$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa File: a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa (raw, json) Hash identifier: OQ7LCZ4jQEcHHtefgL1Seq8RQlbx80hXAONlDDXQLo8= Subject key identifier: 27:73:C3:15:D0:01:E5:BA:CD:38:DB:A0:FD:E5:DA:36:7A:F7:88:49 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE4635B7CD704A8B0EB00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5450::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e4:63:5b:7c:d7:04:a8:b0:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=b6fd28a8-de7c-4fd5-aab2-3c01668ff5c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f1:d8:f7:3b:56:ee:6d:f2:ea:03:01:ae:48: 38:b4:eb:96:da:1e:68:09:47:88:d1:a1:17:da:d3: f3:e2:3d:9c:28:27:5a:6d:c2:98:de:51:7d:04:c6: f5:71:98:18:96:69:de:04:07:1f:33:f2:0b:b0:e6: ca:35:f3:f6:a9:d7:da:28:cd:ff:8b:f1:2c:81:ed: b3:ca:bf:e6:c0:14:96:f3:ed:bb:af:29:fd:0c:04: 56:29:a1:d6:4b:b6:5b:2a:d0:87:06:2c:69:41:67: 95:bd:27:e4:c1:1e:4e:25:29:90:a1:e0:f2:65:8a: 03:63:f4:e3:f2:aa:97:9b:66:e9:e5:d5:24:00:d5: a8:60:64:32:3c:63:94:5b:28:29:d6:2e:02:3c:b9: ed:6b:4e:15:10:f9:e7:81:20:22:36:0a:3b:63:ce: 12:2e:57:52:b0:e5:ef:52:92:90:26:62:e0:3f:bc: 1c:fa:fa:46:f9:dc:79:cf:75:60:62:df:b1:76:71: 76:f6:51:e5:69:a2:79:a1:48:63:ce:33:9e:8b:fb: 25:a2:30:d1:22:e7:88:51:e8:0e:2a:1a:0d:7f:d7: de:77:18:f7:7d:4f:14:10:45:0d:59:88:b9:bd:c1: fc:97:39:22:d5:b6:ce:2a:61:43:f9:d5:ab:e9:16: a7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:73:C3:15:D0:01:E5:BA:CD:38:DB:A0:FD:E5:DA:36:7A:F7:88:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a3aac4bf-cf8a-3c90-8d60-602474efa9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5450::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:d7:3d:83:f0:5b:d1:d0:27:cc:40:e3:6a:47:79:51:69:88: c2:d8:fe:6e:ad:e0:f5:2c:a7:f0:0a:5e:b8:e4:59:b3:14:cf: 4d:af:97:1f:2e:47:d8:ae:9e:0f:3c:6b:39:6e:4f:e0:2c:39: 6c:22:93:0c:d8:38:f2:da:ca:0f:ed:20:06:87:d8:3c:58:74: 53:6d:a7:8f:44:cd:8f:00:11:de:10:69:bf:fc:4d:c5:2c:fc: 71:cb:27:a4:6d:2a:0e:75:27:3c:52:43:06:db:1a:71:32:fd: 34:5c:f7:db:32:11:34:6c:98:f4:b2:25:94:35:f9:78:71:e9: c3:9b:89:1e:d2:d8:c3:fc:15:16:af:e0:68:ee:8c:f8:71:d2: 47:9a:76:35:85:b1:54:1f:3f:e4:56:15:be:fd:62:41:a0:83: df:5e:74:10:4e:b0:6c:70:65:c6:39:06:3e:bd:62:70:90:b7: 13:f5:df:9d:b3:f5:d8:74:6c:5f:13:bb:1a:ce:31:65:e6:91: ef:4f:a5:3d:01:d9:ef:12:10:d4:96:01:c6:21:98:8c:cb:fe: bb:88:2b:5f:9d:e4:56:25:ce:be:a3:fe:19:12:73:fd:79:5e: c3:f8:71:6f:09:30:71:f3:f7:65:ee:ff:7c:90:2f:98:92:1a: 33:18:73:0c -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+RjW3zXBKiw6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YjZmZDI4YTgtZGU3Yy00ZmQ1LWFhYjItM2MwMTY2OGZmNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfHY9ztW7m3y6gMBrkg4tOuW2h5oCUeI0aEX 2tPz4j2cKCdabcKY3lF9BMb1cZgYlmneBAcfM/ILsObKNfP2qdfaKM3/i/Esge2z yr/mwBSW8+27ryn9DARWKaHWS7ZbKtCHBixpQWeVvSfkwR5OJSmQoeDyZYoDY/Tj 8qqXm2bp5dUkANWoYGQyPGOUWygp1i4CPLnta04VEPnngSAiNgo7Y84SLldSsOXv UpKQJmLgP7wc+vpG+dx5z3VgYt+xdnF29lHlaaJ5oUhjzjOei/slojDRIueIUegO KhoNf9fedxj3fU8UEEUNWYi5vcH8lzki1bbOKmFD+dWr6RanVwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCdzwxXQAeW6zTjboP3l2jZ694hJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTNhYWM0YmYtY2Y4YS0z YzkwLThkNjAtNjAyNDc0ZWZhOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFRQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABnXPYPwW9HQJ8xA42pHeVFpiMLY/m6t4PUsp/AKXrjkWbMUz02v lx8uR9iung88azluT+AsOWwikwzYOPLayg/tIAaH2DxYdFNtp49EzY8AEd4Qab/8 TcUs/HHLJ6RtKg51JzxSQwbbGnEy/TRc99syETRsmPSyJZQ1+Xhx6cObiR7S2MP8 FRav4GjujPhx0keadjWFsVQfP+RWFb79YkGgg99edBBOsGxwZcY5Bj69YnCQtxP1 352z9dh0bF8TuxrOMWXmke9PpT0B2e8SENSWAcYhmIzL/ruIK1+d5FYlzr6j/hkS c/15XsP4cW8JMHHz92Xu/3yQL5iSGjMYcww= -----END CERTIFICATE-----Generated at Tue Nov 10 22:56:11 2026 by rpki-client