$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e39be9c-e4fe-36dc-87e6-4f7ec4f60197.roa File: 5e39be9c-e4fe-36dc-87e6-4f7ec4f60197.roa (raw, json) Hash identifier: uFyUck2VL57lopDJIT9XeUr1hzgDi2q5XCU5hM8PbaM= Subject key identifier: BB:05:29:9A:A3:65:67:FC:29:DF:5A:C2:44:94:CD:FC:B0:1A:97:96 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBEB0280FA1E11326A7300 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e39be9c-e4fe-36dc-87e6-4f7ec4f60197.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:eb:02:80:fa:1e:11:32:6a:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=9b9a5eed-0c09-4e97-bc78-1e061821237c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c1:34:8d:23:79:6d:8e:eb:d2:89:43:c4:a6: 5b:bd:88:80:b0:c8:d0:2f:16:8f:cc:01:0c:8c:00: 54:12:f8:70:04:ad:46:2d:cb:7d:54:70:f3:e5:b1: 95:13:81:10:a3:cb:e9:4d:f8:88:4c:68:32:54:a8: bf:e7:ee:9f:79:f6:5b:f6:7d:47:77:98:75:6c:1a: c2:45:40:c3:df:e6:a9:1c:e5:cc:31:61:e3:23:5f: 08:31:5a:71:1d:f2:91:13:13:2e:d7:69:c6:f9:93: a9:8f:ea:67:56:1b:03:28:e2:88:aa:fd:65:4a:82: 80:4d:57:5a:6c:ee:54:cc:01:1d:94:86:13:a9:d5: 12:83:4f:fd:85:f2:a2:21:3e:11:46:e8:08:c8:93: 8b:ae:86:b8:71:03:d8:ad:5d:0f:ea:b0:15:e8:45: f7:b9:1a:80:a8:53:f9:7a:15:61:82:22:e0:a3:08: 0c:ed:19:98:d2:a8:91:63:3c:70:49:ed:c6:41:39: 58:61:58:4b:a8:30:25:a6:33:25:86:87:48:fe:7f: 90:19:e6:24:96:ab:8c:89:50:f6:1c:3f:b5:ff:3f: 7e:da:87:ae:52:e7:21:40:13:4b:b0:ad:c8:ff:1d: 2b:66:63:b4:b4:77:47:ab:59:d9:b1:43:58:31:1d: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:05:29:9A:A3:65:67:FC:29:DF:5A:C2:44:94:CD:FC:B0:1A:97:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/5e39be9c-e4fe-36dc-87e6-4f7ec4f60197.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:1f:dd:f1:a3:26:ac:d9:99:5a:45:03:b1:9e:d3:16:ff:15: 4d:e0:a5:38:f7:7a:b5:61:6d:a2:15:c0:9e:e3:54:7e:42:69: f5:39:d2:04:51:09:b6:e9:e3:c7:c6:7e:f8:7d:da:c0:70:80: 48:c7:71:a1:ab:31:12:36:6a:52:1c:12:0a:c5:f1:60:d2:3e: 9d:95:16:31:a2:16:84:cd:0b:d9:21:82:db:cc:70:f2:14:34: 6e:51:b9:16:9f:53:0a:98:d1:6b:0f:81:9f:95:6d:14:05:ad: a3:f2:b6:27:d1:30:c2:2c:ce:43:bc:30:ab:76:d1:7a:98:20: 66:6d:79:7b:f8:7b:39:b8:a7:df:cf:93:ba:30:49:e4:18:84: 64:c5:58:24:93:36:84:92:00:52:97:7e:d7:2d:ab:27:4d:d8: 06:53:4c:21:87:68:e2:de:e2:a7:aa:b0:2d:34:16:22:b7:c8: 28:5f:d5:16:11:99:be:e5:93:18:ef:0c:f0:20:3a:f9:a8:a2: 11:ad:19:9e:c0:e1:d6:45:aa:e2:80:4c:5a:83:06:7a:de:c1: 8b:99:f5:00:98:82:1c:24:ee:5b:c0:26:87:cd:81:c5:b4:fe: 85:ec:db:e9:39:90:ad:76:45:f1:77:d9:cc:b4:34:b4:1c:f3: 9a:99:87:9a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+sCgPoeETJqcwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk OWI5YTVlZWQtMGMwOS00ZTk3LWJjNzgtMWUwNjE4MjEyMzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18E0jSN5bY7r0olDxKZbvYiAsMjQLxaPzAEM jABUEvhwBK1GLct9VHDz5bGVE4EQo8vpTfiITGgyVKi/5+6fefZb9n1Hd5h1bBrC RUDD3+apHOXMMWHjI18IMVpxHfKRExMu12nG+ZOpj+pnVhsDKOKIqv1lSoKATVda bO5UzAEdlIYTqdUSg0/9hfKiIT4RRugIyJOLroa4cQPYrV0P6rAV6EX3uRqAqFP5 ehVhgiLgowgM7RmY0qiRYzxwSe3GQTlYYVhLqDAlpjMlhodI/n+QGeYklquMiVD2 HD+1/z9+2oeuUuchQBNLsK3I/x0rZmO0tHdHq1nZsUNYMR2G5QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFLsFKZqjZWf8Kd9awkSUzfywGpeWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNWUzOWJlOWMtZTRmZS0z NmRjLTg3ZTYtNGY3ZWM0ZjYwMTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFkf3fGjJqzZmVpFA7Ge0xb/FU3gpTj3erVhbaIVwJ7jVH5CafU5 0gRRCbbp48fGfvh92sBwgEjHcaGrMRI2alIcEgrF8WDSPp2VFjGiFoTNC9khgtvM cPIUNG5RuRafUwqY0WsPgZ+VbRQFraPytifRMMIszkO8MKt20XqYIGZteXv4ezm4 p9/Pk7owSeQYhGTFWCSTNoSSAFKXftctqydN2AZTTCGHaOLe4qeqsC00FiK3yChf 1RYRmb7lkxjvDPAgOvmoohGtGZ7A4dZFquKATFqDBnrewYuZ9QCYghwk7lvAJofN gcW0/oXs2+k5kK12RfF32cy0NLQc85qZh5o= -----END CERTIFICATE-----Generated at Tue Nov 10 22:50:51 2026 by rpki-client