$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa File: 630e0f61-b914-38d5-a150-69733d5cb6c3.roa (raw, json) Hash identifier: VjHV5vYILeafUzuXmhFowa9gwP5gUGX/iq/94K6jWwU= Subject key identifier: 9B:D0:A6:8E:C2:62:52:ED:FB:EA:80:C5:4B:B4:73:0D:32:CA:C1:6C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE6E5B58D986929E84E20 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:52a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e6:e5:b5:8d:98:69:29:e8:4e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=b1bc563c-e620-4647-be57-51057de9979c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:d6:04:99:6f:f9:7c:68:be:aa:36:41:19:46: fa:56:24:9c:1b:3c:18:f7:ef:53:90:be:e7:11:26: 83:59:11:ce:f6:cc:76:09:94:ad:e5:a9:f2:1b:52: 9b:76:f0:5d:9d:21:0e:74:5a:9a:f5:e1:a8:3d:5b: 7e:6c:cf:cb:82:5a:e8:d3:66:d8:0a:38:01:c7:ac: 29:3b:38:ef:73:f1:07:cc:ac:56:5e:d6:27:ef:b1: 33:72:52:ae:a3:8b:d5:a4:e2:b0:4f:c6:90:de:33: 2e:47:94:46:c2:99:d6:f4:45:d8:f7:a4:b7:8c:c6: 7b:05:e6:c5:1c:38:29:3d:4a:23:42:0d:d0:a7:6e: ec:02:6e:d8:ab:98:26:f8:da:db:d2:f6:3d:e3:09: 0f:9f:2b:e9:3c:84:9d:41:b4:29:36:6c:f5:6c:9b: 77:79:2c:29:1a:88:cd:58:c3:fa:ba:8c:3b:3c:a2: 9f:8c:c8:a8:0d:06:98:11:54:d8:79:2e:47:85:59: a9:6a:a1:9a:7c:d1:28:ee:c2:17:9a:2c:9a:ed:31: a6:41:b7:7d:34:c4:53:33:e1:18:b0:e7:52:16:ae: 6c:76:fd:65:96:e5:57:eb:b5:b0:ed:92:c7:f3:ba: 06:dc:f3:eb:22:c9:a6:9c:7a:89:b7:6f:f8:d0:32: 0e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:D0:A6:8E:C2:62:52:ED:FB:EA:80:C5:4B:B4:73:0D:32:CA:C1:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/630e0f61-b914-38d5-a150-69733d5cb6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:52a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:9a:5a:31:a9:03:89:e8:01:13:3e:83:c0:ab:05:98:d5:be: c8:a2:07:a3:61:95:7e:b7:82:4b:a4:be:8e:ba:b7:79:6c:97: ce:b3:4d:7a:86:c4:c6:47:14:66:53:98:56:f6:89:67:0b:e4: e8:5e:73:eb:5c:16:7a:73:b0:6c:ca:73:fe:d5:58:4e:ea:aa: 4d:cb:43:61:53:20:57:62:6e:9e:5d:7d:17:43:1e:53:0a:bf: a2:61:e9:c2:d0:48:53:4d:49:9b:9e:a1:7f:d5:43:ce:06:18: 02:0f:5e:e6:7c:1f:ab:62:4a:73:9d:36:0d:b4:f5:59:3e:d3: 89:38:81:a6:ac:05:00:3b:44:47:16:9d:1e:10:57:3b:97:db: ed:27:44:29:50:56:d0:64:72:d8:90:04:cc:1d:8e:8b:53:11: cb:83:f6:e6:fb:b3:bd:3b:ed:88:13:e5:9f:99:36:71:45:66: 14:a9:51:6a:b5:72:a7:df:ea:11:6d:cc:16:a0:9f:0b:8d:c0: 03:76:f9:7b:8b:86:b4:66:37:c2:dd:89:15:0a:1a:3f:11:d5: e6:51:e9:ef:2f:a2:f3:a7:7a:70:bd:65:d7:1a:a0:3f:a7:f9: 2b:8a:5d:0f:c3:b5:24:23:73:12:2d:06:51:63:ae:ab:1d:4e: 93:a7:67:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+bltY2YaSnoTiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjFiYzU2M2MtZTYyMC00NjQ3LWJlNTctNTEwNTdkZTk5NzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9YEmW/5fGi+qjZBGUb6ViScGzwY9+9TkL7n ESaDWRHO9sx2CZSt5anyG1KbdvBdnSEOdFqa9eGoPVt+bM/Lglro02bYCjgBx6wp Ozjvc/EHzKxWXtYn77EzclKuo4vVpOKwT8aQ3jMuR5RGwpnW9EXY96S3jMZ7BebF HDgpPUojQg3Qp27sAm7Yq5gm+Nrb0vY94wkPnyvpPISdQbQpNmz1bJt3eSwpGojN WMP6uow7PKKfjMioDQaYEVTYeS5HhVmpaqGafNEo7sIXmiya7TGmQbd9NMRTM+EY sOdSFq5sdv1lluVX67Ww7ZLH87oG3PPrIsmmnHqJt2/40DIOuQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFJvQpo7CYlLt++qAxUu0cw0yysFsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNjMwZTBmNjEtYjkxNC0z OGQ1LWExNTAtNjk3MzNkNWNiNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFKg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAF+aWjGpA4noARM+g8CrBZjVvsiiB6NhlX63gkukvo66t3lsl86z TXqGxMZHFGZTmFb2iWcL5Ohec+tcFnpzsGzKc/7VWE7qqk3LQ2FTIFdibp5dfRdD HlMKv6Jh6cLQSFNNSZueoX/VQ84GGAIPXuZ8H6tiSnOdNg209Vk+04k4gaasBQA7 REcWnR4QVzuX2+0nRClQVtBkctiQBMwdjotTEcuD9ub7s7077YgT5Z+ZNnFFZhSp UWq1cqff6hFtzBagnwuNwAN2+XuLhrRmN8LdiRUKGj8R1eZR6e8vovOnenC9Zdca oD+n+SuKXQ/DtSQjcxItBlFjrqsdTpOnZ7o= -----END CERTIFICATE-----Generated at Sun Nov 15 15:28:26 2026 by rpki-client