$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa File: 5b23f5e6-8445-3903-a8a5-c0f811483794.roa (raw, json) Hash identifier: pmbGOqNA9d7gw9nCceSve7GEWmht1mDDYHnh2wTuFSY= Subject key identifier: 30:C1:43:81:22:6B:37:47:37:F2:F2:A7:1E:39:8C:C4:1E:2F:A0:B5 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBEFED3FDE25F22A591180 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4160::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:ef:ed:3f:de:25:f2:2a:59:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=1a68e88e-7a02-4b0f-80e9-8fee8bfc2e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:89:4a:84:31:6e:ff:33:b0:ab:64:9b:8f:31: d8:fc:91:dd:10:dd:08:d4:cf:f0:14:6e:df:89:e0: b8:95:99:e0:77:d0:61:11:0a:04:c2:be:1d:ce:c6: e2:1d:14:38:bf:4c:a6:ec:91:78:bd:48:31:98:4d: 5b:aa:98:b2:3c:bc:9b:00:bb:a1:15:75:2c:8f:54: 29:b7:fc:99:33:5e:44:e6:44:1c:dd:b3:9b:8b:af: dd:d7:ca:b9:cb:34:7f:f7:7b:1d:c9:96:4a:82:47: f9:60:0a:7b:ac:07:16:5b:f5:d1:33:34:79:49:c3: 0a:eb:ba:43:aa:c7:c9:31:d5:e9:9b:70:eb:5e:fb: 34:9a:c5:3e:1a:50:3d:c7:c8:1c:ff:c1:a2:2f:4e: 36:9a:14:fe:6c:f8:2b:98:02:af:70:28:3e:b2:17: ed:5c:c0:4d:d6:33:16:e4:5b:80:86:24:bc:89:2c: 27:11:1d:90:5d:ba:ec:98:b4:6e:5c:90:31:b9:91: d7:be:fb:0d:69:c5:f6:62:9b:cb:bf:5f:d8:72:4b: d5:3a:29:85:9e:a5:98:8f:fb:41:b3:23:66:36:07: 29:4f:5c:2e:46:ac:15:8c:a9:08:a6:5b:53:f7:9d: be:48:af:8c:8e:62:a7:d4:86:62:2f:80:aa:bc:04: 36:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:43:81:22:6B:37:47:37:F2:F2:A7:1E:39:8C:C4:1E:2F:A0:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5b23f5e6-8445-3903-a8a5-c0f811483794.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4160::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:83:95:2a:56:81:5c:34:f0:1f:c4:5f:7c:4f:27:42:70:f3: a7:fa:05:ed:79:b5:f2:d8:7e:1c:4c:06:e8:1c:2c:b0:2b:63: c4:5b:2a:64:2d:9e:ff:56:43:e1:b2:ee:a1:cf:dd:8a:c6:ef: 53:ec:27:4f:9c:af:9e:2c:6a:6d:de:f7:68:82:cb:8f:de:b0: e7:9b:d3:01:aa:1f:e2:bb:df:d0:60:ef:50:97:bc:5f:5d:c2: 0b:e6:b5:f4:57:c2:e8:4f:66:1a:59:34:a5:06:d4:de:22:b5: 18:ee:7c:fa:b0:e4:f1:88:3c:87:77:6d:06:30:f8:3e:c2:1f: 4f:34:ad:67:42:b5:19:52:63:6c:22:e8:14:2f:d0:12:33:da: a0:a2:44:78:96:a7:4b:1f:ad:16:c4:4b:ef:fc:6f:6f:3a:46: 73:db:3a:81:6c:27:7c:06:84:73:31:f2:40:66:02:c0:ac:83: 02:18:9d:0e:20:09:89:4a:9c:11:53:a4:fc:37:2c:8e:95:47: 2b:d5:60:58:f0:f4:21:d4:fd:6a:0c:7d:59:5b:1b:75:ed:dc: 90:4e:8f:7f:57:55:ad:76:4f:2d:b8:1e:12:d0:4c:1a:69:ca: bd:2f:74:44:71:45:36:5a:85:33:77:80:73:a3:34:74:8a:1a: fc:2f:28:e7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+/tP94l8ipZEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWE2OGU4OGUtN2EwMi00YjBmLTgwZTktOGZlZThiZmMyZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAholKhDFu/zOwq2SbjzHY/JHdEN0I1M/wFG7f ieC4lZngd9BhEQoEwr4dzsbiHRQ4v0ym7JF4vUgxmE1bqpiyPLybALuhFXUsj1Qp t/yZM15E5kQc3bObi6/d18q5yzR/93sdyZZKgkf5YAp7rAcWW/XRMzR5ScMK67pD qsfJMdXpm3DrXvs0msU+GlA9x8gc/8GiL042mhT+bPgrmAKvcCg+shftXMBN1jMW 5FuAhiS8iSwnER2QXbrsmLRuXJAxuZHXvvsNacX2YpvLv1/YckvVOimFnqWYj/tB syNmNgcpT1wuRqwVjKkIpltT952+SK+MjmKn1IZiL4CqvAQ2nwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDDBQ4EiazdHN/Lypx45jMQeL6C1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWIyM2Y1ZTYtODQ0NS0z OTAzLWE4YTUtYzBmODExNDgzNzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEFg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAByDlSpWgVw08B/EX3xPJ0Jw86f6Be15tfLYfhxMBugcLLArY8Rb KmQtnv9WQ+Gy7qHP3YrG71PsJ0+cr54sam3e92iCy4/esOeb0wGqH+K739Bg71CX vF9dwgvmtfRXwuhPZhpZNKUG1N4itRjufPqw5PGIPId3bQYw+D7CH080rWdCtRlS Y2wi6BQv0BIz2qCiRHiWp0sfrRbES+/8b286RnPbOoFsJ3wGhHMx8kBmAsCsgwIY nQ4gCYlKnBFTpPw3LI6VRyvVYFjw9CHU/WoMfVlbG3Xt3JBOj39XVa12Ty24HhLQ TBppyr0vdERxRTZahTN3gHOjNHSKGvwvKOc= -----END CERTIFICATE-----Generated at Sun Nov 15 17:43:39 2026 by rpki-client