$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa File: 4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa (raw, json) Hash identifier: hU3BlihI0nem4hutzhPBRJOSpnnoF8AAG2aep3z/ybs= Subject key identifier: EB:AB:18:3D:75:5D:BC:2B:79:F8:4C:30:6C:8E:49:A0:41:B1:A0:1B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBDBF7F13645DF88866300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:43d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:db:f7:f1:36:45:df:88:86:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=cbf2d243-f871-4ac5-802f-0db4f7ef6d95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:4a:55:e9:a6:17:53:9a:cc:69:54:f4:5a:c2: 0a:e0:2d:be:4e:a9:a5:e1:26:f2:8e:b4:84:9d:9d: 3e:3c:b3:35:30:6c:f9:78:e3:ac:f0:a1:60:c2:f4: a2:82:5c:87:70:5c:d7:e4:e7:2e:03:29:cd:a9:b1: 7e:4c:9e:2a:6d:c9:bc:ef:a9:63:e9:c5:f9:40:9a: 77:b8:8d:5d:1f:27:ee:99:ae:6c:4a:b9:72:35:d0: 72:1a:e9:da:6d:9c:81:73:5d:82:37:a1:1c:79:dc: 92:2e:51:b1:43:2e:70:17:7d:b7:c1:25:ca:5a:f1: 32:9a:d8:94:8d:97:6a:30:5f:40:00:12:b5:3b:0b: c2:81:1f:b7:95:98:9f:f8:da:21:1f:7a:18:26:06: 5d:bd:b0:e7:ae:a4:a8:69:b7:03:ae:95:4a:89:4a: e7:39:26:e0:a5:d1:bf:81:1e:58:6e:23:37:7e:5b: 3a:46:5a:97:50:0e:58:73:77:33:a1:6f:06:85:44: b3:95:4c:23:fb:d2:4d:54:3c:35:0e:5f:8a:38:cd: c0:3f:be:d6:b6:a7:3d:8e:ab:d6:53:80:41:5f:e0: 15:23:5d:76:34:95:3d:5c:06:18:5a:89:59:7f:1d: a8:d8:04:4b:e9:aa:e1:5d:97:5e:7c:c0:7d:50:ee: 3d:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:AB:18:3D:75:5D:BC:2B:79:F8:4C:30:6C:8E:49:A0:41:B1:A0:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/4bd03671-f192-3fa7-8d40-9cac5c9703f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:43d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:c3:55:97:37:dc:ae:9c:54:18:a0:bc:92:64:9f:83:f3:46: 26:c0:78:54:43:ab:d1:4d:fd:39:fb:65:01:fd:e0:b7:5e:e7: f7:fe:c1:25:3c:b3:f9:a1:f7:b4:2d:3b:d7:ea:a3:ee:02:08: 10:8b:a0:d9:1c:2c:31:76:39:6e:20:f1:a9:d8:15:85:bc:3d: 3f:ac:c8:09:b0:29:c7:f5:9c:e4:09:27:20:c9:c0:47:77:70: ba:65:05:84:38:2a:b7:1a:e6:cd:45:b4:d5:8f:0a:41:2b:1e: e3:7a:1f:9b:36:38:c4:be:a1:34:e1:a4:cd:41:76:4f:58:90: 65:22:ea:c6:6d:ba:17:b7:ac:fa:b6:a1:ca:29:fe:15:c8:72: b7:b9:f8:79:7c:e9:a0:ce:b9:df:77:66:87:83:3c:3b:dd:20: 4c:f0:1d:98:9a:af:25:eb:e8:23:37:14:2f:a2:43:aa:42:5b: 1e:97:c0:a0:98:e0:a9:d2:78:bf:43:80:30:59:2d:5f:46:de: a0:a7:23:54:ac:61:f2:36:aa:e6:20:85:6f:5f:1c:a0:e8:bd: 81:76:52:5f:f3:c0:9a:0b:e6:77:d2:ac:66:19:b3:e8:0c:d0: fc:d8:6c:1c:be:b4:85:01:f4:fb:2a:41:9e:e1:17:b7:a0:2e: 05:2f:ec:98 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9v38TZF34iGYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk Y2JmMmQyNDMtZjg3MS00YWM1LTgwMmYtMGRiNGY3ZWY2ZDk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kpV6aYXU5rMaVT0WsIK4C2+Tqml4SbyjrSE nZ0+PLM1MGz5eOOs8KFgwvSiglyHcFzX5OcuAynNqbF+TJ4qbcm876lj6cX5QJp3 uI1dHyfuma5sSrlyNdByGunabZyBc12CN6EcedySLlGxQy5wF323wSXKWvEymtiU jZdqMF9AABK1OwvCgR+3lZif+NohH3oYJgZdvbDnrqSoabcDrpVKiUrnOSbgpdG/ gR5YbiM3fls6RlqXUA5Yc3czoW8GhUSzlUwj+9JNVDw1Dl+KOM3AP77Wtqc9jqvW U4BBX+AVI112NJU9XAYYWolZfx2o2ARL6arhXZdefMB9UO49iQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOurGD11XbwrefhMMGyOSaBBsaAbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNGJkMDM2NzEtZjE5Mi0z ZmE3LThkNDAtOWNhYzVjOTcwM2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEPQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADHDVZc33K6cVBigvJJkn4PzRibAeFRDq9FN/Tn7ZQH94Lde5/f+ wSU8s/mh97QtO9fqo+4CCBCLoNkcLDF2OW4g8anYFYW8PT+syAmwKcf1nOQJJyDJ wEd3cLplBYQ4Krca5s1FtNWPCkErHuN6H5s2OMS+oTThpM1Bdk9YkGUi6sZtuhe3 rPq2ocop/hXIcre5+Hl86aDOud93ZoeDPDvdIEzwHZiaryXr6CM3FC+iQ6pCWx6X wKCY4KnSeL9DgDBZLV9G3qCnI1SsYfI2quYghW9fHKDovYF2Ul/zwJoL5nfSrGYZ s+gM0PzYbBy+tIUB9PsqQZ7hF7egLgUv7Jg= -----END CERTIFICATE-----Generated at Sun Nov 15 19:30:42 2026 by rpki-client