$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa File: 2a914a87-d42f-3891-842c-4a60b90e559d.roa (raw, json) Hash identifier: D7FGy53CBpO13eu2+whgifSVh1TNKPC6Kw0AdaAFMto= Subject key identifier: 87:BB:D7:7B:15:15:FC:E0:45:EE:58:5B:A0:D7:86:8B:DA:A7:EE:65 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C2773D73EE705084302B60 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5670::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:77:3d:73:ee:70:50:84:30:2b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=004a870f-840c-4625-9320-bbb7c09edc8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:bf:28:f9:77:63:62:40:02:93:62:ba:0a: a6:4f:3e:17:7a:f9:f6:98:43:26:42:26:39:2e:3a: 11:c5:1a:1f:17:30:07:92:79:1d:2f:aa:a3:49:cd: 94:9e:f9:f5:d7:e0:9f:2d:43:0b:ec:68:16:4a:24: f5:4f:ae:19:38:34:23:63:fa:ca:3b:75:2b:44:3f: d8:9a:e0:37:e4:85:0e:53:0d:77:44:8c:0d:36:36: 94:c8:a8:72:d2:4b:0a:4d:35:47:fc:a2:48:8f:96: b2:de:13:1b:e8:7a:d4:2f:75:67:84:06:77:3f:fe: 7d:e0:ee:16:e5:f2:a7:eb:99:c6:74:60:ee:35:46: f7:82:2b:64:db:b1:93:f3:df:a3:7f:b1:4b:e4:0e: 00:e9:28:6d:7a:b9:ba:14:08:c6:a7:3c:bb:55:f8: bb:05:b4:bf:26:8f:4e:e1:ca:af:d7:d3:8b:34:08: bd:dc:74:da:07:f8:1d:cf:a5:d7:50:40:98:ca:d6: 29:1a:a8:6a:3c:7b:98:68:a0:0f:2c:03:85:f1:34: 41:d1:dc:d0:ad:5f:e1:9b:1f:5e:76:08:3f:64:48: 97:58:41:98:b5:b5:61:b8:cf:8d:a4:ab:b3:a7:f6: 3e:9e:59:8e:55:c5:98:01:67:09:96:32:76:de:02: 6d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:BB:D7:7B:15:15:FC:E0:45:EE:58:5B:A0:D7:86:8B:DA:A7:EE:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2a914a87-d42f-3891-842c-4a60b90e559d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5670::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:da:ae:1d:1d:0c:3c:72:95:d7:8d:e6:a1:6d:0d:66:d4:1f: 26:62:8b:7c:ce:21:19:34:21:6e:eb:ec:b0:d2:16:e3:a8:66: 7f:2c:5b:63:23:d9:e6:34:2e:59:2e:e2:32:23:f3:fa:7b:e3: a1:33:c9:56:13:1d:01:b8:02:57:5f:4e:e7:03:69:fa:e9:83: a7:93:52:7e:9c:81:18:66:02:fb:30:49:3f:68:eb:6c:4d:14: 14:67:21:8b:6f:eb:1e:9d:3c:a5:ee:f9:24:8e:32:b9:98:b4: c3:8c:10:2a:33:d7:07:3c:5f:ba:fb:f1:d0:b4:e8:09:80:72: d9:0d:7a:a0:62:77:06:87:1f:09:5d:62:5b:a0:78:e4:bb:be: 36:42:d3:af:14:d1:52:6b:2d:bd:08:0b:da:ed:a6:14:94:c2: c9:2c:b7:55:80:30:39:00:60:eb:9c:d8:96:37:1b:51:0e:c5: da:37:68:eb:71:19:7e:60:c3:c1:8e:78:45:96:89:a9:8c:5a: 5b:d5:6c:e5:4c:ce:a8:86:b3:58:cb:31:e4:b0:23:0b:7c:14: d4:82:4c:ca:8f:48:48:0a:5b:84:a7:5d:99:06:f9:28:8d:42: 85:c8:2e:37:ba:78:24:72:98:13:42:6b:11:86:02:fc:fa:4d: c6:3d:85:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnc9c+5wUIQwK2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MDA0YTg3MGYtODQwYy00NjI1LTkzMjAtYmJiN2MwOWVkYzhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IS/KPl3Y2JAApNiugqmTz4Xevn2mEMmQiY5 LjoRxRofFzAHknkdL6qjSc2Unvn11+CfLUML7GgWSiT1T64ZODQjY/rKO3UrRD/Y muA35IUOUw13RIwNNjaUyKhy0ksKTTVH/KJIj5ay3hMb6HrUL3VnhAZ3P/594O4W 5fKn65nGdGDuNUb3gitk27GT89+jf7FL5A4A6Shterm6FAjGpzy7Vfi7BbS/Jo9O 4cqv19OLNAi93HTaB/gdz6XXUECYytYpGqhqPHuYaKAPLAOF8TRB0dzQrV/hmx9e dgg/ZEiXWEGYtbVhuM+NpKuzp/Y+nlmOVcWYAWcJljJ23gJtPQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIe713sVFfzgRe5YW6DXhovap+5lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmE5MTRhODctZDQyZi0z ODkxLTg0MmMtNGE2MGI5MGU1NTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFZw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADLarh0dDDxyldeN5qFtDWbUHyZii3zOIRk0IW7r7LDSFuOoZn8s W2Mj2eY0Llku4jIj8/p746EzyVYTHQG4AldfTucDafrpg6eTUn6cgRhmAvswST9o 62xNFBRnIYtv6x6dPKXu+SSOMrmYtMOMECoz1wc8X7r78dC06AmActkNeqBidwaH HwldYlugeOS7vjZC068U0VJrLb0IC9rtphSUwskst1WAMDkAYOuc2JY3G1EOxdo3 aOtxGX5gw8GOeEWWiamMWlvVbOVMzqiGs1jLMeSwIwt8FNSCTMqPSEgKW4SnXZkG +SiNQoXILje6eCRymBNCaxGGAvz6TcY9hZo= -----END CERTIFICATE-----Generated at Mon Sep 21 13:59:46 2026 by rpki-client