$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3eb6548f-bf0b-34e2-b07d-4f624c501930.roa File: 3eb6548f-bf0b-34e2-b07d-4f624c501930.roa (raw, json) Hash identifier: cNBhGzgdvGCmGxI3sRwQgL9U3aBa1zQ+3JLm9zoRBD4= Subject key identifier: 12:97:62:F2:38:99:17:8F:F4:DB:06:0B:10:9C:6A:9B:51:19:4E:B2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C26CD0B437BF72D4EEF7C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3eb6548f-bf0b-34e2-b07d-4f624c501930.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4560::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:6c:d0:b4:37:bf:72:d4:ee:f7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=28dc6942-4567-4dec-8094-3bc0d6503455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:92:81:56:d0:1c:04:11:98:5f:65:1b:b4:4c: 64:3c:6b:c7:d5:3f:64:55:5d:0a:6c:86:f7:3f:8f: da:4d:8b:fe:76:d3:cf:b1:d8:ae:ad:a4:b3:8c:74: 2d:41:16:bc:92:2c:1e:75:78:90:af:33:03:e9:8a: d2:22:5c:a6:48:72:0e:69:a3:0d:31:75:f2:f3:08: 86:eb:ea:f7:cb:1f:28:fc:74:3f:0c:a2:21:ab:44: 7c:50:a9:ba:6c:af:97:14:86:35:4f:59:b0:7a:72: f3:1d:91:de:e3:84:ad:a9:64:09:a5:05:05:0f:4b: 64:98:c1:42:60:49:09:80:fe:16:50:b1:87:54:fa: e9:a8:51:73:22:d3:ed:29:35:e8:0e:bf:a3:24:08: 72:5d:a4:0c:b6:bd:55:37:8d:81:57:f7:7a:73:bb: b0:32:71:05:40:fd:83:d4:1b:3f:30:8c:be:64:bb: 38:4e:8a:f1:1a:4d:0f:22:59:8e:2f:01:84:85:b5: 5d:1b:6d:b0:f7:f0:94:03:79:25:a9:8c:61:d3:0a: d2:9c:da:dc:07:52:55:88:bb:c2:34:a8:8e:6c:41: 39:f3:58:40:42:cc:d1:71:66:fa:10:b3:e0:23:16: b2:65:1f:db:5a:27:31:cf:c9:cf:2f:91:c7:ab:26: c2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:97:62:F2:38:99:17:8F:F4:DB:06:0B:10:9C:6A:9B:51:19:4E:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3eb6548f-bf0b-34e2-b07d-4f624c501930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4560::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:00:37:4b:5b:1c:d2:d9:36:e3:77:6a:24:22:45:23:9c:91: f3:d3:f4:3d:c3:b4:c6:de:c6:b4:b6:78:b0:26:a7:5f:9e:fa: da:e3:b0:8c:86:af:c8:c1:73:cb:70:9a:e5:5c:59:ea:ce:0b: af:86:cb:38:67:0d:b8:15:33:13:d7:ee:40:8c:a6:dd:c4:47: d6:1b:52:c7:b4:85:dd:0e:0b:e2:18:6f:a7:29:47:44:fe:98: 11:7e:7e:cd:c6:09:ab:bd:5d:df:db:72:d5:3a:88:3f:33:28: f5:9e:bc:28:dd:47:86:54:19:27:40:83:fb:a3:99:d4:f2:18: 76:9c:16:7e:e2:c5:6a:c4:57:d9:22:98:63:cf:84:61:e5:c9: ac:fa:31:54:43:51:80:eb:ef:3d:e3:91:1c:39:fb:44:3c:87: dd:00:f7:23:56:4f:03:b8:77:7c:31:d8:ec:e1:1c:b2:a6:71: ce:23:64:cd:5e:f4:2b:f4:8b:81:08:8c:36:de:bc:05:7a:7d: 87:95:dc:a4:d9:0f:14:4e:98:92:0a:80:dd:ba:27:96:96:d2: 38:dc:61:b3:b4:fc:3c:2d:71:a4:28:1c:3d:48:8f:d2:22:37: 1d:4f:3e:28:b5:6f:91:c0:72:4a:1f:cb:26:ad:e5:d6:1b:3a: d9:f8:dd:35 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmzQtDe/ctTu98AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MjhkYzY5NDItNDU2Ny00ZGVjLTgwOTQtM2JjMGQ2NTAzNDU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JKBVtAcBBGYX2UbtExkPGvH1T9kVV0KbIb3 P4/aTYv+dtPPsdiuraSzjHQtQRa8kiwedXiQrzMD6YrSIlymSHIOaaMNMXXy8wiG 6+r3yx8o/HQ/DKIhq0R8UKm6bK+XFIY1T1mwenLzHZHe44StqWQJpQUFD0tkmMFC YEkJgP4WULGHVPrpqFFzItPtKTXoDr+jJAhyXaQMtr1VN42BV/d6c7uwMnEFQP2D 1Bs/MIy+ZLs4TorxGk0PIlmOLwGEhbVdG22w9/CUA3klqYxh0wrSnNrcB1JViLvC NKiObEE581hAQszRcWb6ELPgIxayZR/bWicxz8nPL5HHqybCPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBKXYvI4mReP9NsGCxCcaptRGU6yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2ViNjU0OGYtYmYwYi0z NGUyLWIwN2QtNGY2MjRjNTAxOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEVg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHgAN0tbHNLZNuN3aiQiRSOckfPT9D3DtMbexrS2eLAmp1+e+trj sIyGr8jBc8twmuVcWerOC6+GyzhnDbgVMxPX7kCMpt3ER9YbUse0hd0OC+IYb6cp R0T+mBF+fs3GCau9Xd/bctU6iD8zKPWevCjdR4ZUGSdAg/ujmdTyGHacFn7ixWrE V9kimGPPhGHlyaz6MVRDUYDr7z3jkRw5+0Q8h90A9yNWTwO4d3wx2OzhHLKmcc4j ZM1e9Cv0i4EIjDbevAV6fYeV3KTZDxROmJIKgN26J5aW0jjcYbO0/DwtcaQoHD1I j9IiNx1PPii1b5HAckofyyat5dYbOtn43TU= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:52 2026 by rpki-client