$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa File: 5235497c-5bd3-33af-b5f2-694ae5c778e3.roa (raw, json) Hash identifier: v2BCdnZ2VCqltxI5+F8md6OaBfx9rv+RudtRu51iGf8= Subject key identifier: C0:FF:4F:54:3A:A6:94:E2:BE:A3:C8:3C:6D:A9:53:28:82:21:0A:97 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584F23C26079E5EDB8C20B8E4A00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5650::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:60:79:e5:ed:b8:c2:0b:8e:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=aca9f270-f27d-4127-8e49-61295c78c34c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d2:ad:2e:83:eb:82:ea:5d:b1:d9:27:9d:32: 67:79:bc:2f:a2:9c:2c:0f:e6:a9:e6:e2:c3:a5:2a: 06:f9:86:cd:ba:c4:59:4d:39:ad:fc:b5:62:42:ca: e6:fd:ae:4d:44:15:d1:69:0f:c6:7e:0a:8a:8f:7d: 5d:22:e7:9e:bb:e5:86:b1:63:dd:82:c4:8f:9f:36: 95:3d:14:12:ad:d1:16:3e:b5:05:1e:e8:47:bc:f0: ba:3f:76:3e:a3:68:cd:a4:46:4c:5f:cc:63:ea:88: 37:65:f0:34:6c:10:40:5d:02:1f:b8:48:6f:61:e0: 4e:aa:55:81:1c:3b:1a:79:dd:f0:4d:5d:fe:3c:3a: 76:b3:5b:61:77:52:73:1e:ae:1e:c2:fa:48:df:7c: 7a:c4:2f:fd:5e:0d:dd:50:e4:4a:93:97:c3:82:75: 60:90:73:a6:90:23:29:4b:ce:30:dd:18:91:b5:28: 0a:46:fb:9a:d0:bd:29:21:60:6a:37:62:58:38:d5: 24:a2:5c:5f:34:d5:ea:9f:9c:d6:e3:e0:04:da:9c: 98:96:73:6b:2d:f9:e0:66:db:35:f8:26:45:3f:e2: 45:42:94:69:fe:aa:95:a9:f1:45:4a:ce:7b:fa:26: 74:d4:5c:9e:3d:8a:4f:fb:4c:83:dd:07:b0:93:e4: d3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:4F:54:3A:A6:94:E2:BE:A3:C8:3C:6D:A9:53:28:82:21:0A:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5235497c-5bd3-33af-b5f2-694ae5c778e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5650::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:69:6c:ae:96:64:e7:42:16:a3:0c:f9:88:70:cf:a7:c5:cc: bb:44:b0:02:f8:ab:1e:94:6e:56:fb:bd:f9:16:6f:36:d9:96: 31:1f:0d:1f:7c:80:c7:91:58:84:6f:95:b4:28:6f:e0:15:6e: 96:06:53:6f:ad:67:73:da:56:51:95:76:ba:91:98:62:67:50: 4e:c2:d5:30:c8:d8:ab:f6:a2:01:e4:e0:eb:75:2c:45:02:5c: 89:6c:38:59:df:b9:ad:dc:59:ea:cc:2c:55:a7:b3:24:f3:ab: b1:ed:ec:43:d9:93:40:29:81:7c:66:e2:90:14:ce:a4:32:0d: d2:2f:ca:ac:59:94:b3:86:05:17:93:5a:a1:46:0c:ea:9d:bc: 00:d0:55:e1:28:c1:5c:a3:48:78:30:fe:a1:e3:ed:fb:8d:e1: c3:e9:a7:da:0d:51:74:99:d0:59:74:1c:5d:7f:40:cf:e9:f7: 5d:a3:06:d3:5d:bd:9a:e8:31:63:c2:92:3a:19:99:99:6b:b9: 82:58:f0:55:42:39:e0:9e:2e:d9:02:3a:e4:da:00:e6:3b:6e: d8:15:3b:b4:f1:2c:cc:c9:d5:42:9c:e3:f2:0b:3b:e4:d1:cd: 75:1c:8d:d7:de:eb:e5:f9:d0:41:a9:21:8e:11:54:e6:b0:f1: 46:6b:50:44 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE8jwmB55e24wguOSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk YWNhOWYyNzAtZjI3ZC00MTI3LThlNDktNjEyOTVjNzhjMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtKtLoPrgupdsdknnTJnebwvopwsD+ap5uLD pSoG+YbNusRZTTmt/LViQsrm/a5NRBXRaQ/GfgqKj31dIueeu+WGsWPdgsSPnzaV PRQSrdEWPrUFHuhHvPC6P3Y+o2jNpEZMX8xj6og3ZfA0bBBAXQIfuEhvYeBOqlWB HDsaed3wTV3+PDp2s1thd1JzHq4ewvpI33x6xC/9Xg3dUORKk5fDgnVgkHOmkCMp S84w3RiRtSgKRvua0L0pIWBqN2JYONUkolxfNNXqn5zW4+AE2pyYlnNrLfngZts1 +CZFP+JFQpRp/qqVqfFFSs57+iZ01FyePYpP+0yD3Qewk+TT3wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMD/T1Q6ppTivqPIPG2pUyiCIQqXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTIzNTQ5N2MtNWJkMy0z M2FmLWI1ZjItNjk0YWU1Yzc3OGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFZQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAE9pbK6WZOdCFqMM+Yhwz6fFzLtEsAL4qx6Ublb7vfkWbzbZljEf DR98gMeRWIRvlbQob+AVbpYGU2+tZ3PaVlGVdrqRmGJnUE7C1TDI2Kv2ogHk4Ot1 LEUCXIlsOFnfua3cWerMLFWnsyTzq7Ht7EPZk0ApgXxm4pAUzqQyDdIvyqxZlLOG BReTWqFGDOqdvADQVeEowVyjSHgw/qHj7fuN4cPpp9oNUXSZ0Fl0HF1/QM/p912j BtNdvZroMWPCkjoZmZlruYJY8FVCOeCeLtkCOuTaAOY7btgVO7TxLMzJ1UKc4/IL O+TRzXUcjdfe6+X50EGpIY4RVOaw8UZrUEQ= -----END CERTIFICATE-----Generated at Fri Sep 25 07:03:26 2026 by rpki-client