$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa File: ce538dc7-a925-3f19-9892-858df419ab79.roa (raw, json) Hash identifier: LvWrHl/bda5jKxlqQyCdJC9v2F/NKMvL+RQf97Ga0qQ= Subject key identifier: DD:F3:24:DF:BE:C8:CF:B5:9E:D1:A8:B6:D1:D7:B2:D1:4F:4A:2C:7C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C2660E5676545721B62480 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5520::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:66:0e:56:76:54:57:21:b6:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=5ab2b9b0-ecbc-4acb-abff-464c73f89f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:a6:8c:1a:e2:ca:2e:38:00:6d:e5:63:c8: d0:45:c7:db:ce:63:3a:8c:06:5b:4a:03:14:f7:56: 81:26:78:2f:9b:0c:43:ee:a2:db:b5:59:79:30:fe: b2:c1:5d:27:bf:29:66:59:ee:5b:8a:6f:81:42:d4: 51:0f:f4:f1:4c:e3:35:61:86:45:1c:0b:31:32:28: 5e:67:c0:4a:f7:5c:61:92:4b:85:f1:71:56:43:df: 8a:c6:ce:ae:8c:5d:19:0f:fe:22:e6:3f:64:b9:f9: a2:48:ad:42:92:fd:95:34:a1:32:fd:9c:9c:77:e7: 45:d5:d6:20:08:78:6c:ac:1e:76:94:b2:6d:55:e0: 0f:12:04:7f:f1:eb:be:f9:64:90:9c:8e:a3:3c:21: dc:b4:37:07:a4:3b:ee:40:5c:6a:04:97:24:e3:f7: da:d1:d0:18:fe:02:b3:d3:14:97:75:cd:d8:60:d5: e4:7f:69:99:f5:ff:24:e4:df:4c:1e:d1:03:4d:f7: f5:c5:84:c1:b7:a9:07:71:21:eb:f6:97:fc:9c:b5: 6b:46:f3:1a:5e:78:6f:5d:d4:e5:22:15:2b:be:7f: e7:30:23:f6:f4:07:20:54:78:f4:a6:af:08:62:8d: af:09:23:20:bf:82:35:a9:e5:34:fd:52:11:03:e2: 27:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:F3:24:DF:BE:C8:CF:B5:9E:D1:A8:B6:D1:D7:B2:D1:4F:4A:2C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5520::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:60:b7:49:4f:9e:ae:e0:20:91:69:bb:64:3d:84:3d:d1:9a: 47:37:06:d0:52:cc:06:93:5f:75:5f:a8:29:89:ea:fc:40:ea: 56:3a:31:87:89:51:92:f9:bf:ed:ed:89:0f:d2:63:e7:de:1b: 78:05:e1:b9:7a:92:24:fa:b2:78:d7:f5:07:62:1d:23:f7:cb: 86:58:5a:38:c4:5d:9b:a8:e5:fc:05:3a:29:83:b7:07:6d:70: f7:81:67:b2:53:df:f4:5f:f7:b0:1e:df:c2:fc:9d:db:fe:4b: cd:4a:6d:b5:49:53:bf:ed:14:ca:e6:53:6f:ab:bf:5f:8c:6c: d4:41:fc:c0:e5:e0:5c:5e:1b:46:73:36:d0:21:ab:3e:72:61: 1a:f2:7f:3c:6e:fb:c4:45:b2:e6:28:95:01:a9:fe:69:71:dd: 51:43:38:82:61:33:f8:1a:95:b3:6b:8e:bc:dd:4c:53:38:b5: 59:89:5d:0c:e2:b2:1f:12:01:66:4a:05:3c:76:3b:52:61:c8: 83:e9:d9:c9:39:84:c4:5b:ec:cd:c0:31:4f:60:3f:05:b4:a3: 78:51:15:ec:3a:bb:d9:81:54:13:bc:da:24:b1:8b:c8:6a:b4: 6a:df:0b:d6:63:ca:5f:78:13:6d:70:fc:39:6e:1e:e2:fa:ad: 16:22:33:e5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmYOVnZUVyG2JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NWFiMmI5YjAtZWNiYy00YWNiLWFiZmYtNDY0YzczZjg5ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaGmjBriyi44AG3lY8jQRcfbzmM6jAZbSgMU 91aBJngvmwxD7qLbtVl5MP6ywV0nvylmWe5bim+BQtRRD/TxTOM1YYZFHAsxMihe Z8BK91xhkkuF8XFWQ9+Kxs6ujF0ZD/4i5j9kufmiSK1Ckv2VNKEy/Zycd+dF1dYg CHhsrB52lLJtVeAPEgR/8eu++WSQnI6jPCHctDcHpDvuQFxqBJck4/fa0dAY/gKz 0xSXdc3YYNXkf2mZ9f8k5N9MHtEDTff1xYTBt6kHcSHr9pf8nLVrRvMaXnhvXdTl IhUrvn/nMCP29AcgVHj0pq8IYo2vCSMgv4I1qeU0/VIRA+InYwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFN3zJN++yM+1ntGottHXstFPSix8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2U1MzhkYzctYTkyNS0z ZjE5LTk4OTItODU4ZGY0MTlhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFUg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEFgt0lPnq7gIJFpu2Q9hD3Rmkc3BtBSzAaTX3VfqCmJ6vxA6lY6 MYeJUZL5v+3tiQ/SY+feG3gF4bl6kiT6snjX9QdiHSP3y4ZYWjjEXZuo5fwFOimD twdtcPeBZ7JT3/Rf97Ae38L8ndv+S81KbbVJU7/tFMrmU2+rv1+MbNRB/MDl4Fxe G0ZzNtAhqz5yYRryfzxu+8RFsuYolQGp/mlx3VFDOIJhM/galbNrjrzdTFM4tVmJ XQzish8SAWZKBTx2O1JhyIPp2ck5hMRb7M3AMU9gPwW0o3hRFew6u9mBVBO82iSx i8hqtGrfC9Zjyl94E21w/DluHuL6rRYiM+U= -----END CERTIFICATE-----Generated at Tue Sep 22 20:23:26 2026 by rpki-client