzMpqEgSmM fzw59XcD0sPzk/wagPcYvM7vuQ89MoOWXHuSi5DI2QxauTagKBiJr281cly1Wxn1 K9lE19ITdmxlRhepseYGIpqh8+YSFWplGD7ZNxrlexnHt5C5g6s0fn9yLFKSyudD caF51RKga4/gV6l9LYhmIpP+TskIhsRrEEQZLpbfA2Q9amOVbwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFo6A1ayFugECIwJjvJJMNq6OcZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFmZjgwMmItNmRiZC0z YjI0LTkzMzYtYmVjOWRhNmI3OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF/Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAA0FymmWkK4dMNo21BrMj7u8KtU7d8bWAcyptJ/Pc3Rf5GlP8QxS Pb/GrE7b6ppMIIw+uj2N+QIdDR/rm7+S4r5vpt+1dQzRKpr+Y2FFr+NcctCtdR4K OzUfVWl9ozEBkmTf2KJWVoXzVHhVq1b8ZrjlvLGG8ENsJJpz/Ug+E4NTGg85cP+z MQGOIYG5VMT5T/hLvgoNNieBZ5+iCwSNNjc8+Sw5LSWtk0p6xtw3cc5//UU0H0A7 t4WOeJgR9iqYIu/MFZlz9OZB26Vn79yeTYrika9/qhvExWmOGz3I9mEL8ggCar9w 6vKtmyvPSrp1ToGVgqFSPO90f4+eOj2sJOc= -----END CERTIFICATE-----Generated at Mon Sep 21 19:56:57 2026 by rpki-client