$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ccd5897-6cd1-394a-9434-5fe024e9c662.roa File: 8ccd5897-6cd1-394a-9434-5fe024e9c662.roa (raw, json) Hash identifier: taNjenbPNlkEWjjTK7lffXkvbsWJtFkc4ClX+oHTwMY= Subject key identifier: 55:66:60:B7:67:20:7D:DA:F2:26:CD:22:1B:C1:50:36:0D:D3:FF:83 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584CC07CBFA229DE84A2D75F89C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ccd5897-6cd1-394a-9434-5fe024e9c662.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:5270::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:bf:a2:29:de:84:a2:d7:5f:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=fc823bee-74b9-4e0e-acbc-237ff30ad827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:10:92:8a:cd:71:6b:ee:9a:e1:69:77:66: 61:96:9d:e8:2c:e1:ff:c4:c3:61:06:45:c8:d4:50: e3:50:92:f1:91:98:0b:12:63:30:8b:f9:90:22:28: 67:b6:f4:b5:69:3f:38:96:1d:fa:8f:04:68:13:4d: 2d:cc:b3:0f:a3:d4:a5:24:44:04:5a:de:45:be:90: 40:b8:4a:eb:33:95:2a:dc:90:6e:af:41:0c:ed:2f: 27:94:36:bb:17:39:33:b1:0d:3e:e2:03:08:e4:79: fd:04:4d:4a:c4:1e:59:52:5d:09:5a:4d:07:a4:f9: b8:aa:f3:31:31:c2:8f:8b:a0:96:94:0a:21:71:d3: db:06:03:a2:71:e7:c1:a3:10:dc:18:7f:91:80:cf: 01:29:56:02:15:8a:2d:a3:6e:93:98:b3:aa:63:0b: 5d:67:3e:6f:7a:75:86:40:8d:a7:81:8c:6c:00:9a: 75:ab:7b:14:4d:3c:84:18:48:a2:38:be:34:39:8d: a3:20:40:3c:09:d5:b8:b5:1d:87:f3:ac:fa:d4:35: 14:24:c7:c0:48:b5:97:ad:cb:82:c5:e9:dd:cc:cd: 8f:aa:cf:83:34:77:7a:23:c3:1c:67:c9:60:3a:18: 2f:ae:39:60:70:66:d3:b3:57:98:cd:5c:d8:96:ec: 19:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:66:60:B7:67:20:7D:DA:F2:26:CD:22:1B:C1:50:36:0D:D3:FF:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8ccd5897-6cd1-394a-9434-5fe024e9c662.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5270::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c8:79:f9:88:a9:d7:d7:20:d7:99:84:30:83:86:2f:03:b8: 76:7a:46:da:95:55:4e:1f:f5:70:98:06:88:33:d8:e9:45:54: e6:fa:90:34:02:e9:91:79:19:bb:ac:ab:bd:f6:96:8e:7b:45: 55:c9:93:ba:7c:ec:a1:d8:e4:f4:42:0f:66:4f:44:13:e0:cd: ec:97:01:47:29:45:43:51:86:c1:13:ae:65:da:ad:d0:84:7b: 59:ab:4d:7c:94:44:9b:8f:68:6c:82:5f:66:f9:37:cd:c5:01: 0f:8b:0f:a3:6d:55:c7:38:8e:d5:73:af:9e:7d:82:0e:01:0d: 02:3c:a6:13:ef:a2:af:55:33:8d:c7:48:9e:f1:8b:2e:37:ba: 32:ea:b4:22:61:9d:56:79:5f:4c:32:fa:c4:29:e2:5e:aa:98: af:d7:f8:7c:54:79:ab:36:60:71:61:1b:63:08:0c:44:af:ab: 56:74:0e:89:96:8e:6d:29:03:14:11:28:78:58:c1:36:46:7b: ba:ce:bd:40:90:14:89:e6:19:02:14:1b:ea:e4:18:11:5d:8b: 7b:3e:cc:8d:75:07:5c:2e:36:b4:54:c7:d3:3c:90:b2:46:61: 94:97:7b:bc:f0:57:09:05:59:a3:ea:2b:46:95:cb:41:43:61: d5:8d:5c:b0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfL+iKd6EotdficAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk ZmM4MjNiZWUtNzRiOS00ZTBlLWFjYmMtMjM3ZmYzMGFkODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWYQkorNcWvumuFpd2Zhlp3oLOH/xMNhBkXI 1FDjUJLxkZgLEmMwi/mQIihntvS1aT84lh36jwRoE00tzLMPo9SlJEQEWt5FvpBA uErrM5Uq3JBur0EM7S8nlDa7FzkzsQ0+4gMI5Hn9BE1KxB5ZUl0JWk0HpPm4qvMx McKPi6CWlAohcdPbBgOicefBoxDcGH+RgM8BKVYCFYoto26TmLOqYwtdZz5venWG QI2ngYxsAJp1q3sUTTyEGEiiOL40OY2jIEA8CdW4tR2H86z61DUUJMfASLWXrcuC xendzM2Pqs+DNHd6I8McZ8lgOhgvrjlgcGbTs1eYzVzYluwZLwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFFVmYLdnIH3a8ibNIhvBUDYN0/+DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOGNjZDU4OTctNmNkMS0z OTRhLTk0MzQtNWZlMDI0ZTljNjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFJw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGPIefmIqdfXINeZhDCDhi8DuHZ6RtqVVU4f9XCYBogz2OlFVOb6 kDQC6ZF5Gbusq732lo57RVXJk7p87KHY5PRCD2ZPRBPgzeyXAUcpRUNRhsETrmXa rdCEe1mrTXyURJuPaGyCX2b5N83FAQ+LD6NtVcc4jtVzr559gg4BDQI8phPvoq9V M43HSJ7xiy43ujLqtCJhnVZ5X0wy+sQp4l6qmK/X+HxUeas2YHFhG2MIDESvq1Z0 DomWjm0pAxQRKHhYwTZGe7rOvUCQFInmGQIUG+rkGBFdi3s+zI11B1wuNrRUx9M8 kLJGYZSXe7zwVwkFWaPqK0aVy0FDYdWNXLA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:56:00 2026 by rpki-client