$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa File: df06a591-de7d-3d32-ac3a-c3ae36cab293.roa (raw, json) Hash identifier: qFOUZlesa4r5NMRklzWg8zdv2nE5I0wj3l6cDZ6frIQ= Subject key identifier: 23:C1:4D:50:BF:67:67:B9:D6:59:D1:06:19:F4:B8:08:DC:E3:56:E7 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584CC07CAE3AA0BD261E6891BA70 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 54113 IP address blocks: 2607:8940:41c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:ae:3a:a0:bd:26:1e:68:91:ba:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=b5ccf867-36f7-453a-968f-33a44a3fdf93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:f1:bb:02:10:50:e6:04:00:7b:91:48:29:44: 00:33:54:8c:1f:78:73:ad:40:57:be:4c:2f:d5:4c: 2a:e2:dd:b4:e8:8a:9b:1e:1d:04:38:22:5e:3c:0e: 63:99:6c:34:24:36:9d:c1:8d:54:97:0b:48:22:46: b8:b4:e0:2d:18:e5:17:02:e5:9b:c6:fd:ff:7c:09: 79:b8:26:4c:53:96:1c:76:3c:e1:48:62:87:53:5c: a0:bb:bc:f4:83:39:21:c3:7f:80:3f:58:7e:82:ab: d7:9d:cd:0e:41:c3:83:3f:1f:b7:bf:cc:64:45:01: 5d:b6:eb:50:a2:b8:61:5d:6c:31:de:fa:ec:5f:e4: 96:f6:92:da:8b:76:51:07:fd:da:b3:c4:32:b5:4f: eb:57:34:68:40:28:d8:87:6c:bb:ec:52:65:15:b0: 79:24:b2:12:4e:0c:de:c4:11:ad:83:ae:66:8c:43: ce:a7:ce:59:d9:86:b5:e3:c3:21:de:06:d4:72:a2: fd:ea:c1:2a:2c:f4:17:54:a5:2d:6c:c8:ca:f3:a2: 06:17:22:f5:bc:cd:e1:3d:65:55:37:78:d7:4f:b8: ca:42:44:f6:e0:ec:ec:9c:b3:57:b0:8b:60:28:57: e3:1b:07:88:b5:01:fb:fa:d7:83:b3:b1:b6:b6:e9: ae:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:C1:4D:50:BF:67:67:B9:D6:59:D1:06:19:F4:B8:08:DC:E3:56:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:41c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:74:9f:e4:f2:7f:21:ab:5f:b5:1e:01:f3:5b:b0:8d:49:0e: 96:16:1d:1d:37:66:7d:09:37:2c:11:b4:93:9a:f1:bf:7b:04: 20:02:1b:2a:4f:06:9f:70:38:23:80:f0:80:4a:62:14:3b:c3: 51:9d:e8:ff:bf:bf:40:07:26:41:f4:f2:d0:0b:fb:31:e1:09: fb:6d:bb:34:4a:6a:7f:c4:00:24:86:8c:06:c6:b7:1a:d5:15: 60:18:5e:97:40:8f:7e:3d:60:5e:8e:dd:96:29:b6:df:8b:c9: dc:70:f4:68:18:d7:56:30:0b:e2:2d:d5:f6:f6:7a:8e:7d:61: db:eb:19:26:7e:78:21:37:4c:91:58:61:e2:02:f2:21:35:7b: 78:c9:07:8a:ad:23:79:08:71:c2:dd:4e:16:8f:bc:a7:08:9e: 6b:bc:07:d2:31:3d:d2:f9:bd:2c:a9:c2:67:a9:95:f8:c0:17: 1b:1c:67:32:f6:52:d8:d9:42:96:44:dc:be:74:0e:0a:0a:f1: 14:0c:ec:0a:86:34:2a:63:61:c3:89:21:d7:61:20:c7:43:97: 02:7f:4a:69:b1:e7:4b:ad:e9:63:56:23:f6:e7:bc:1c:b6:1b: 8a:e3:17:c0:c8:2e:1f:1c:43:f3:8c:16:bb:2f:9a:f1:a5:05: d2:fa:4c:79 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzAfK46oL0mHmiRunAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk YjVjY2Y4NjctMzZmNy00NTNhLTk2OGYtMzNhNDRhM2ZkZjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPG7AhBQ5gQAe5FIKUQAM1SMH3hzrUBXvkwv 1Uwq4t206IqbHh0EOCJePA5jmWw0JDadwY1UlwtIIka4tOAtGOUXAuWbxv3/fAl5 uCZMU5YcdjzhSGKHU1ygu7z0gzkhw3+AP1h+gqvXnc0OQcODPx+3v8xkRQFdtutQ orhhXWwx3vrsX+SW9pLai3ZRB/3as8QytU/rVzRoQCjYh2y77FJlFbB5JLISTgze xBGtg65mjEPOp85Z2Ya148Mh3gbUcqL96sEqLPQXVKUtbMjK86IGFyL1vM3hPWVV N3jXT7jKQkT24OzsnLNXsItgKFfjGweItQH7+teDs7G2tumu6QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCPBTVC/Z2e51lnRBhn0uAjc41bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGYwNmE1OTEtZGU3ZC0z ZDMyLWFjM2EtYzNhZTM2Y2FiMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFZ0n+TyfyGrX7UeAfNbsI1JDpYWHR03Zn0JNywRtJOa8b97BCAC GypPBp9wOCOA8IBKYhQ7w1Gd6P+/v0AHJkH08tAL+zHhCfttuzRKan/EACSGjAbG txrVFWAYXpdAj349YF6O3ZYptt+Lydxw9GgY11YwC+It1fb2eo59YdvrGSZ+eCE3 TJFYYeIC8iE1e3jJB4qtI3kIccLdThaPvKcInmu8B9IxPdL5vSypwmeplfjAFxsc ZzL2UtjZQpZE3L50DgoK8RQM7AqGNCpjYcOJIddhIMdDlwJ/Smmx50ut6WNWI/bn vBy2G4rjF8DILh8cQ/OMFrsvmvGlBdL6THk= -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:29 2026 by rpki-client