$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa File: 9897e08e-3b07-3795-b18d-a3a81becf2a1.roa (raw, json) Hash identifier: V0JNcTL7el/oss6io1ldA7a3tv7ynao6x5qVCnVdy0M= Subject key identifier: C8:55:5D:DF:B6:47:7B:CE:D4:FB:40:7E:D9:47:C3:86:C2:50:3C:49 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584B004C07BF2775143DC35A0560 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 54113 IP address blocks: 2607:8940:43a0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 06 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:07:bf:27:75:14:3d:c3:5a:05:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=36a1ed04-900e-4637-a0f2-eff9cb3319d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5c:24:6e:fb:8c:81:8f:51:94:dc:c4:71:b4: 52:cb:dd:30:69:d1:52:45:87:14:b8:ad:97:f5:82: 4e:34:6a:5c:d2:00:66:84:ec:5b:be:3f:bb:95:6c: 03:c2:ce:03:73:14:f4:56:b0:e2:39:51:9b:55:27: 72:2d:eb:34:01:22:22:9b:8c:60:04:02:15:86:43: ca:8c:8a:6b:84:eb:b4:5e:66:93:54:ab:34:23:54: ac:56:3b:2e:a4:a6:30:91:be:ff:09:9f:58:be:3d: dc:40:1f:3e:7d:cc:ad:1f:49:b1:02:ec:4f:e7:7c: a5:60:70:bd:1b:be:8d:f1:6c:28:d6:55:40:77:c6: 6d:6c:7e:c4:e2:e2:57:da:17:30:5f:b2:b4:c1:00: 8b:21:39:9b:db:dd:1e:9e:96:6a:24:3f:e0:93:58: 5a:de:4e:ee:a5:6d:2c:a3:a7:37:3a:b0:42:03:89: ed:b1:7e:83:9b:3b:e0:29:ce:3d:8e:ab:49:ec:20: f9:59:94:aa:b9:c6:8f:12:ba:20:d0:4a:78:c4:e2: 6e:83:1a:c5:46:fd:c0:b1:63:35:13:42:d5:6d:14: 9c:3f:79:cf:d5:41:ce:40:2b:6a:c2:aa:30:4c:7e: 72:9b:2d:6e:98:58:dd:68:cc:3c:3f:68:dc:76:32: 73:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:5D:DF:B6:47:7B:CE:D4:FB:40:7E:D9:47:C3:86:C2:50:3C:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9897e08e-3b07-3795-b18d-a3a81becf2a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:43a0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1f:78:d9:8b:2f:55:2c:0f:0f:9a:d1:ef:ec:2c:b1:85:7e: fb:a7:f5:7c:4e:14:db:30:96:9f:cc:bd:4e:4d:f3:94:ea:69: c4:6d:1d:10:2b:02:b6:80:cc:06:c9:17:f2:88:30:d4:f3:6b: 6d:7d:4d:09:5b:0f:09:0a:fd:71:a6:4c:a8:64:c2:b0:57:4d: 8b:a7:22:9f:9e:76:04:05:90:61:ad:73:8a:9c:2d:29:7c:86: 54:e5:2a:ca:4e:aa:f7:d1:5f:f5:e6:4c:88:87:ff:a9:6c:bf: c7:42:03:77:54:83:b9:03:f1:7f:43:c0:83:40:37:27:5a:56: 4e:24:ad:1a:49:cd:0b:e6:1a:82:8c:0e:73:e5:88:be:23:9a: f8:0f:c7:67:79:91:4a:f2:b8:d1:31:cb:9f:66:fa:fd:d9:22: 4b:3e:dc:46:3c:57:0a:8c:ea:b4:ac:2e:86:95:8a:5e:3c:f1: ad:9f:81:0e:18:9f:8f:5f:8a:2e:fd:bd:de:1e:19:90:85:f1: 2e:f1:c2:dc:7a:cf:87:2b:fe:29:51:f1:2d:00:d9:38:95:7b: 12:64:05:de:c7:b9:21:20:24:07:c5:0d:87:b2:a3:e6:99:d4: da:d9:74:6c:ac:d2:b0:94:86:49:17:73:36:b7:9a:c8:2a:a0: 64:2c:cf:f8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEsATAe/J3UUPcNaBWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk MzZhMWVkMDQtOTAwZS00NjM3LWEwZjItZWZmOWNiMzMxOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FwkbvuMgY9RlNzEcbRSy90wadFSRYcUuK2X 9YJONGpc0gBmhOxbvj+7lWwDws4DcxT0VrDiOVGbVSdyLes0ASIim4xgBAIVhkPK jIprhOu0XmaTVKs0I1SsVjsupKYwkb7/CZ9Yvj3cQB8+fcytH0mxAuxP53ylYHC9 G76N8Wwo1lVAd8ZtbH7E4uJX2hcwX7K0wQCLITmb290enpZqJD/gk1ha3k7upW0s o6c3OrBCA4ntsX6DmzvgKc49jqtJ7CD5WZSqucaPErog0Ep4xOJugxrFRv3AsWM1 E0LVbRScP3nP1UHOQCtqwqowTH5ymy1umFjdaMw8P2jcdjJztwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFMhVXd+2R3vO1PtAftlHw4bCUDxJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTg5N2UwOGUtM2IwNy0z Nzk1LWIxOGQtYTNhODFiZWNmMmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEOg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADsfeNmLL1UsDw+a0e/sLLGFfvun9XxOFNswlp/MvU5N85TqacRt HRArAraAzAbJF/KIMNTza219TQlbDwkK/XGmTKhkwrBXTYunIp+edgQFkGGtc4qc LSl8hlTlKspOqvfRX/XmTIiH/6lsv8dCA3dUg7kD8X9DwINANydaVk4krRpJzQvm GoKMDnPliL4jmvgPx2d5kUryuNExy59m+v3ZIks+3EY8VwqM6rSsLoaVil488a2f gQ4Yn49fii79vd4eGZCF8S7xwtx6z4cr/ilR8S0A2TiVexJkBd7HuSEgJAfFDYey o+aZ1NrZdGys0rCUhkkXcza3msgqoGQsz/g= -----END CERTIFICATE-----Generated at Fri Sep 5 03:40:38 2025 by rpki-client