$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7f07e8b-689c-3feb-a2fd-94a3ad12660d.roa File: d7f07e8b-689c-3feb-a2fd-94a3ad12660d.roa (raw, json) Hash identifier: 6pA1S76lxu7uFIr1WZPuADWgtffU+OKG37Q6YzuKMeU= Subject key identifier: 88:46:33:CA:19:64:72:49:8E:B0:04:04:59:E9:A8:B6:A7:C1:A9:CD Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C27966625493F2C57DC104 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7f07e8b-689c-3feb-a2fd-94a3ad12660d.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5c00::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:79:66:62:54:93:f2:c5:7d:c1:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=65c09f7d-1df3-4801-bd98-412f036a41f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:62:a5:14:d1:aa:46:34:93:36:ae:31:0a:4a: aa:95:0b:33:6e:a6:eb:5e:e5:36:49:da:f3:9d:6d: 70:25:fa:d6:c1:eb:68:83:33:71:e1:c1:f3:b1:3e: 73:e5:9e:b3:b4:e5:f5:99:a9:fc:3f:ab:e0:cc:ea: b2:a2:28:e0:a8:4e:4e:5c:e4:7b:f8:46:6b:33:3c: a4:71:cb:9e:da:0c:b1:6f:d6:42:ef:79:ff:2b:21: ad:b8:3f:01:ce:0a:27:88:3e:d8:38:af:54:0e:64: d9:f3:19:2e:de:72:68:d8:ef:90:b8:3c:15:66:ca: 05:e2:b8:30:14:22:4f:ad:6f:f5:7a:1c:e4:c9:a8: f9:5b:ad:32:67:8f:64:18:b3:8d:a0:c2:2a:13:34: 46:67:b9:ed:6e:85:04:de:56:6e:53:54:20:d8:39: 91:8c:c2:ac:c2:14:bb:16:93:10:7f:2c:16:c1:b4: b8:42:89:09:30:32:bd:6c:64:2a:d8:41:58:fc:df: 95:ca:43:0c:59:7f:b5:6c:a0:ad:88:b2:17:83:56: e8:e2:59:4a:ab:9d:60:cb:a2:60:c8:3e:8e:ba:1e: 6d:94:6f:85:37:64:3f:ab:0f:cf:bd:f0:21:31:b3: 20:37:e2:2d:6e:5e:28:b9:ea:22:06:98:94:23:d5: e5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:46:33:CA:19:64:72:49:8E:B0:04:04:59:E9:A8:B6:A7:C1:A9:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d7f07e8b-689c-3feb-a2fd-94a3ad12660d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5c00::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:c5:2c:52:1f:4a:2a:ee:ed:08:77:13:b8:96:f8:0b:30:f1: 32:8c:51:a7:11:d4:97:06:fb:e6:fb:0a:b5:59:cf:97:a6:5a: 0c:ac:87:46:25:ba:a2:7c:86:bb:41:32:aa:a4:b0:b3:f3:16: 3d:9d:94:82:8b:87:67:99:9f:15:c6:5e:d7:89:fd:9f:11:ce: fe:26:de:7e:61:64:71:8c:4d:2f:8d:40:d9:ea:81:11:6e:0a: c6:9a:4c:6b:6b:fc:5f:bf:4f:05:46:81:d5:c6:fb:a4:bb:93: 4f:d2:3c:e0:9a:26:58:2f:61:90:7e:1c:11:5f:37:8e:0d:c5: b5:08:56:d7:4b:9c:ed:31:e3:fa:09:5e:b0:cb:ad:c4:6c:f0: 3a:bc:fb:87:dd:b4:1a:cf:df:ef:4d:cb:6c:55:1d:d1:0d:45: f8:5b:75:38:02:6a:7e:53:32:31:f2:25:94:b4:47:25:41:11: 30:5d:63:d4:a2:e2:dd:a2:70:fa:89:8c:5b:80:53:5e:3e:d1: 01:1e:8f:54:07:0b:e7:62:9c:9a:df:c7:cb:a8:a5:4f:8f:fd: 9b:ba:c9:9b:18:ed:4e:26:f1:74:e9:36:5e:4b:2a:5b:de:24: 4f:71:64:1a:7f:f9:b1:a2:f0:fe:c2:9e:08:cf:95:16:1a:20: fd:89:91:59 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwnlmYlST8sV9wQQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NjVjMDlmN2QtMWRmMy00ODAxLWJkOTgtNDEyZjAzNmE0MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GKlFNGqRjSTNq4xCkqqlQszbqbrXuU2Sdrz nW1wJfrWwetogzNx4cHzsT5z5Z6ztOX1man8P6vgzOqyoijgqE5OXOR7+EZrMzyk ccue2gyxb9ZC73n/KyGtuD8BzgoniD7YOK9UDmTZ8xku3nJo2O+QuDwVZsoF4rgw FCJPrW/1ehzkyaj5W60yZ49kGLONoMIqEzRGZ7ntboUE3lZuU1Qg2DmRjMKswhS7 FpMQfywWwbS4QokJMDK9bGQq2EFY/N+VykMMWX+1bKCtiLIXg1bo4llKq51gy6Jg yD6Ouh5tlG+FN2Q/qw/PvfAhMbMgN+Itbl4oueoiBpiUI9XlaQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIhGM8oZZHJJjrAEBFnpqLanwanNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDdmMDdlOGItNjg5Yy0z ZmViLWEyZmQtOTRhM2FkMTI2NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFwA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHLFLFIfSiru7Qh3E7iW+Asw8TKMUacR1JcG++b7CrVZz5emWgys h0YluqJ8hrtBMqqksLPzFj2dlIKLh2eZnxXGXteJ/Z8Rzv4m3n5hZHGMTS+NQNnq gRFuCsaaTGtr/F+/TwVGgdXG+6S7k0/SPOCaJlgvYZB+HBFfN44NxbUIVtdLnO0x 4/oJXrDLrcRs8Dq8+4fdtBrP3+9Ny2xVHdENRfhbdTgCan5TMjHyJZS0RyVBETBd Y9Si4t2icPqJjFuAU14+0QEej1QHC+dinJrfx8uopU+P/Zu6yZsY7U4m8XTpNl5L KlveJE9xZBp/+bGi8P7CngjPlRYaIP2JkVk= -----END CERTIFICATE-----Generated at Sun Sep 20 23:31:54 2026 by rpki-client