$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa File: bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa (raw, json) Hash identifier: 7QFJfDabXCkKQlKXp1rYSUM3asqlXSuZTMmi8e4nlkg= Subject key identifier: 5E:44:43:61:0C:CE:8B:67:2F:94:84:4A:4E:B1:C6:C4:0C:E0:35:6C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C1117FA4E80DBCE6D4970 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:57a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:11:17:fa:4e:80:db:ce:6d:49:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=9696aa64-0a2f-4cad-b9bc-1008fb51020c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:42:71:91:82:ba:7d:b7:9d:fe:e7:72:5d: c8:6e:dd:63:da:72:44:ca:27:fd:67:6b:96:b8:c2: b2:59:5f:73:b6:81:4c:d6:b5:c7:37:81:63:eb:3a: f8:29:92:eb:4d:09:ef:5d:59:f3:68:07:a2:b0:10: ea:59:38:e3:01:08:71:78:d8:19:d1:2a:3a:ba:86: 5e:57:ed:b0:35:2b:15:7b:31:77:d8:d2:2b:41:aa: 54:24:47:98:8a:26:9c:08:d2:7c:ee:28:4f:8d:e3: 95:ee:5b:86:d9:2c:79:23:9f:f8:1d:9c:46:d1:ed: 90:c3:56:0a:60:68:bd:75:8b:a8:99:01:c0:df:01: 7f:a5:56:79:b3:b5:b3:89:c4:11:26:f9:0b:5d:42: 15:3c:81:b1:a1:ac:13:62:27:f4:67:70:bd:17:74: 0c:23:da:6b:e0:a1:39:09:b8:70:ff:1d:b7:d4:79: 88:f1:18:72:91:ab:cd:6e:21:69:03:ca:30:3c:a3: 2b:66:d4:72:cb:98:df:1d:12:97:f4:c9:16:5d:e3: bd:3b:69:e3:7b:bc:df:31:57:7b:dd:63:c7:6a:e4: a0:cc:4c:fc:63:b8:76:b5:d6:3e:4d:64:e7:1c:7b: a6:83:5c:a0:c6:60:aa:16:30:7b:2a:78:f8:92:84: 45:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:44:43:61:0C:CE:8B:67:2F:94:84:4A:4E:B1:C6:C4:0C:E0:35:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bb3eaaee-9b59-3245-ae24-d2f64bf91ea9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:57a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:a0:63:ca:43:31:d7:42:66:36:14:15:5b:3f:9e:88:cd:e9: ab:57:f5:c3:fc:dd:83:80:84:66:a7:4c:e5:6e:1c:af:f8:b2: 11:69:4d:5d:88:62:38:b1:dd:f7:db:4c:e1:91:1b:5b:ff:10: 7a:d9:6b:e4:8c:d4:02:b3:8a:a0:d3:14:7f:46:55:00:1e:fb: 15:82:2a:7a:1b:8b:5a:ef:a3:ed:6a:0c:b1:9b:8a:f7:4c:6a: eb:af:8e:9a:58:4c:a0:cb:ae:6b:84:d3:de:75:30:a8:39:78: 7c:b9:55:a7:30:a7:30:28:f4:47:ea:a3:2b:76:68:3d:42:d3: 5b:34:63:3f:ca:e3:b0:5c:9b:09:96:3d:6a:2b:be:59:19:f5: 58:97:51:78:0e:b1:0c:04:56:1c:61:b4:b1:a8:73:8f:e2:d1: d0:4b:54:1d:98:f6:e3:21:33:b7:83:c2:a9:d3:e3:79:67:08: ca:ff:84:39:4c:0a:8f:70:d0:bd:4e:dd:9a:87:19:61:8a:b6: 9a:ad:5d:af:69:9c:7c:57:91:49:0f:07:72:d2:38:32:5b:66: 0f:60:be:25:4e:c5:01:ad:2f:fe:1f:73:ab:41:57:87:9d:2c: cd:1a:4a:92:97:6c:b6:d1:68:f0:73:7e:9b:b4:7c:f6:58:ff: 5c:bc:49:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATBEX+k6A285tSXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk OTY5NmFhNjQtMGEyZi00Y2FkLWI5YmMtMTAwOGZiNTEwMjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6RCcZGCun23nf7ncl3Ibt1j2nJEyif9Z2uW uMKyWV9ztoFM1rXHN4Fj6zr4KZLrTQnvXVnzaAeisBDqWTjjAQhxeNgZ0So6uoZe V+2wNSsVezF32NIrQapUJEeYiiacCNJ87ihPjeOV7luG2Sx5I5/4HZxG0e2Qw1YK YGi9dYuomQHA3wF/pVZ5s7WzicQRJvkLXUIVPIGxoawTYif0Z3C9F3QMI9pr4KE5 Cbhw/x231HmI8RhykavNbiFpA8owPKMrZtRyy5jfHRKX9MkWXeO9O2nje7zfMVd7 3WPHauSgzEz8Y7h2tdY+TWTnHHumg1ygxmCqFjB7Knj4koRFJQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF5EQ2EMzotnL5SESk6xxsQM4DVsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmIzZWFhZWUtOWI1OS0z MjQ1LWFlMjQtZDJmNjRiZjkxZWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFeg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIWgY8pDMddCZjYUFVs/nojN6atX9cP83YOAhGanTOVuHK/4shFp TV2IYjix3ffbTOGRG1v/EHrZa+SM1AKziqDTFH9GVQAe+xWCKnobi1rvo+1qDLGb ivdMauuvjppYTKDLrmuE0951MKg5eHy5VacwpzAo9Efqoyt2aD1C01s0Yz/K47Bc mwmWPWorvlkZ9ViXUXgOsQwEVhxhtLGoc4/i0dBLVB2Y9uMhM7eDwqnT43lnCMr/ hDlMCo9w0L1O3ZqHGWGKtpqtXa9pnHxXkUkPB3LSODJbZg9gviVOxQGtL/4fc6tB V4edLM0aSpKXbLbRaPBzfpu0fPZY/1y8SbI= -----END CERTIFICATE-----Generated at Tue Nov 4 23:11:01 2025 by rpki-client