$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa File: a51df00e-1087-3157-a3cb-3cc70a919890.roa (raw, json) Hash identifier: 9k/URPDE/Qagjt3Eh8sI/yEQW4Z5GDMl3B1ZinAOasI= Subject key identifier: 16:EF:56:50:E7:83:20:45:EA:5E:27:48:C6:41:ED:24:1D:6D:EA:1C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBDFE69A72B80387CA7B80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4260::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:df:e6:9a:72:b8:03:87:ca:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=4417c116-5ad8-4601-89c1-5f7e4d80c911 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c8:65:34:4d:3b:ca:bc:e8:88:11:cf:c8:4d: c7:f6:6c:d9:37:14:5e:c5:ce:e2:5d:ee:26:36:a6: a9:39:ca:bb:0b:8b:86:e2:a3:0a:22:ef:96:aa:88: d7:da:50:a5:c6:2a:79:c5:fa:a3:28:7d:9c:cc:2d: e7:4f:3f:a5:e3:d1:dd:40:cd:b9:a0:d3:56:cd:61: 1c:89:3b:39:4c:83:79:69:88:9c:88:56:27:e6:f1: b9:94:46:a4:cc:93:c2:46:ff:2f:a6:ee:30:b6:62: d8:ca:0d:1b:35:bb:95:7f:57:3c:64:50:6e:98:b7: f3:91:17:71:d9:e9:66:6c:2b:2f:42:79:ff:8d:5c: f3:a2:d5:ed:ab:a6:10:7a:4f:f0:25:3e:e6:25:c8: 1f:a0:21:e9:da:3f:11:0f:30:89:a6:48:cd:e7:50: 36:30:25:fb:25:f9:de:7c:32:44:7d:2f:ea:50:70: 57:17:2c:1f:c6:0c:ba:48:44:1f:79:40:e3:5a:a9: d2:38:88:6a:3b:34:54:a7:e4:42:be:65:9d:46:dc: c9:c3:4e:91:db:3d:9f:fd:16:b5:09:3c:88:8b:a1: 6a:c9:eb:fa:77:08:00:8e:3b:b7:9b:38:b1:4d:95: 14:47:bd:7f:fe:58:7d:a7:e7:ca:e3:62:76:ca:65: 28:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EF:56:50:E7:83:20:45:EA:5E:27:48:C6:41:ED:24:1D:6D:EA:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a51df00e-1087-3157-a3cb-3cc70a919890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4260::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:fd:49:0f:a9:a4:61:66:c3:58:9a:29:a2:c5:fd:61:86:44: 20:0a:c7:4a:16:2a:2e:22:17:22:3a:e7:f2:de:0c:40:84:3c: 4a:00:fa:8b:cd:71:47:eb:89:f6:e6:7c:87:4b:9d:e8:c2:15: 43:6e:53:2c:03:00:54:68:a7:80:af:f1:a3:8e:53:e6:40:04: e7:01:b1:82:a6:b9:41:53:94:20:b2:f9:ba:2a:6d:92:29:3b: de:70:8e:d9:4f:61:a4:cc:be:cd:eb:7d:b2:85:ed:45:f8:10: cd:53:77:df:a8:72:27:e2:27:01:82:c6:8f:6b:aa:5e:c8:b7: 5a:c5:44:fe:1f:0e:ea:0d:0e:8a:cd:b2:97:0c:b5:4b:95:34: 60:37:bd:73:e4:f2:49:80:4d:70:cb:2e:1b:39:e7:21:0c:2e: 55:d2:b6:57:82:a3:1a:89:52:7c:b7:dd:c8:f3:ec:e5:c9:f7: b4:74:da:b0:ba:4d:60:9e:dd:55:ad:e2:e4:d7:be:a9:c5:15: bc:f9:e8:24:13:9e:0e:3a:90:a4:9a:77:58:bb:09:26:0f:fe: b6:02:93:55:51:e6:33:5b:21:10:5a:fb:a9:48:5c:97:4e:aa: f5:90:42:0c:60:89:36:b8:f2:b1:42:d2:4e:3d:73:b5:8d:eb: 74:26:92:0e -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9/mmnK4A4fKe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDQxN2MxMTYtNWFkOC00NjAxLTg5YzEtNWY3ZTRkODBjOTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMhlNE07yrzoiBHPyE3H9mzZNxRexc7iXe4m NqapOcq7C4uG4qMKIu+WqojX2lClxip5xfqjKH2czC3nTz+l49HdQM25oNNWzWEc iTs5TIN5aYiciFYn5vG5lEakzJPCRv8vpu4wtmLYyg0bNbuVf1c8ZFBumLfzkRdx 2elmbCsvQnn/jVzzotXtq6YQek/wJT7mJcgfoCHp2j8RDzCJpkjN51A2MCX7Jfne fDJEfS/qUHBXFywfxgy6SEQfeUDjWqnSOIhqOzRUp+RCvmWdRtzJw06R2z2f/Ra1 CTyIi6Fqyev6dwgAjju3mzixTZUUR71//lh9p+fK42J2ymUonQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBbvVlDngyBF6l4nSMZB7SQdbeocMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTUxZGYwMGUtMTA4Ny0z MTU3LWEzY2ItM2NjNzBhOTE5ODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEJg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACf9SQ+ppGFmw1iaKaLF/WGGRCAKx0oWKi4iFyI65/LeDECEPEoA +ovNcUfrifbmfIdLnejCFUNuUywDAFRop4Cv8aOOU+ZABOcBsYKmuUFTlCCy+boq bZIpO95wjtlPYaTMvs3rfbKF7UX4EM1Td9+ocifiJwGCxo9rql7It1rFRP4fDuoN DorNspcMtUuVNGA3vXPk8kmATXDLLhs55yEMLlXStleCoxqJUny33cjz7OXJ97R0 2rC6TWCe3VWt4uTXvqnFFbz56CQTng46kKSad1i7CSYP/rYCk1VR5jNbIRBa+6lI XJdOqvWQQgxgiTa48rFC0k49c7WN63Qmkg4= -----END CERTIFICATE-----Generated at Sun Nov 15 18:28:22 2026 by rpki-client