$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa File: 21ff802b-6dbd-3b24-9336-bec9da6b7921.roa (raw, json) Hash identifier: 8EgPIqHT0duXJ8bGY2qR10af+hnQDgNZaJJMT1MHrbA= Subject key identifier: 8A:59:2A:AA:FB:6D:3D:55:15:50:72:83:3B:A0:B6:15:4E:DD:E7:14 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C0223ADCE5B5B7298F800 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:5fd0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:02:23:ad:ce:5b:5b:72:98:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=bafa952c-ecc7-4b21-b6d3-45fee70c0231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d4:65:37:5b:0f:a1:3e:0e:5b:eb:16:1b:ec: 5b:c5:4b:72:e5:01:9c:41:92:94:2f:41:6d:7f:a3: 94:57:3c:08:99:09:38:e7:2a:09:65:43:96:fc:93: 83:69:88:9f:83:c2:8b:ed:58:a6:85:5d:9a:75:5c: 59:c1:f2:a7:9f:f8:b6:09:8c:93:fc:85:5b:df:1a: f0:7d:1d:4b:0c:20:31:42:72:c0:a1:75:fd:a7:9b: fb:b4:19:65:ae:10:5a:7d:4a:7a:5e:ad:d3:9a:1d: fb:0b:47:c0:6c:2d:41:79:e1:c7:e3:cc:e1:ff:74: 4b:ca:50:56:9e:17:53:db:85:f4:36:a9:a5:c4:4f: f4:a4:8f:26:29:01:85:ec:3e:b8:26:8d:35:8f:2f: cb:d1:df:72:79:b0:85:81:87:85:ae:0d:a3:0f:82: 05:55:29:c5:a6:2a:6e:ff:e2:2c:ec:82:68:b5:1f: 0c:b7:20:f4:02:fa:e4:6e:d1:da:d0:01:b9:4a:7b: 0a:e8:26:eb:bf:58:78:3c:22:cd:25:ad:9d:1e:0e: 60:e6:19:8e:03:e0:82:ea:2a:70:06:e2:00:f1:16: ce:05:40:48:2b:ce:ab:01:07:a7:bf:2a:1f:7d:ac: 59:70:82:6d:27:bc:cf:26:d7:62:83:3a:e3:15:c4: 47:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:2A:AA:FB:6D:3D:55:15:50:72:83:3B:A0:B6:15:4E:DD:E7:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/21ff802b-6dbd-3b24-9336-bec9da6b7921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5fd0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:07:75:17:83:cf:99:5f:b1:58:fd:f3:5e:5d:68:e5:20:46: 0f:46:e8:63:17:73:8d:20:89:e0:24:9c:50:d0:47:60:cf:3b: ed:32:57:2d:8d:98:7a:de:8b:f5:c2:57:97:39:82:64:54:5a: 21:5e:43:14:87:0c:c3:d5:ee:15:3c:05:57:74:fa:ac:59:e8: 61:ab:12:21:31:b9:a4:c3:63:02:ea:27:96:dc:51:65:dd:44: d0:84:15:84:7b:62:59:1d:dd:b5:73:3a:c2:d7:b1:de:ec:a6: f5:5e:ca:c9:05:4c:a3:86:2f:dd:ac:ce:31:9c:4b:3f:7c:42: c8:f8:33:97:33:65:b5:be:66:45:42:d6:56:b8:12:8f:b3:01: 4a:df:f3:7b:4e:4b:17:9c:1c:66:5b:b1:e3:1c:29:27:bc:9c: 30:5f:85:e4:87:8c:a1:fb:7e:79:04:02:77:26:de:0f:44:80: f5:46:d9:f0:dd:5e:20:6e:07:b3:25:e6:7e:c0:58:3b:a8:12: be:0a:64:8f:0b:9e:6b:9c:b4:fa:80:6b:b7:d5:e5:fa:31:45: 1a:7b:e6:aa:51:5e:6c:4c:24:00:9f:c2:c9:67:05:46:9a:95: 25:c6:78:40:fb:e8:fa:7e:dc:11:30:32:cd:fb:f3:39:00:71: 2d:8c:f1:2b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATAIjrc5bW3KY+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk YmFmYTk1MmMtZWNjNy00YjIxLWI2ZDMtNDVmZWU3MGMwMjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudRlN1sPoT4OW+sWG+xbxUty5QGcQZKUL0Ft f6OUVzwImQk45yoJZUOW/JODaYifg8KL7VimhV2adVxZwfKnn/i2CYyT/IVb3xrw fR1LDCAxQnLAoXX9p5v7tBllrhBafUp6Xq3Tmh37C0fAbC1BeeHH48zh/3RLylBW nhdT24X0NqmlxE/0pI8mKQGF7D64Jo01jy/L0d9yebCFgYeFrg2jD4IFVSnFpipu /+Is7IJotR8MtyD0AvrkbtHa0AG5SnsK6Cbrv1h4PCLNJa2dHg5g5hmOA+CC6ipw BuIA8RbOBUBIK86rAQenvyoffaxZcIJtJ7zPJtdigzrjFcRHbQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIpZKqr7bT1VFVBygzugthVO3ecUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjFmZjgwMmItNmRiZC0z YjI0LTkzMzYtYmVjOWRhNmI3OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF/Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADYHdReDz5lfsVj9815daOUgRg9G6GMXc40gieAknFDQR2DPO+0y Vy2NmHrei/XCV5c5gmRUWiFeQxSHDMPV7hU8BVd0+qxZ6GGrEiExuaTDYwLqJ5bc UWXdRNCEFYR7Ylkd3bVzOsLXsd7spvVeyskFTKOGL92szjGcSz98Qsj4M5czZbW+ ZkVC1la4Eo+zAUrf83tOSxecHGZbseMcKSe8nDBfheSHjKH7fnkEAncm3g9EgPVG 2fDdXiBuB7Ml5n7AWDuoEr4KZI8LnmuctPqAa7fV5foxRRp75qpRXmxMJACfwsln BUaalSXGeED76Pp+3BEwMs378zkAcS2M8Ss= -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:35 2025 by rpki-client