$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa File: 640728a4-61fc-3bad-a206-0d17e12d4e01.roa (raw, json) Hash identifier: wE5rsHw7pNUcZ1/agSaBaDKExJeUIu4az2dMJL1oXdU= Subject key identifier: D6:56:E4:92:7D:ED:40:1A:78:38:B8:A0:8E:9C:5D:22:C0:53:C9:58 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C26A57839C534B6EF6B2C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4100::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:6a:57:83:9c:53:4b:6e:f6:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=ddba6c4f-2523-4320-9275-ce2bb535c019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:df:2a:88:91:95:c5:35:2b:5b:ab:9f:d1:64: f2:5d:de:82:6a:8f:50:83:81:c2:0a:e0:72:ac:d5: 32:b5:b3:9f:af:c0:7c:86:0d:a0:03:57:a1:11:e5: 3e:f9:28:a1:5e:64:f0:a9:b5:0a:01:ca:10:bc:56: fe:02:fa:f2:84:e2:10:9e:19:a3:12:a6:d4:ae:aa: 3d:70:c5:84:5a:82:e7:b2:9b:62:82:09:6b:e3:ec: 44:d9:fa:f4:ae:6b:d5:09:3d:da:12:b5:1b:0b:83: 14:59:8f:fc:b9:a4:9d:83:9b:d3:b3:6f:23:91:b1: 48:dd:8e:ee:5d:db:87:b2:cc:e2:5c:a2:40:14:9e: 86:c3:87:6a:35:47:b8:69:76:22:0e:a1:ff:fd:01: 6c:c2:1e:f7:dd:20:07:8d:fc:b8:3e:ec:8c:db:1d: 27:ca:25:ba:6a:77:89:f1:bb:aa:4a:b8:f7:32:e0: dc:56:4d:74:81:61:dd:15:a0:e2:47:65:4f:2a:b7: 82:12:19:fa:bb:d0:e3:9f:04:51:be:c7:d9:8d:78: ce:d0:70:ec:4d:cf:97:8a:94:de:77:ec:78:b0:0c: 7e:d6:a2:c5:82:2f:4a:23:54:b0:3e:31:a9:90:37: 34:36:88:5d:7a:99:fb:df:d2:fd:ac:13:b3:44:86: e0:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:56:E4:92:7D:ED:40:1A:78:38:B8:A0:8E:9C:5D:22:C0:53:C9:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/640728a4-61fc-3bad-a206-0d17e12d4e01.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4100::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:33:75:93:b6:99:43:57:ba:09:f0:49:49:d9:ee:fe:08:50: 61:09:38:da:4e:fa:08:4c:76:5c:0b:bc:61:e8:42:bb:98:17: 72:bb:6e:8f:d7:d7:44:d2:c9:26:1c:4c:f5:eb:18:56:ca:e4: 15:b5:ea:02:9f:b9:c4:f5:fb:c7:9b:26:c3:e7:a8:d1:da:5a: 6e:07:9e:38:b5:c3:78:a6:52:38:17:40:68:c8:40:73:97:f4: aa:d3:6c:1a:96:e0:a1:55:9c:c9:ec:15:c3:44:bc:7a:58:47: 57:32:d3:a5:81:77:83:7e:62:2c:10:00:5b:dd:99:90:20:1a: bd:79:88:f0:a9:ab:29:41:e8:e9:92:f8:9e:ec:d4:d0:50:60: 09:3b:3c:cb:d0:22:0b:e6:0c:b5:04:9a:9a:52:9c:1a:d1:87: 8d:41:0d:37:fc:c9:c3:2d:19:d3:f1:ec:f5:a6:1b:76:5b:1b: ae:84:67:d8:38:27:7b:ed:56:40:79:18:b8:ae:fa:80:c1:c7: c2:ab:11:ae:a3:93:54:18:86:cb:e3:13:da:b9:0b:90:f0:3a: bc:29:9f:98:7c:55:31:f8:7e:4f:a7:cf:f5:25:80:72:ce:4d: 44:08:29:81:92:cc:11:25:87:60:11:a2:1c:f5:94:6e:5a:c6: b8:be:e2:1b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmpXg5xTS272ssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZGRiYTZjNGYtMjUyMy00MzIwLTkyNzUtY2UyYmI1MzVjMDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN8qiJGVxTUrW6uf0WTyXd6Cao9Qg4HCCuBy rNUytbOfr8B8hg2gA1ehEeU++SihXmTwqbUKAcoQvFb+AvryhOIQnhmjEqbUrqo9 cMWEWoLnsptigglr4+xE2fr0rmvVCT3aErUbC4MUWY/8uaSdg5vTs28jkbFI3Y7u XduHssziXKJAFJ6Gw4dqNUe4aXYiDqH//QFswh733SAHjfy4PuyM2x0nyiW6aneJ 8buqSrj3MuDcVk10gWHdFaDiR2VPKreCEhn6u9DjnwRRvsfZjXjO0HDsTc+XipTe d+x4sAx+1qLFgi9KI1SwPjGpkDc0Nohdepn739L9rBOzRIbgfQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNZW5JJ97UAaeDi4oI6cXSLAU8lYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjQwNzI4YTQtNjFmYy0z YmFkLWEyMDYtMGQxN2UxMmQ0ZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEEA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEczdZO2mUNXugnwSUnZ7v4IUGEJONpO+ghMdlwLvGHoQruYF3K7 bo/X10TSySYcTPXrGFbK5BW16gKfucT1+8ebJsPnqNHaWm4Hnji1w3imUjgXQGjI QHOX9KrTbBqW4KFVnMnsFcNEvHpYR1cy06WBd4N+YiwQAFvdmZAgGr15iPCpqylB 6OmS+J7s1NBQYAk7PMvQIgvmDLUEmppSnBrRh41BDTf8ycMtGdPx7PWmG3ZbG66E Z9g4J3vtVkB5GLiu+oDBx8KrEa6jk1QYhsvjE9q5C5DwOrwpn5h8VTH4fk+nz/Ul gHLOTUQIKYGSzBElh2ARohz1lG5axri+4hs= -----END CERTIFICATE-----Generated at Mon Sep 21 14:33:00 2026 by rpki-client