$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa File: 2c38e0db-99e3-3b87-892c-8a35898a440e.roa (raw, json) Hash identifier: DMxBZlZmZbv9uZrn78ya3oEHw62f3Cl0AyMtRItFQiE= Subject key identifier: 7F:95:37:A1:B9:8D:08:64:9A:56:B7:CA:94:11:13:27:40:EC:98:AE Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBF16230556C6C964C9410 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5b90::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:f1:62:30:55:6c:6c:96:4c:94:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=af1eaa04-a512-4c54-9e80-5e018a6b4a36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8e:7a:19:60:c0:5a:c4:7c:0f:be:82:e1:b8: 08:76:3c:51:06:0c:eb:f3:48:de:6f:62:49:42:3d: 70:af:a2:66:21:43:72:52:97:13:cd:29:65:6c:8d: 57:51:b7:5b:fb:98:de:8a:cf:ab:6e:5c:48:76:08: 19:1c:19:88:6d:6b:12:1e:bc:bd:ba:f3:0a:08:d7: 70:62:c6:73:6a:e9:da:06:95:c2:91:69:54:cf:6b: ba:a0:a9:ed:52:7a:b3:80:e6:bc:e7:2c:39:92:85: 77:f4:81:2b:b8:ef:54:02:bb:48:1d:5a:88:fc:85: 8a:cb:0b:56:06:08:5c:fc:e5:a9:2e:a6:9e:5c:0a: 2f:b9:7a:99:b6:e9:11:08:6c:d9:3e:ef:53:f9:25: 27:f3:8c:d4:f1:e1:4e:4c:39:b3:c2:db:c1:c3:5e: ee:39:eb:00:03:c8:1c:2b:2d:7e:ed:b1:a5:76:07: bc:bb:d5:fd:41:66:6c:00:a0:05:03:c0:af:f2:0b: 73:49:f9:c9:0b:e2:31:77:a5:e8:9f:10:23:c3:e5: 30:56:76:72:e5:ee:cb:58:79:38:d5:72:d1:f0:c8: c2:42:36:de:df:48:d2:d8:dc:e0:cc:06:bb:f5:8f: 85:24:ad:18:25:d7:7a:da:53:d0:e8:ad:ee:c7:96: ce:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:95:37:A1:B9:8D:08:64:9A:56:B7:CA:94:11:13:27:40:EC:98:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/2c38e0db-99e3-3b87-892c-8a35898a440e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5b90::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:32:b3:5d:60:05:c6:43:64:9f:0b:be:aa:89:d3:25:3b:9f: 3f:76:f0:23:a6:e2:31:cf:03:c3:ea:73:ae:91:87:9b:a6:c6: da:71:0b:30:20:06:be:97:03:b1:ca:7e:2a:ed:1f:24:89:b5: b9:86:1a:55:0b:a8:2a:96:99:6c:1e:2e:35:6a:41:f0:ee:5e: 99:95:1f:32:79:65:54:7f:99:5a:19:28:b5:b2:87:f9:a4:18: 41:4b:f4:06:cb:3a:b2:8a:99:5d:83:3c:6c:35:5a:82:cd:b6: 81:de:d8:42:88:01:a8:38:01:ec:d7:49:ec:85:bb:a8:26:02: da:d6:b7:77:94:3a:4b:59:e5:a0:04:22:ff:a5:a8:79:e4:d8: 0a:02:9b:a1:54:5e:4e:64:85:57:03:1b:6d:df:de:00:f3:ba: b0:79:59:fa:63:d6:a3:78:64:72:66:df:b6:01:64:fa:90:db: ff:7f:ef:e6:c6:08:2b:49:41:a4:64:dd:8b:ac:fa:f9:b3:74: ca:2d:cd:ea:9e:9c:49:92:ba:d6:12:4e:0e:f7:5c:87:17:1e: f1:f8:de:ec:89:58:fe:06:c9:8d:0b:bc:a9:d8:a9:f7:6d:81: b1:2d:42:2c:ce:ec:e8:e1:09:dd:59:68:fb:24:2a:1f:98:4f: e5:96:c4:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy/FiMFVsbJZMlBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YWYxZWFhMDQtYTUxMi00YzU0LTllODAtNWUwMThhNmI0YTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg456GWDAWsR8D76C4bgIdjxRBgzr80jeb2JJ Qj1wr6JmIUNyUpcTzSllbI1XUbdb+5jeis+rblxIdggZHBmIbWsSHry9uvMKCNdw YsZzaunaBpXCkWlUz2u6oKntUnqzgOa85yw5koV39IEruO9UArtIHVqI/IWKywtW Bghc/OWpLqaeXAovuXqZtukRCGzZPu9T+SUn84zU8eFOTDmzwtvBw17uOesAA8gc Ky1+7bGldge8u9X9QWZsAKAFA8Cv8gtzSfnJC+Ixd6XonxAjw+UwVnZy5e7LWHk4 1XLR8MjCQjbe30jS2NzgzAa79Y+FJK0YJdd62lPQ6K3ux5bOMQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFH+VN6G5jQhkmla3ypQREydA7JiuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMmMzOGUwZGItOTllMy0z Yjg3LTg5MmMtOGEzNTg5OGE0NDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFuQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFQys11gBcZDZJ8LvqqJ0yU7nz928COm4jHPA8Pqc66Rh5umxtpx CzAgBr6XA7HKfirtHySJtbmGGlULqCqWmWweLjVqQfDuXpmVHzJ5ZVR/mVoZKLWy h/mkGEFL9AbLOrKKmV2DPGw1WoLNtoHe2EKIAag4AezXSeyFu6gmAtrWt3eUOktZ 5aAEIv+lqHnk2AoCm6FUXk5khVcDG23f3gDzurB5Wfpj1qN4ZHJm37YBZPqQ2/9/ 7+bGCCtJQaRk3Yus+vmzdMotzeqenEmSutYSTg73XIcXHvH43uyJWP4GyY0LvKnY qfdtgbEtQizO7OjhCd1ZaPskKh+YT+WWxPc= -----END CERTIFICATE-----Generated at Sat Nov 14 23:11:21 2026 by rpki-client