$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa File: a09e9fcd-dc25-324d-954c-35df2c433a8e.roa (raw, json) Hash identifier: 9yvlexSy6uU2HL4YiB7ySwe1t/5gf6rxe24InVkcn7g= Subject key identifier: FA:86:CD:23:4B:4F:E7:05:10:B7:27:0C:84:B8:08:0C:44:60:16:8B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C2764E6456AC16867CB080 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5330::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:76:4e:64:56:ac:16:86:7c:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=ae3b8c22-a42c-4c0c-9205-f19df9727d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:2d:d3:20:ba:d7:84:cd:75:22:cf:74:be: e0:e5:fa:56:be:6d:3d:99:f9:8c:c9:59:3b:35:db: b0:dd:9f:92:db:43:4f:d1:4b:c0:86:d3:a8:6c:10: 2c:16:f0:90:00:9a:7b:0c:fa:42:26:6c:f1:e0:fb: b8:0c:49:6c:2e:ec:91:6c:15:13:bb:2f:49:f6:00: eb:9b:56:48:71:f2:08:bb:4d:5b:8b:61:c1:9d:75: 85:95:64:ba:58:b6:99:22:bd:9f:f7:cf:a3:25:ce: 7c:ea:85:ab:cb:d3:9b:d7:49:3b:22:9c:e6:5c:f0: 50:51:58:af:41:49:a0:a7:62:97:28:fe:00:c5:d4: c1:de:5c:4f:07:b0:70:f5:c1:62:9a:a4:9c:d8:ef: c8:f1:a1:01:76:c1:00:bd:06:f9:4d:1d:8e:78:56: a8:89:3d:75:71:a8:e1:f0:06:02:2f:d8:c9:de:b3: 18:66:ed:e4:43:b3:a8:87:35:4f:f9:57:b2:4b:40: 41:22:1a:07:88:34:4b:5f:66:5a:16:92:ef:c1:d4: 76:a9:0b:4b:ef:b8:45:e7:40:fe:22:2f:11:30:aa: c7:4f:90:43:64:bd:fc:12:0b:93:d7:36:c7:85:21: 38:7c:15:27:9e:09:be:8e:9e:40:bd:50:de:fc:c4: f1:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:86:CD:23:4B:4F:E7:05:10:B7:27:0C:84:B8:08:0C:44:60:16:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a09e9fcd-dc25-324d-954c-35df2c433a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5330::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:60:70:54:64:52:51:10:80:9b:d1:52:af:ca:d7:62:3d:41: 4b:25:51:f4:4b:ea:d6:19:f8:f3:59:e0:da:68:12:1d:8e:f9: 18:02:d6:9c:8d:6b:e8:05:b6:2f:81:5d:cc:6f:9a:a9:7a:c0: 3c:f9:53:33:b4:b6:63:f9:29:4b:03:3f:c3:67:b7:48:77:88: e9:51:33:6e:05:28:a3:50:12:f2:76:9a:9d:84:a1:e5:84:f8: ad:10:62:29:38:08:02:fb:af:bb:6c:ae:47:e6:e7:33:6c:a6: 5c:ed:3b:de:7e:ab:d7:3b:7f:cc:f5:69:50:70:6e:75:4c:99: 9c:a7:bc:c7:ca:47:23:18:ea:e1:41:83:63:9d:e8:7a:f2:63: b3:64:f9:a5:94:ed:0e:bf:48:e4:bf:3c:34:83:40:31:ff:8e: b2:e5:c2:47:db:ca:07:aa:32:0b:29:ad:24:eb:6f:27:34:41: ce:75:fb:52:6c:47:4e:d1:53:da:1a:ca:4e:cd:f8:35:c0:b6: f7:8c:70:8b:34:3c:f4:ae:30:62:dc:bb:a3:50:e8:88:5d:a6: a9:76:ac:9e:07:3d:d5:64:ac:14:f5:d0:93:1a:f7:67:11:69: c6:80:16:fa:a3:e0:13:4f:cd:d4:07:0b:09:e8:11:cb:a4:56: c9:00:a7:0d -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnZOZFasFoZ8sIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YWUzYjhjMjItYTQyYy00YzBjLTkyMDUtZjE5ZGY5NzI3ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWMt0yC614TNdSLPdL7g5fpWvm09mfmMyVk7 Nduw3Z+S20NP0UvAhtOobBAsFvCQAJp7DPpCJmzx4Pu4DElsLuyRbBUTuy9J9gDr m1ZIcfIIu01bi2HBnXWFlWS6WLaZIr2f98+jJc586oWry9Ob10k7IpzmXPBQUViv QUmgp2KXKP4AxdTB3lxPB7Bw9cFimqSc2O/I8aEBdsEAvQb5TR2OeFaoiT11cajh 8AYCL9jJ3rMYZu3kQ7OohzVP+VeyS0BBIhoHiDRLX2ZaFpLvwdR2qQtL77hF50D+ Ii8RMKrHT5BDZL38EguT1zbHhSE4fBUnngm+jp5AvVDe/MTxkQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPqGzSNLT+cFELcnDIS4CAxEYBaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTA5ZTlmY2QtZGMyNS0z MjRkLTk1NGMtMzVkZjJjNDMzYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFMw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADlgcFRkUlEQgJvRUq/K12I9QUslUfRL6tYZ+PNZ4NpoEh2O+RgC 1pyNa+gFti+BXcxvmql6wDz5UzO0tmP5KUsDP8Nnt0h3iOlRM24FKKNQEvJ2mp2E oeWE+K0QYik4CAL7r7tsrkfm5zNsplztO95+q9c7f8z1aVBwbnVMmZynvMfKRyMY 6uFBg2Od6HryY7Nk+aWU7Q6/SOS/PDSDQDH/jrLlwkfbygeqMgsprSTrbyc0Qc51 +1JsR07RU9oayk7N+DXAtveMcIs0PPSuMGLcu6NQ6Ihdpql2rJ4HPdVkrBT10JMa 92cRacaAFvqj4BNPzdQHCwnoEcukVskApw0= -----END CERTIFICATE-----Generated at Mon Sep 21 19:45:31 2026 by rpki-client