$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3b9ade0c-c210-37ee-b7f0-6538fa26cf8a.roa File: 3b9ade0c-c210-37ee-b7f0-6538fa26cf8a.roa (raw, json) Hash identifier: F+u5vy0Fn/6hyh9Nv73tlQoIV2aRdgb5viebfkqnhUg= Subject key identifier: DE:C0:34:43:53:D2:2E:42:0C:33:89:D6:01:40:10:26:54:C1:31:AE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C274F2583076550A728681 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3b9ade0c-c210-37ee-b7f0-6538fa26cf8a.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5d90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:74:f2:58:30:76:55:0a:72:86:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=957a16c6-df92-4d6a-8647-9a8c979d0c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:14:5a:db:e2:ea:02:d8:dd:b6:0b:f4:1b:f8: 29:95:89:1b:30:15:11:2c:80:5f:02:75:e8:6b:5a: 01:dd:fc:0e:4c:33:d4:74:24:45:6b:fd:46:a1:aa: 73:0b:3b:c3:ac:91:e5:9e:a1:61:c9:a0:d0:f6:5f: e0:0c:19:21:7a:11:0e:80:fd:08:69:38:e8:ab:79: d3:22:3a:85:7e:cc:eb:95:5e:ed:c4:ee:4e:24:70: f1:a4:b8:cb:e6:39:47:eb:08:1b:83:be:6d:48:34: 8c:95:5a:07:d7:a1:68:42:81:2d:03:eb:36:9f:dd: dd:0b:ff:97:39:0c:ac:ad:a8:e5:3e:f3:f8:63:53: d1:4a:16:68:16:8c:22:2f:a6:81:ee:de:01:ac:33: 8c:e3:60:ac:20:13:5c:a3:b0:43:d4:aa:d4:83:d9: ae:d5:b3:d9:f4:6b:2b:c3:fe:e4:38:57:f3:16:06: 2c:33:0d:41:b9:c1:d6:d5:37:af:77:ba:e3:b9:98: a0:49:78:de:54:1a:e0:61:28:50:aa:61:34:1d:9f: 20:3a:80:30:72:5e:01:90:96:95:2a:d3:eb:32:62: 63:21:35:ea:1e:1b:32:8f:72:34:0d:9c:e2:d6:78: 1e:83:2b:2b:a1:cb:22:66:13:e8:21:af:fc:c4:9c: e2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:C0:34:43:53:D2:2E:42:0C:33:89:D6:01:40:10:26:54:C1:31:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3b9ade0c-c210-37ee-b7f0-6538fa26cf8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5d90::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:25:0f:12:f4:10:90:24:11:dd:fb:04:d7:4b:a5:e4:9a:a0: 3b:4b:a0:d5:2e:3c:c0:df:a7:55:01:22:4d:6f:03:2a:8f:15: 5e:97:bf:00:0a:4f:80:12:f7:f6:43:90:68:ec:e7:b2:c0:12: aa:12:62:71:04:26:16:e0:5d:53:4c:47:01:6b:57:e6:82:7b: 29:9c:d7:1f:f8:4d:4d:a8:60:db:70:78:d5:4e:d9:1d:f9:fb: 88:99:20:59:cf:33:a9:cc:82:be:73:12:86:47:00:64:6c:0c: f2:80:a3:9f:4e:47:65:b9:07:c7:81:42:e4:50:ae:a8:f8:15: 57:93:89:ea:76:e6:16:3f:00:72:2c:9f:8f:78:6d:91:c8:b3: 4c:c2:0a:c1:5a:a2:a8:92:82:d6:b6:3c:d8:b3:89:fb:57:8a: 58:1d:2e:b4:81:a2:da:7f:18:50:af:de:c5:e7:ae:d3:c2:f2: 5c:60:10:9a:19:72:28:50:60:0b:80:d5:80:ea:14:88:cf:46: 47:ef:13:97:c5:3f:3e:f6:d5:03:2e:0d:c3:8f:fd:d0:3f:aa: 49:94:ba:66:f5:b9:e6:24:53:1b:60:c1:fc:52:b6:bb:38:15: 72:7c:9a:46:d3:1b:b4:f9:03:90:69:a4:56:a7:7e:4f:72:84: ac:34:29:a4 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnTyWDB2VQpyhoEwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk OTU3YTE2YzYtZGY5Mi00ZDZhLTg2NDctOWE4Yzk3OWQwYzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhRa2+LqAtjdtgv0G/gplYkbMBURLIBfAnXo a1oB3fwOTDPUdCRFa/1GoapzCzvDrJHlnqFhyaDQ9l/gDBkhehEOgP0IaTjoq3nT IjqFfszrlV7txO5OJHDxpLjL5jlH6wgbg75tSDSMlVoH16FoQoEtA+s2n93dC/+X OQysrajlPvP4Y1PRShZoFowiL6aB7t4BrDOM42CsIBNco7BD1KrUg9mu1bPZ9Gsr w/7kOFfzFgYsMw1BucHW1Tevd7rjuZigSXjeVBrgYShQqmE0HZ8gOoAwcl4BkJaV KtPrMmJjITXqHhsyj3I0DZzi1ngegysrocsiZhPoIa/8xJzikwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN7ANENT0i5CDDOJ1gFAECZUwTGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2I5YWRlMGMtYzIxMC0z N2VlLWI3ZjAtNjUzOGZhMjZjZjhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF2Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFolDxL0EJAkEd37BNdLpeSaoDtLoNUuPMDfp1UBIk1vAyqPFV6X vwAKT4AS9/ZDkGjs57LAEqoSYnEEJhbgXVNMRwFrV+aCeymc1x/4TU2oYNtweNVO 2R35+4iZIFnPM6nMgr5zEoZHAGRsDPKAo59OR2W5B8eBQuRQrqj4FVeTiep25hY/ AHIsn494bZHIs0zCCsFaoqiSgta2PNiziftXilgdLrSBotp/GFCv3sXnrtPC8lxg EJoZcihQYAuA1YDqFIjPRkfvE5fFPz721QMuDcOP/dA/qkmUumb1ueYkUxtgwfxS trs4FXJ8mkbTG7T5A5BppFanfk9yhKw0KaQ= -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:57 2026 by rpki-client