$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a35f0a32-acfc-3568-82ed-f5dae6867d2d.roa File: a35f0a32-acfc-3568-82ed-f5dae6867d2d.roa (raw, json) Hash identifier: dqKbzBmbObrdBbxRzD/zX+CdmG69thula7b0ONbfZEE= Subject key identifier: 09:70:FA:52:C9:97:15:06:CD:39:D1:AA:6B:96:F1:AA:F0:ED:FC:41 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C277DE732E932B95978D30 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a35f0a32-acfc-3568-82ed-f5dae6867d2d.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5b10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:77:de:73:2e:93:2b:95:97:8d:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=7a8b5c3c-fc44-47f2-9960-5905946f7121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:92:b1:b5:7e:c4:43:84:2e:ed:dd:f1:6f: e6:3d:3c:bd:e5:04:bc:11:50:3d:13:0c:10:7a:19: db:cc:64:f4:a7:aa:11:1a:6f:30:69:c9:f0:4b:35: 21:48:fa:c4:7e:cf:23:15:a0:2a:24:d8:a7:8d:43: e5:88:98:e3:00:3e:1a:7b:8c:ed:38:2d:93:8d:18: 24:87:08:2e:6d:9b:5d:e4:92:59:35:95:61:17:bb: 48:bf:b1:99:2d:1f:a0:22:b4:7a:1f:31:b3:a3:f6: 76:85:3d:37:2b:73:8f:c4:df:2f:24:bd:70:6d:e3: 24:38:46:71:7c:85:ea:b2:c4:c9:26:e7:48:17:7c: e5:d7:38:e7:5b:28:1a:14:e7:06:80:1e:53:e7:ce: 62:87:fa:9c:18:4a:ae:17:ac:c4:ef:e8:3a:9b:29: b6:c1:d1:96:c6:dd:e8:7c:d3:35:f8:bd:55:f3:55: c0:76:83:f1:86:94:3d:65:53:e2:e8:d9:80:51:e3: 49:f3:8f:26:fa:73:6e:09:9c:ad:02:c9:cd:05:1b: 1f:90:f7:d0:70:6c:90:c8:13:90:db:0f:75:b0:97: 4b:0a:d9:f8:05:0a:2e:9f:a9:89:cb:e5:81:88:b1: 61:95:6c:a1:0c:4d:67:59:1d:42:59:7d:bd:f2:c9: 2e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:70:FA:52:C9:97:15:06:CD:39:D1:AA:6B:96:F1:AA:F0:ED:FC:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a35f0a32-acfc-3568-82ed-f5dae6867d2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5b10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:b7:44:28:09:2d:23:4b:3c:c8:ce:bd:f5:d2:10:f0:83:65: 12:07:47:a7:00:4d:c5:78:97:89:24:dd:b5:e9:c4:8b:04:16: 05:8a:52:6d:4d:89:23:d4:32:fa:54:b2:54:ba:c8:f8:34:0d: 0b:a7:3f:d0:79:be:fe:1e:d8:65:a9:4d:d7:17:55:b6:27:67: 54:76:de:cb:42:9f:e0:cf:09:7b:ac:b2:c7:d8:c5:ce:f4:43: 6f:5f:1f:72:c5:18:f8:84:cb:25:da:06:b8:1c:0d:97:9e:a3: d2:a9:f4:33:17:98:89:64:fe:c3:de:97:5b:74:ed:69:87:6a: 5b:98:39:e2:ce:1c:55:5c:0d:c8:30:dd:cc:c3:70:2f:09:39: 8d:48:75:92:00:ea:f5:5c:11:5e:a4:b6:13:af:83:f2:cb:40: a6:a6:8b:74:02:17:30:d9:96:7f:c7:d2:19:15:83:c5:d1:75: 5d:33:bf:dd:96:8e:d6:05:5b:61:d4:ad:fd:7c:cc:c9:5b:f3: 58:c1:42:f2:df:e5:be:64:07:f4:90:71:03:f0:28:bc:0f:39: 99:48:7c:a3:ce:34:56:94:fa:01:b6:bf:9b:41:5f:32:38:d2: 7e:f0:f4:a0:be:76:30:62:6f:08:62:90:3e:c9:39:d4:7e:a0: 24:74:a8:8e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnfecy6TK5WXjTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk N2E4YjVjM2MtZmM0NC00N2YyLTk5NjAtNTkwNTk0NmY3MTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTiSsbV+xEOELu3d8W/mPTy95QS8EVA9EwwQ ehnbzGT0p6oRGm8wacnwSzUhSPrEfs8jFaAqJNinjUPliJjjAD4ae4ztOC2TjRgk hwgubZtd5JJZNZVhF7tIv7GZLR+gIrR6HzGzo/Z2hT03K3OPxN8vJL1wbeMkOEZx fIXqssTJJudIF3zl1zjnWygaFOcGgB5T585ih/qcGEquF6zE7+g6mym2wdGWxt3o fNM1+L1V81XAdoPxhpQ9ZVPi6NmAUeNJ848m+nNuCZytAsnNBRsfkPfQcGyQyBOQ 2w91sJdLCtn4BQoun6mJy+WBiLFhlWyhDE1nWR1CWX298skuTQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAlw+lLJlxUGzTnRqmuW8arw7fxBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTM1ZjBhMzItYWNmYy0z NTY4LTgyZWQtZjVkYWU2ODY3ZDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFsQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHW3RCgJLSNLPMjOvfXSEPCDZRIHR6cATcV4l4kk3bXpxIsEFgWK Um1NiSPUMvpUslS6yPg0DQunP9B5vv4e2GWpTdcXVbYnZ1R23stCn+DPCXusssfY xc70Q29fH3LFGPiEyyXaBrgcDZeeo9Kp9DMXmIlk/sPel1t07WmHaluYOeLOHFVc Dcgw3czDcC8JOY1IdZIA6vVcEV6kthOvg/LLQKami3QCFzDZln/H0hkVg8XRdV0z v92WjtYFW2HUrf18zMlb81jBQvLf5b5kB/SQcQPwKLwPOZlIfKPONFaU+gG2v5tB XzI40n7w9KC+djBibwhikD7JOdR+oCR0qI4= -----END CERTIFICATE-----Generated at Tue Sep 22 18:04:35 2026 by rpki-client