$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa File: 009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa (raw, json) Hash identifier: Wl5VdyiaudKRQ0hTYmvrewAHjcRvK0OifwMq98IAe3Q= Subject key identifier: C9:80:13:A2:8D:6B:0E:78:C3:8C:C5:71:00:57:6D:87:B4:3A:54:C0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C00A125D830DC64BE4520 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:4240::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:00:a1:25:d8:30:dc:64:be:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=26fa9986-5fe7-42fb-8f0c-955c5e02e469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:94:5d:ad:a3:ed:b0:24:d7:7b:37:8a:68:75: ad:55:91:ef:ba:85:a9:a6:f2:7d:e2:20:37:3f:fe: ec:ae:a5:ea:60:cd:bf:ca:91:4e:b7:4a:0a:eb:38: fb:44:96:c3:fa:07:87:86:c9:a7:e2:b7:1e:da:40: ed:48:ec:2d:4e:7c:21:cc:e2:c5:f2:78:d8:60:c7: 94:d3:d2:03:79:2f:81:71:98:e9:77:d2:7d:2e:f8: 2b:bf:58:b6:1a:34:b7:cc:6a:52:90:91:14:e1:44: 97:82:f7:ab:2c:5f:95:f0:37:ec:3d:a7:b8:61:ad: b5:80:17:b5:93:7e:4b:9f:d9:0b:a5:0f:33:78:14: 27:ae:4f:36:0b:5d:45:8e:f2:5a:28:0a:25:d6:66: 1d:23:52:86:38:64:d0:1e:ed:b8:a9:bc:af:57:2d: 95:fe:22:d1:5a:6e:d0:0b:3e:d7:0d:fe:b3:9a:7a: e5:85:24:72:29:b5:e0:54:96:d3:17:2d:e9:a7:6d: 45:19:b0:0c:25:6b:9d:eb:36:ff:44:a5:2c:45:5f: 0e:e6:fa:9f:c1:b1:23:fb:92:b0:f9:fc:23:6a:59: 7a:0e:46:08:d7:33:9a:f9:78:d7:41:33:e7:d5:f7: 2e:b9:24:e6:02:6c:62:80:22:75:b9:84:d5:4e:15: 88:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:80:13:A2:8D:6B:0E:78:C3:8C:C5:71:00:57:6D:87:B4:3A:54:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/009ff865-9a4b-3afa-b5a7-9cfe5d443684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4240::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:06:41:34:b8:8a:03:9b:ef:c5:5b:23:3e:f1:8e:94:fc:84: 2f:11:03:e0:ee:20:3e:fd:55:2d:0b:6c:ae:16:d2:80:14:83: 6d:6a:24:89:e5:e2:08:19:3b:0d:cf:da:c2:54:f1:d5:19:9d: 16:05:6b:36:54:73:eb:e8:4d:56:df:d0:98:82:1d:01:29:c0: 65:da:cb:8d:69:d5:21:73:14:e2:45:fb:66:ba:f6:bd:aa:61: b0:b0:23:01:95:ae:8c:25:80:4a:21:d4:d1:44:fa:d1:74:6f: 85:59:59:8d:18:43:43:5d:77:ce:9b:0e:be:6a:3a:0d:d6:45: 9a:b5:47:30:90:0b:a1:b5:d7:1f:57:bd:b6:a8:4e:f0:4b:3a: 12:ee:0c:ef:41:de:5e:fc:83:f6:9b:11:f4:b6:61:f9:aa:85: 77:dc:07:31:49:35:74:1b:bf:36:41:30:b5:a3:16:7a:cd:06: f1:2a:48:91:8c:f0:95:d9:bd:29:06:da:0f:51:96:2b:f6:fa: ec:bf:3f:84:d7:36:fb:b4:1f:77:a3:5a:df:24:a8:de:45:af: 9a:9a:5b:b2:3e:e5:28:c2:96:6d:7c:de:45:b8:27:e5:d9:f4: e4:ac:62:a2:0f:82:b0:c4:6c:06:9f:d4:fd:4b:bd:d2:3d:82: 9b:d5:e2:f2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATAChJdgw3GS+RSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MjZmYTk5ODYtNWZlNy00MmZiLThmMGMtOTU1YzVlMDJlNDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pRdraPtsCTXezeKaHWtVZHvuoWppvJ94iA3 P/7srqXqYM2/ypFOt0oK6zj7RJbD+geHhsmn4rce2kDtSOwtTnwhzOLF8njYYMeU 09IDeS+BcZjpd9J9Lvgrv1i2GjS3zGpSkJEU4USXgverLF+V8DfsPae4Ya21gBe1 k35Ln9kLpQ8zeBQnrk82C11FjvJaKAol1mYdI1KGOGTQHu24qbyvVy2V/iLRWm7Q Cz7XDf6zmnrlhSRyKbXgVJbTFy3pp21FGbAMJWud6zb/RKUsRV8O5vqfwbEj+5Kw +fwjall6DkYI1zOa+XjXQTPn1fcuuSTmAmxigCJ1uYTVThWIJwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMmAE6KNaw54w4zFcQBXbYe0OlTAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMDA5ZmY4NjUtOWE0Yi0z YWZhLWI1YTctOWNmZTVkNDQzNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEJA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGgGQTS4igOb78VbIz7xjpT8hC8RA+DuID79VS0LbK4W0oAUg21q JInl4ggZOw3P2sJU8dUZnRYFazZUc+voTVbf0JiCHQEpwGXay41p1SFzFOJF+2a6 9r2qYbCwIwGVrowlgEoh1NFE+tF0b4VZWY0YQ0Ndd86bDr5qOg3WRZq1RzCQC6G1 1x9XvbaoTvBLOhLuDO9B3l78g/abEfS2YfmqhXfcBzFJNXQbvzZBMLWjFnrNBvEq SJGM8JXZvSkG2g9Rliv2+uy/P4TXNvu0H3ejWt8kqN5Fr5qaW7I+5SjClm183kW4 J+XZ9OSsYqIPgrDEbAaf1P1LvdI9gpvV4vI= -----END CERTIFICATE-----Generated at Fri Sep 5 03:39:38 2025 by rpki-client