$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa File: 691bf20b-7889-3315-b2f6-8daa16c4b679.roa (raw, json) Hash identifier: /Ql629Vld1ZztEuWRYPUnOMlvqhcnchyjyKufj5ltrs= Subject key identifier: 50:D9:FD:71:88:83:E9:D3:DF:5E:1C:46:62:DA:BE:7A:31:E0:4A:07 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C0E52630D112DE0855EC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:4ee0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:0e:52:63:0d:11:2d:e0:85:5e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=3c111136-18d6-4191-9089-a60fd7dc79bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:10:88:3b:b7:d3:3b:f3:ee:3b:78:da:26:e5: db:04:0e:73:77:9b:ac:9f:e1:7c:97:66:71:4a:53: bb:5a:30:fd:a2:fb:65:df:6a:74:a0:ae:93:6a:c5: 5d:45:5c:ce:cd:44:53:b4:96:02:ef:f4:10:d5:15: 7e:75:48:6c:ca:f4:6f:74:da:41:4f:8e:17:1d:91: df:bf:da:08:3b:05:ec:19:c9:34:9c:3b:df:1d:12: 52:ab:c5:bc:5c:0f:29:97:e7:23:e2:a1:9b:42:68: 56:4f:b0:57:bd:30:f9:fb:7d:74:22:83:b3:25:47: 10:14:58:fe:e0:8f:8c:de:e8:c2:1e:c0:e7:f0:35: 73:8a:26:8b:c3:d2:a2:37:a1:7c:c9:c4:16:56:2c: e3:d0:0a:9e:c4:4f:27:cb:29:b1:92:63:7e:56:ab: 42:f9:0b:d2:2f:a1:49:44:0e:bc:65:33:5c:cd:0f: a4:47:c5:1f:67:35:e1:60:20:a7:7c:a4:10:58:4d: 92:4f:93:4f:41:54:cc:85:e2:41:50:96:cb:53:16: 95:0e:97:40:6b:f0:86:6d:ce:45:01:e3:cc:0b:8a: 89:47:cc:58:3f:dc:8b:1b:fb:19:fa:8a:6f:24:9c: cd:8d:2c:a8:56:5f:f8:16:cb:12:15:b5:0e:4a:2f: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:D9:FD:71:88:83:E9:D3:DF:5E:1C:46:62:DA:BE:7A:31:E0:4A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/691bf20b-7889-3315-b2f6-8daa16c4b679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4ee0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:0d:29:61:bb:ed:e4:b3:5b:21:e9:28:b9:a4:92:1e:25:fc: 66:fd:e8:bb:d9:3c:ec:c2:c9:a7:17:e8:a2:33:12:3e:42:12: 90:a7:18:a3:7a:5a:78:89:3c:d1:f5:1b:25:e6:cc:97:d5:85: 14:0e:c1:9e:23:0e:d6:14:99:81:78:bf:68:d3:fa:40:6d:4a: 8b:ef:c2:37:df:53:18:7c:99:57:04:a9:fc:54:41:8f:c4:5d: 4c:c3:0b:99:95:b4:b9:8a:af:14:a1:fd:cd:fc:80:08:b7:81: 91:9c:f2:d4:9d:6a:6a:c3:cd:30:02:77:62:d5:0f:51:63:12: 26:c2:48:c5:6e:42:a1:29:1a:8d:a4:82:15:52:e9:8c:d3:1f: 04:51:f6:23:96:a7:11:f8:79:18:1c:0c:2a:32:8c:04:1f:6e: 2e:7a:2b:9e:7d:00:d3:2d:76:a9:5b:80:48:2a:8c:a7:09:fa: 04:94:73:f4:ba:a9:af:75:16:68:6f:00:83:be:8e:0f:b7:bc: 2b:88:12:63:c8:9d:34:79:4b:25:03:04:f7:94:7d:18:9e:d4: d6:4c:35:34:c1:09:87:16:29:99:14:52:37:99:02:93:bc:55: e5:21:4a:cd:0b:8e:16:ef:3f:1f:93:2b:75:59:05:1d:4d:e4: 46:fd:a1:33 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATA5SYw0RLeCFXsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2MxMTExMzYtMThkNi00MTkxLTkwODktYTYwZmQ3ZGM3OWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihCIO7fTO/PuO3jaJuXbBA5zd5usn+F8l2Zx SlO7WjD9ovtl32p0oK6TasVdRVzOzURTtJYC7/QQ1RV+dUhsyvRvdNpBT44XHZHf v9oIOwXsGck0nDvfHRJSq8W8XA8pl+cj4qGbQmhWT7BXvTD5+310IoOzJUcQFFj+ 4I+M3ujCHsDn8DVziiaLw9KiN6F8ycQWVizj0AqexE8nyymxkmN+VqtC+QvSL6FJ RA68ZTNczQ+kR8UfZzXhYCCnfKQQWE2ST5NPQVTMheJBUJbLUxaVDpdAa/CGbc5F AePMC4qJR8xYP9yLG/sZ+opvJJzNjSyoVl/4FssSFbUOSi9JVQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFDZ/XGIg+nT314cRmLavnox4EoHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjkxYmYyMGItNzg4OS0z MzE1LWIyZjYtOGRhYTE2YzRiNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE7g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEENKWG77eSzWyHpKLmkkh4l/Gb96LvZPOzCyacX6KIzEj5CEpCn GKN6WniJPNH1GyXmzJfVhRQOwZ4jDtYUmYF4v2jT+kBtSovvwjffUxh8mVcEqfxU QY/EXUzDC5mVtLmKrxSh/c38gAi3gZGc8tSdamrDzTACd2LVD1FjEibCSMVuQqEp Go2kghVS6YzTHwRR9iOWpxH4eRgcDCoyjAQfbi56K559ANMtdqlbgEgqjKcJ+gSU c/S6qa91FmhvAIO+jg+3vCuIEmPInTR5SyUDBPeUfRie1NZMNTTBCYcWKZkUUjeZ ApO8VeUhSs0LjhbvPx+TK3VZBR1N5Eb9oTM= -----END CERTIFICATE-----Generated at Tue Nov 4 23:33:33 2025 by rpki-client