$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa File: 436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa (raw, json) Hash identifier: U/02HosxvVfLrw3bjzsddYgYUQFpAucyUd5VttKaseI= Subject key identifier: 0C:F9:23:85:9F:7B:F1:43:0D:CB:8B:28:51:8A:A8:8E:2C:A6:6E:39 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C264E176A7F5632BE66080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4c30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:64:e1:76:a7:f5:63:2b:e6:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=0b0d1b09-da42-469d-9d9d-be1c4667c6fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:1a:61:5e:c6:74:cc:0f:d8:12:b6:9f:a6:b5: 4a:bc:21:1a:fd:71:7b:96:4c:e1:05:83:60:ba:e1: 22:9c:0c:76:5b:40:72:78:78:b2:f4:e4:c0:18:e8: 16:6f:1a:ae:4d:6d:bc:d8:e6:4b:6f:94:47:35:89: 86:09:5e:ba:a7:c8:ad:da:26:fb:0f:27:c3:aa:78: fd:35:b7:f1:4a:40:e5:54:88:57:62:a5:55:1c:a2: 93:4b:68:2d:e6:83:06:b5:ec:8e:59:80:07:32:1b: 74:33:da:da:de:23:d5:f9:d0:85:31:9e:dc:50:bb: 12:cd:51:b7:b9:9e:d2:00:32:c5:ea:d2:db:f7:07: b7:be:a1:73:b2:81:54:26:8f:e3:82:3b:48:e1:23: 44:4a:f7:51:c9:e2:8e:58:6c:82:13:ef:82:49:90: c2:80:2c:32:95:05:46:bb:38:d0:71:62:8a:99:85: 06:42:d1:08:e3:72:46:f3:7a:bb:fd:d9:cd:3b:77: 93:cd:cb:23:4b:f8:9d:e0:30:69:6c:63:11:0e:15: b5:f4:1b:2c:30:7d:1f:17:e4:a9:54:e8:94:e7:34: 94:78:22:e4:68:03:47:4d:88:80:88:c9:9e:c6:39: 7d:78:21:19:14:1c:4c:d1:6d:24:5d:60:f1:15:c1: 39:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F9:23:85:9F:7B:F1:43:0D:CB:8B:28:51:8A:A8:8E:2C:A6:6E:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4c30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:79:52:25:6e:c5:c2:b1:3c:60:a7:99:1e:e5:55:01:61:43: da:14:18:4f:13:c2:17:b5:22:37:6f:67:df:18:93:4e:24:0e: d1:b9:74:85:53:ca:4c:9b:9a:15:93:91:f2:09:d3:c1:54:40: 4b:98:02:fb:15:05:64:80:c9:87:90:fb:ff:a7:a5:fd:8b:c1: 1c:ae:9d:c0:c6:de:a8:ce:82:7f:1a:84:6c:01:dd:56:20:7e: ad:65:8e:bd:97:12:63:15:a4:3b:f2:42:66:38:a4:68:11:93: d0:5f:92:c7:a1:22:2a:45:82:5e:4d:55:99:da:36:2f:56:96: ec:0f:8c:f1:20:b4:be:93:88:11:ee:73:d7:31:70:0e:81:fb: 7e:92:0b:56:c7:67:2a:d7:ad:f9:20:36:30:1c:5f:16:b9:c7: 44:98:3b:68:e2:40:4f:7c:37:18:bb:d1:22:1e:68:44:11:29: e1:39:89:47:eb:92:1b:77:26:5d:e2:30:b2:16:07:05:b7:54: 55:7f:39:8f:41:83:ed:ba:6e:ea:a0:f0:e2:6b:18:c7:09:02: 71:81:97:db:06:64:05:ce:3a:d4:4f:33:cc:88:6c:ea:ff:df: b1:d3:2e:ff:d9:e6:26:ad:72:4f:ae:3c:d2:03:08:92:0a:23: 7e:61:18:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmThdqf1YyvmYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MGIwZDFiMDktZGE0Mi00NjlkLTlkOWQtYmUxYzQ2NjdjNmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRphXsZ0zA/YErafprVKvCEa/XF7lkzhBYNg uuEinAx2W0ByeHiy9OTAGOgWbxquTW282OZLb5RHNYmGCV66p8it2ib7DyfDqnj9 NbfxSkDlVIhXYqVVHKKTS2gt5oMGteyOWYAHMht0M9ra3iPV+dCFMZ7cULsSzVG3 uZ7SADLF6tLb9we3vqFzsoFUJo/jgjtI4SNESvdRyeKOWGyCE++CSZDCgCwylQVG uzjQcWKKmYUGQtEI43JG83q7/dnNO3eTzcsjS/id4DBpbGMRDhW19BssMH0fF+Sp VOiU5zSUeCLkaANHTYiAiMmexjl9eCEZFBxM0W0kXWDxFcE51wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAz5I4Wfe/FDDcuLKFGKqI4spm45MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDM2ZmFjMWEtYzBmYi0z NTc4LTgwOTgtZTNiOWQ5ZjY1M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEww MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF55UiVuxcKxPGCnmR7lVQFhQ9oUGE8Twhe1IjdvZ98Yk04kDtG5 dIVTykybmhWTkfIJ08FUQEuYAvsVBWSAyYeQ+/+npf2LwRyuncDG3qjOgn8ahGwB 3VYgfq1ljr2XEmMVpDvyQmY4pGgRk9BfksehIipFgl5NVZnaNi9WluwPjPEgtL6T iBHuc9cxcA6B+36SC1bHZyrXrfkgNjAcXxa5x0SYO2jiQE98Nxi70SIeaEQRKeE5 iUfrkht3Jl3iMLIWBwW3VFV/OY9Bg+26buqg8OJrGMcJAnGBl9sGZAXOOtRPM8yI bOr/37HTLv/Z5iatck+uPNIDCJIKI35hGEs= -----END CERTIFICATE-----Generated at Sun Sep 20 21:16:08 2026 by rpki-client