$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa File: 3cacdbd3-d705-3430-ba14-3e45b4062840.roa (raw, json) Hash identifier: P4hcSLbyVA9CH8wNF8IHRLjFKrUsbZmZJ1CFn3apo/E= Subject key identifier: 59:0B:CF:C4:7C:E6:1B:D2:20:57:0F:D0:98:79:81:3B:92:FC:0C:B0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C279092A9B668A520AFD00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5a30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:79:09:2a:9b:66:8a:52:0a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=2f14d4f3-8fb8-4eac-9eb8-b11c06a18ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c0:3d:20:37:24:b8:27:d3:ce:b3:e5:fa:97: 96:1a:ae:b0:e8:20:4b:20:e4:6e:44:6d:8b:e9:97: 5d:f7:b4:c5:37:b9:48:e2:13:57:41:58:95:1b:30: a6:1a:f1:61:5f:48:0e:f1:cc:72:24:6d:c8:6d:78: c9:f6:b9:0e:5e:ef:79:bf:47:95:5e:5e:a4:f4:24: 42:30:8a:78:72:98:dd:89:bb:88:02:89:f3:0d:ed: 33:22:99:c7:b0:28:91:77:06:81:d1:40:55:6d:fc: ec:33:69:b9:ab:ce:1a:8c:25:a7:13:b8:c5:23:b5: 57:a4:59:62:d1:4f:12:b4:3c:55:5c:3e:9d:bb:cd: 80:10:9d:8a:c2:f6:96:e8:82:94:e0:a4:00:26:5b: c8:57:d6:48:28:3e:bc:78:75:fa:a8:41:09:50:73: ce:a3:ad:2d:b9:8d:ae:d0:0d:6a:04:34:da:d8:bd: d9:94:b7:8b:53:33:b6:c7:f3:a7:e4:71:1b:71:c1: af:34:72:5f:6a:39:4c:96:8a:3a:b4:2a:a9:ae:ec: 4b:47:65:26:2d:74:10:32:60:02:70:25:8a:5e:15: fc:e7:ea:4a:88:46:4a:16:7b:aa:6e:63:e5:2d:bc: f3:d3:bc:92:bf:34:4c:19:11:0a:58:65:25:62:49: fa:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0B:CF:C4:7C:E6:1B:D2:20:57:0F:D0:98:79:81:3B:92:FC:0C:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cacdbd3-d705-3430-ba14-3e45b4062840.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5a30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:21:cb:ba:f1:cc:d9:30:ff:b8:39:73:86:41:7b:cd:7e:04: 4e:63:d8:25:67:fb:77:89:5e:30:4d:f8:82:bc:07:68:e8:9e: 81:85:37:8d:8a:9c:12:13:7f:f6:37:56:13:7e:10:b8:03:1a: a1:46:c3:ea:5e:26:c9:32:a1:2b:00:57:6f:41:0b:56:b1:1a: a2:3e:ea:71:73:f1:8d:e8:9b:f9:c4:00:9d:0b:3b:11:6c:9b: ea:24:1a:72:53:26:c9:2e:87:b5:1b:83:2a:84:f1:82:7f:28: 4b:7e:20:85:26:0a:85:4b:d6:3b:43:07:32:2f:d6:c8:57:5b: 93:eb:69:a8:1e:d0:3f:1e:36:a0:0d:9d:50:dc:9d:8e:0a:e8: 29:ad:95:19:a2:b3:0d:be:4e:95:de:b8:1c:b6:2a:e7:b6:3a: bb:e6:96:be:43:b8:13:50:4e:4c:9c:29:58:88:71:3c:1c:6e: e4:43:a9:b7:0a:78:79:5d:18:f4:ac:58:ab:71:90:aa:6e:69: db:04:77:27:7e:e9:67:57:a0:e4:99:f8:87:ad:8e:40:9b:c6: 94:d7:14:b2:19:66:fa:04:f5:ff:09:19:29:42:c1:15:07:ec: 5c:fe:96:ae:75:88:04:b4:31:24:fc:0e:54:1e:7a:ca:a2:ab: bf:4b:9e:bb -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnkJKptmilIK/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MmYxNGQ0ZjMtOGZiOC00ZWFjLTllYjgtYjExYzA2YTE4ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcA9IDckuCfTzrPl+peWGq6w6CBLIORuRG2L 6Zdd97TFN7lI4hNXQViVGzCmGvFhX0gO8cxyJG3IbXjJ9rkOXu95v0eVXl6k9CRC MIp4cpjdibuIAonzDe0zIpnHsCiRdwaB0UBVbfzsM2m5q84ajCWnE7jFI7VXpFli 0U8StDxVXD6du82AEJ2KwvaW6IKU4KQAJlvIV9ZIKD68eHX6qEEJUHPOo60tuY2u 0A1qBDTa2L3ZlLeLUzO2x/On5HEbccGvNHJfajlMloo6tCqpruxLR2UmLXQQMmAC cCWKXhX85+pKiEZKFnuqbmPlLbzz07ySvzRMGREKWGUlYkn69QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFkLz8R85hvSIFcP0Jh5gTuS/AywMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2NhY2RiZDMtZDcwNS0z NDMwLWJhMTQtM2U0NWI0MDYyODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFow MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADghy7rxzNkw/7g5c4ZBe81+BE5j2CVn+3eJXjBN+IK8B2jonoGF N42KnBITf/Y3VhN+ELgDGqFGw+peJskyoSsAV29BC1axGqI+6nFz8Y3om/nEAJ0L OxFsm+okGnJTJskuh7UbgyqE8YJ/KEt+IIUmCoVL1jtDBzIv1shXW5Praage0D8e NqANnVDcnY4K6CmtlRmisw2+TpXeuBy2Kue2Orvmlr5DuBNQTkycKViIcTwcbuRD qbcKeHldGPSsWKtxkKpuadsEdyd+6WdXoOSZ+IetjkCbxpTXFLIZZvoE9f8JGSlC wRUH7Fz+lq51iAS0MST8DlQeesqiq79Lnrs= -----END CERTIFICATE-----Generated at Tue Sep 22 08:51:03 2026 by rpki-client