$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89747bf7-5aa8-34fe-9af2-12fe36478e58.roa File: 89747bf7-5aa8-34fe-9af2-12fe36478e58.roa (raw, json) Hash identifier: lWkQmMoF3XKLwZ+PsaQYnvHp6m2iAp0HfadRS2rhITM= Subject key identifier: F8:64:A4:D7:68:CA:8B:06:68:AD:24:11:A6:71:B4:08:33:88:C1:E5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C2713AFA9C0A0EB0E30340 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89747bf7-5aa8-34fe-9af2-12fe36478e58.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4420::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:71:3a:fa:9c:0a:0e:b0:e3:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=d203c2bf-e2c8-4632-b83d-142abf8520c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:47:a5:96:4c:e6:80:c9:e9:0e:c4:ae:b8: 94:6c:2a:ea:f8:97:03:63:ec:a2:a9:92:35:c4:d4: ba:f1:26:fd:07:5e:00:58:27:d6:73:ca:80:9f:92: 4d:43:df:83:9a:c6:b4:23:c8:6d:1c:e4:c0:74:dc: d9:7e:3b:18:c9:9a:83:b6:e7:ec:7a:fa:f4:cf:89: db:8f:56:0d:a7:d9:58:02:8a:00:b3:f3:ba:50:6e: 86:50:e6:7b:17:b1:b9:1f:4a:8f:d7:8d:7d:ed:91: a6:2a:fa:aa:8c:a5:dd:0a:b1:77:9b:3f:68:1f:b7: 62:0f:4d:f6:c6:c8:fb:23:f2:b2:ce:9d:d7:7f:9d: 61:57:67:77:b2:82:8f:98:dc:e5:56:55:84:fb:4c: 85:b3:12:3a:72:7f:55:7a:01:9a:8b:85:f2:d8:fd: f3:60:45:31:ec:5e:4b:01:a8:2d:e2:5b:a7:5c:fd: 21:d4:1f:83:3f:01:e5:57:d4:c3:66:ea:4c:77:c5: df:dc:7a:09:fe:97:a2:99:2e:7c:d0:f7:8d:64:a2: 82:72:7a:2a:98:7a:57:b2:b3:4f:ae:8d:97:1c:65: ee:a6:b5:d2:45:b0:27:23:39:4c:0d:86:b1:3a:c9: 3f:4d:ba:17:68:15:81:1c:45:8e:80:28:32:1b:a1: 65:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:64:A4:D7:68:CA:8B:06:68:AD:24:11:A6:71:B4:08:33:88:C1:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/89747bf7-5aa8-34fe-9af2-12fe36478e58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4420::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:07:ec:12:6a:42:30:c3:64:e5:e8:79:51:6b:8d:df:07:52: 41:98:76:e5:5d:dc:50:00:f2:dd:71:a2:2e:fc:87:a5:df:6d: 07:bf:0f:f7:c9:8f:02:a5:a0:4e:1d:1d:ee:fd:51:2a:bb:23: b5:67:22:ad:37:3c:7c:e0:ec:6f:31:ce:6a:e2:55:bc:e4:79: 8a:a3:8e:aa:4b:6d:11:7a:cf:4a:11:22:4b:fb:31:cd:a0:76: f3:73:ad:e9:cb:1f:f7:88:72:46:57:71:f9:9c:be:4b:93:6a: cf:71:fa:1e:b0:57:8c:98:f7:33:fb:06:6c:95:eb:83:7f:f6: e1:cc:17:fa:9e:00:e6:37:c8:35:af:bc:ac:30:f4:92:62:da: 5d:31:5c:f9:da:f8:30:4b:4b:44:9c:e6:9c:b1:fa:94:83:04: c7:71:b4:c1:e7:58:33:ba:b6:f4:12:00:1b:da:a5:62:cc:7d: 61:f8:78:5b:d1:27:2f:bc:85:8a:3e:cd:44:2b:23:a2:56:30: b5:4d:6f:a8:c5:63:1b:20:6c:10:fb:1b:58:1e:51:4a:8b:6c: 27:2c:27:37:86:ac:f2:cf:f4:78:29:de:ae:e2:30:53:3f:64: e1:f9:46:94:2b:b9:aa:65:30:91:3a:8b:09:4a:41:c1:36:ae: f8:63:f6:d8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnE6+pwKDrDjA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk ZDIwM2MyYmYtZTJjOC00NjMyLWI4M2QtMTQyYWJmODUyMGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGtHpZZM5oDJ6Q7ErriUbCrq+JcDY+yiqZI1 xNS68Sb9B14AWCfWc8qAn5JNQ9+Dmsa0I8htHOTAdNzZfjsYyZqDtufsevr0z4nb j1YNp9lYAooAs/O6UG6GUOZ7F7G5H0qP14197ZGmKvqqjKXdCrF3mz9oH7diD032 xsj7I/Kyzp3Xf51hV2d3soKPmNzlVlWE+0yFsxI6cn9VegGai4Xy2P3zYEUx7F5L Aagt4lunXP0h1B+DPwHlV9TDZupMd8Xf3HoJ/peimS580PeNZKKCcnoqmHpXsrNP ro2XHGXuprXSRbAnIzlMDYaxOsk/TboXaBWBHEWOgCgyG6FlHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPhkpNdoyosGaK0kEaZxtAgziMHlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODk3NDdiZjctNWFhOC0z NGZlLTlhZjItMTJmZTM2NDc4ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEQg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHEH7BJqQjDDZOXoeVFrjd8HUkGYduVd3FAA8t1xoi78h6XfbQe/ D/fJjwKloE4dHe79USq7I7VnIq03PHzg7G8xzmriVbzkeYqjjqpLbRF6z0oRIkv7 Mc2gdvNzrenLH/eIckZXcfmcvkuTas9x+h6wV4yY9zP7BmyV64N/9uHMF/qeAOY3 yDWvvKww9JJi2l0xXPna+DBLS0Sc5pyx+pSDBMdxtMHnWDO6tvQSABvapWLMfWH4 eFvRJy+8hYo+zUQrI6JWMLVNb6jFYxsgbBD7G1geUUqLbCcsJzeGrPLP9Hgp3q7i MFM/ZOH5RpQruaplMJE6iwlKQcE2rvhj9tg= -----END CERTIFICATE-----Generated at Mon Sep 21 07:57:52 2026 by rpki-client