$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e4487f8-ce14-3997-9ce9-d965516fcca2.roa File: 4e4487f8-ce14-3997-9ce9-d965516fcca2.roa (raw, json) Hash identifier: TJpXiW0+/5npsErto6RMAbiWMbsgnhnDiMlenGry+W0= Subject key identifier: 11:71:A3:6D:1F:0F:44:85:09:E9:76:7A:90:DC:39:22:F0:7E:A7:CF Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C267DF76132E6E824A0380 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e4487f8-ce14-3997-9ce9-d965516fcca2.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:42a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:67:df:76:13:2e:6e:82:4a:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=7f2328db-6ef0-494b-8043-84e74863dcf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ee:bd:c2:31:b0:9a:76:c8:51:75:04:00:63: 66:84:c1:4d:48:02:8d:ba:19:9d:38:14:25:57:ed: 9b:66:c6:71:9e:e0:86:28:24:66:a3:9c:84:bf:6b: 18:6a:19:a6:13:40:00:4e:c0:13:7e:97:a9:14:d6: e1:a2:36:1a:a5:69:fa:4f:53:f3:67:5d:58:69:55: d3:f6:31:4b:bd:b3:ad:5c:08:ff:a0:d7:af:45:0c: 88:15:42:a4:69:51:a5:38:28:55:1a:b4:35:62:5e: be:b4:32:c2:99:a9:8d:d0:c8:5e:63:21:21:3e:32: 3b:a9:d0:fb:50:75:5d:63:b5:80:f7:18:60:e9:b1: 1e:00:f2:d0:08:d6:06:a9:c3:3a:12:94:a5:84:5e: e5:04:a5:17:df:00:d2:6d:54:c2:77:48:94:e3:23: 32:6f:7c:38:a1:af:b5:24:0b:5d:b0:64:a5:f7:6c: cd:b2:5b:5d:78:2b:6c:aa:fb:38:a7:e5:3d:49:72: a5:79:01:30:9e:51:50:02:4b:59:51:7e:fa:60:24: 28:56:bb:96:35:34:bf:26:dd:b0:e0:bd:2b:73:42: 50:a4:48:1a:ab:2c:90:9a:65:66:5c:f0:52:33:18: 5e:a4:a8:5d:68:ac:2a:2c:cd:c0:a8:7c:c4:27:a9: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:A3:6D:1F:0F:44:85:09:E9:76:7A:90:DC:39:22:F0:7E:A7:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4e4487f8-ce14-3997-9ce9-d965516fcca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:42a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0f:91:1b:8e:c6:c6:98:ea:23:e8:10:03:37:e5:3d:59:83: f6:aa:4d:9a:19:14:65:f3:04:a1:5b:9b:3c:67:86:40:49:1c: bb:4f:07:29:9c:9d:5c:d0:23:a6:c1:27:0b:02:36:01:74:7a: c2:9d:29:dc:b7:c1:2f:14:f0:ec:3b:16:d6:bb:82:2b:ae:e9: 66:c0:ce:71:c0:2f:64:42:00:b7:10:eb:76:7c:ea:c8:9c:96: 17:fa:a4:34:ca:55:d8:fc:84:19:a2:69:81:29:a0:2a:4c:89: ff:07:10:0c:56:cd:08:a1:45:ba:d1:cc:d2:53:24:0f:fe:fd: a2:fe:56:12:fb:be:ce:b4:b9:9b:6c:ca:27:02:cb:4d:8c:05: 5d:85:4f:bc:d5:69:fb:64:7c:d1:63:9b:75:52:ff:73:91:ae: 27:87:49:aa:af:08:51:23:de:05:45:da:fd:75:ed:a9:8e:2c: f6:83:b8:66:98:6d:ab:37:53:de:0b:35:93:c8:5a:c1:09:c3: ea:fc:f8:5f:30:59:2b:dd:72:cf:78:1b:c2:cf:b6:3f:dd:7d: 41:3c:5a:4f:f3:11:0a:40:46:f3:59:2c:79:4a:0f:c4:02:89: 58:a3:43:cb:7e:f8:b1:bb:1e:59:25:fd:69:d3:98:41:97:29: c7:43:54:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmffdhMuboJKA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk N2YyMzI4ZGItNmVmMC00OTRiLTgwNDMtODRlNzQ4NjNkY2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu69wjGwmnbIUXUEAGNmhMFNSAKNuhmdOBQl V+2bZsZxnuCGKCRmo5yEv2sYahmmE0AATsATfpepFNbhojYapWn6T1PzZ11YaVXT 9jFLvbOtXAj/oNevRQyIFUKkaVGlOChVGrQ1Yl6+tDLCmamN0MheYyEhPjI7qdD7 UHVdY7WA9xhg6bEeAPLQCNYGqcM6EpSlhF7lBKUX3wDSbVTCd0iU4yMyb3w4oa+1 JAtdsGSl92zNsltdeCtsqvs4p+U9SXKleQEwnlFQAktZUX76YCQoVruWNTS/Jt2w 4L0rc0JQpEgaqyyQmmVmXPBSMxhepKhdaKwqLM3AqHzEJ6kicwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBFxo20fD0SFCel2epDcOSLwfqfPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGU0NDg3ZjgtY2UxNC0z OTk3LTljZTktZDk2NTUxNmZjY2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIAPkRuOxsaY6iPoEAM35T1Zg/aqTZoZFGXzBKFbmzxnhkBJHLtP BymcnVzQI6bBJwsCNgF0esKdKdy3wS8U8Ow7Fta7giuu6WbAznHAL2RCALcQ63Z8 6siclhf6pDTKVdj8hBmiaYEpoCpMif8HEAxWzQihRbrRzNJTJA/+/aL+VhL7vs60 uZtsyicCy02MBV2FT7zVaftkfNFjm3VS/3ORrieHSaqvCFEj3gVF2v117amOLPaD uGaYbas3U94LNZPIWsEJw+r8+F8wWSvdcs94G8LPtj/dfUE8Wk/zEQpARvNZLHlK D8QCiVijQ8t++LG7Hlkl/WnTmEGXKcdDVDM= -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:11 2026 by rpki-client