$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa File: 389942c1-a26c-3aa1-9450-0f50f4389f9e.roa (raw, json) Hash identifier: 3SZwFSmQrjsoRUc8/ey3P1M1V1vodbmTxl6gK71Vt3w= Subject key identifier: B6:F7:61:BB:E3:CD:B0:BA:07:6C:C9:A9:EF:AE:66:71:06:31:4D:26 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C274A0887C6D649C3A8F00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5a20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:74:a0:88:7c:6d:64:9c:3a:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=34319441-b66e-41ec-859b-921937ae5ed0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:69:27:f4:b9:b5:8b:91:ee:b0:a0:b1:3e:df: ae:5a:7e:d5:72:51:7f:d2:24:8d:4c:33:50:7c:c3: 5e:85:3d:21:a9:5b:c8:ef:53:26:07:5c:c7:92:b4: 13:87:9c:1c:a2:84:c2:c4:1b:05:fc:30:29:7f:41: 58:f0:2c:ec:55:2d:ea:93:0c:84:e9:53:c6:5b:96: 1d:37:39:fd:f9:2e:87:15:0a:db:ba:33:1f:98:4d: 93:97:4f:90:43:41:b9:25:5e:cc:94:03:b9:2e:6f: 71:16:e3:dc:db:92:4a:dd:67:ae:a2:06:b7:b4:d3: 8b:cb:a7:af:99:01:8a:17:c6:ba:80:42:16:75:60: ec:91:78:f9:f6:a5:6e:06:ca:83:89:6d:10:1b:9b: cc:bb:4f:c9:a7:88:25:dc:f2:4a:a0:32:71:97:73: bf:18:85:b4:88:bd:f4:68:33:41:b4:fc:fe:e8:a9: 64:2e:7f:d7:1d:f7:49:fc:99:fb:f0:b9:fe:11:cc: 9e:8c:0f:e8:3b:8c:cd:89:19:c0:0e:3e:4b:f6:45: 0c:f3:c7:84:53:45:e6:45:96:0b:38:80:37:75:78: 52:5a:b2:ed:9b:0f:1d:9e:bf:5c:a7:5e:13:a1:94: aa:f7:91:90:87:78:6c:05:b5:3f:f8:e6:45:37:a4: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F7:61:BB:E3:CD:B0:BA:07:6C:C9:A9:EF:AE:66:71:06:31:4D:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/389942c1-a26c-3aa1-9450-0f50f4389f9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5a20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b6:17:ca:8e:a5:2d:bc:6b:c8:61:0f:7b:3d:fe:c5:85:4b: d9:09:aa:04:fc:ee:39:56:fb:ae:fe:9c:ce:4a:08:c5:6d:e5: f6:08:19:06:30:3e:00:80:e0:00:70:ad:eb:44:a6:e0:c0:13: 1f:d2:21:7d:10:68:54:5c:39:de:34:8b:67:92:c7:83:3a:bc: cf:34:3e:18:16:18:cc:54:c0:30:86:75:c6:a0:3e:bb:d9:7f: c0:3f:20:2a:d7:54:59:83:32:64:b8:e4:33:a6:06:81:02:0f: 33:9f:e9:9c:f0:30:f4:ee:ac:6e:60:da:db:6a:47:ab:9e:14: 61:72:de:28:02:05:9b:71:dc:70:12:17:f7:dc:cc:4e:35:38: 32:98:fe:c4:86:66:32:5f:a1:db:5b:7e:30:39:7d:8d:63:ab: 44:08:e8:ab:65:7b:42:f1:05:d0:39:2b:52:7b:2c:29:29:e1: 98:18:59:76:25:08:cc:8c:79:d7:a2:6a:d4:f8:ef:fb:0c:53: e9:93:ae:f8:e9:bc:3f:7e:52:9c:34:cc:d9:1c:8d:c6:a4:20: f7:32:67:51:43:91:c2:2d:52:09:67:aa:cf:25:fa:ae:5e:ef: 87:cb:e4:87:2c:d8:60:dc:97:fe:53:8e:23:bf:0a:7a:e6:42: 7f:1a:9b:6e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnSgiHxtZJw6jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MzQzMTk0NDEtYjY2ZS00MWVjLTg1OWItOTIxOTM3YWU1ZWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Wkn9Lm1i5HusKCxPt+uWn7VclF/0iSNTDNQ fMNehT0hqVvI71MmB1zHkrQTh5wcooTCxBsF/DApf0FY8CzsVS3qkwyE6VPGW5Yd Nzn9+S6HFQrbujMfmE2Tl0+QQ0G5JV7MlAO5Lm9xFuPc25JK3Weuoga3tNOLy6ev mQGKF8a6gEIWdWDskXj59qVuBsqDiW0QG5vMu0/Jp4gl3PJKoDJxl3O/GIW0iL30 aDNBtPz+6KlkLn/XHfdJ/Jn78Ln+EcyejA/oO4zNiRnADj5L9kUM88eEU0XmRZYL OIA3dXhSWrLtmw8dnr9cp14ToZSq95GQh3hsBbU/+OZFN6Ra3QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLb3YbvjzbC6B2zJqe+uZnEGMU0mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMzg5OTQyYzEtYTI2Yy0z YWExLTk0NTAtMGY1MGY0Mzg5ZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFog MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFC2F8qOpS28a8hhD3s9/sWFS9kJqgT87jlW+67+nM5KCMVt5fYI GQYwPgCA4ABwretEpuDAEx/SIX0QaFRcOd40i2eSx4M6vM80PhgWGMxUwDCGdcag PrvZf8A/ICrXVFmDMmS45DOmBoECDzOf6ZzwMPTurG5g2ttqR6ueFGFy3igCBZtx 3HASF/fczE41ODKY/sSGZjJfodtbfjA5fY1jq0QI6Ktle0LxBdA5K1J7LCkp4ZgY WXYlCMyMedeiatT47/sMU+mTrvjpvD9+Upw0zNkcjcakIPcyZ1FDkcItUglnqs8l +q5e74fL5Ics2GDcl/5TjiO/CnrmQn8am24= -----END CERTIFICATE-----Generated at Tue Sep 22 18:14:46 2026 by rpki-client