$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b061a6cf-f905-3059-9f3e-defea0da08cd.roa File: b061a6cf-f905-3059-9f3e-defea0da08cd.roa (raw, json) Hash identifier: ZZZmGXZiXKye3UndER8Dvi/wWLHHBk22NScZ7kuPfKg= Subject key identifier: E7:D4:BC:3A:0A:84:FC:96:A8:12:9E:1C:DA:FB:22:6B:3C:23:13:09 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE9751DDBE1EF1DD98CA0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b061a6cf-f905-3059-9f3e-defea0da08cd.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5220::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e9:75:1d:db:e1:ef:1d:d9:8c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=87cb768d-3978-4e4e-8be8-00e61c85544c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5c:0d:f4:68:c6:29:b8:90:35:6a:0a:dd:55: 1a:8e:0b:45:f8:7c:5f:c6:ed:27:6f:15:a4:22:be: 31:21:ab:4f:7a:fa:c8:08:57:6a:90:38:6c:18:7d: 52:54:8c:35:53:3c:a1:68:5b:7a:24:31:44:e8:93: a5:4f:9c:51:36:a5:9c:4b:a8:ad:f5:71:1c:3f:21: 2d:74:3f:e6:9f:df:6f:ac:1f:57:fe:f0:ca:08:7b: 0b:98:53:84:4c:b1:ca:fd:08:79:5c:02:18:3e:82: a5:23:52:5c:73:a9:e5:23:be:43:fa:ed:df:ff:27: 20:e7:d1:e6:da:c6:cd:4d:06:e1:83:d7:72:2c:d9: 98:97:0d:c6:78:0c:f8:2e:0b:61:c4:01:53:f9:69: b1:00:b2:14:10:38:c2:7b:15:1a:e0:11:b4:76:be: d9:f8:bb:95:57:08:23:62:b7:6c:60:29:9f:2e:9a: 79:f9:b2:8a:44:bc:a2:14:15:b5:a5:f3:40:4b:54: 31:2f:e6:2b:1e:59:36:27:41:cc:7a:db:86:ef:2c: 57:2d:59:bd:10:a3:46:81:38:db:30:78:52:29:e1: 59:1d:90:57:9a:90:4c:60:bf:28:92:71:77:17:0d: 19:ff:15:d0:b9:b5:00:18:de:97:82:db:36:f3:88: 4b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D4:BC:3A:0A:84:FC:96:A8:12:9E:1C:DA:FB:22:6B:3C:23:13:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/b061a6cf-f905-3059-9f3e-defea0da08cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5220::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:1e:3b:bb:d9:5a:b9:b2:75:3a:42:84:b2:88:94:0f:88:22: a7:9f:f7:b3:84:37:3d:4b:e4:64:35:c5:ba:e8:4c:3d:4d:99: f2:2f:7a:76:f0:a2:83:8e:30:94:5f:6d:12:5a:93:ae:1b:d3: 9a:05:9d:a9:cc:52:43:b9:dd:4d:de:c3:da:8d:04:cc:65:79: c6:16:1e:8d:1a:2c:bc:20:2b:4b:19:5d:f3:41:57:c3:b8:e6: 5d:92:a8:b4:00:49:94:8d:ae:9b:ad:75:ce:d4:87:b4:31:0b: e0:bf:89:bf:4f:03:a2:21:36:cf:bf:ae:fc:d8:f9:71:49:37: 86:c9:37:c0:a2:3e:0e:d5:45:45:77:3f:f3:e9:28:38:6b:f5: 76:0f:a7:0d:eb:82:7e:9c:f2:c8:6a:c1:52:28:6b:33:3e:72: a6:0e:d1:7f:69:14:62:9e:c1:06:f8:0b:52:66:91:33:34:30: b5:3b:22:f0:f7:22:6c:19:51:55:4d:83:49:6a:b6:82:80:c4: ee:c0:b5:89:3a:37:09:9e:75:de:8a:75:11:4e:20:d6:86:13: f1:d1:b5:bb:05:b9:7d:f0:28:e3:85:68:b7:c3:8f:b5:1b:fd: 40:b1:4f:bc:88:e6:1b:11:b2:1d:a1:c8:18:c3:53:79:9f:2d: e6:11:ea:a1 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+l1Hdvh7x3ZjKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODdjYjc2OGQtMzk3OC00ZTRlLThiZTgtMDBlNjFjODU1NDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVwN9GjGKbiQNWoK3VUajgtF+Hxfxu0nbxWk Ir4xIatPevrICFdqkDhsGH1SVIw1UzyhaFt6JDFE6JOlT5xRNqWcS6it9XEcPyEt dD/mn99vrB9X/vDKCHsLmFOETLHK/Qh5XAIYPoKlI1Jcc6nlI75D+u3f/ycg59Hm 2sbNTQbhg9dyLNmYlw3GeAz4LgthxAFT+WmxALIUEDjCexUa4BG0dr7Z+LuVVwgj YrdsYCmfLpp5+bKKRLyiFBW1pfNAS1QxL+YrHlk2J0HMetuG7yxXLVm9EKNGgTjb MHhSKeFZHZBXmpBMYL8oknF3Fw0Z/xXQubUAGN6Xgts284hLwQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOfUvDoKhPyWqBKeHNr7Ims8IxMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYjA2MWE2Y2YtZjkwNS0z MDU5LTlmM2UtZGVmZWEwZGEwOGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFIg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAUeO7vZWrmydTpChLKIlA+IIqef97OENz1L5GQ1xbroTD1NmfIv enbwooOOMJRfbRJak64b05oFnanMUkO53U3ew9qNBMxlecYWHo0aLLwgK0sZXfNB V8O45l2SqLQASZSNrputdc7Uh7QxC+C/ib9PA6IhNs+/rvzY+XFJN4bJN8CiPg7V RUV3P/PpKDhr9XYPpw3rgn6c8shqwVIoazM+cqYO0X9pFGKewQb4C1JmkTM0MLU7 IvD3ImwZUVVNg0lqtoKAxO7AtYk6Nwmedd6KdRFOINaGE/HRtbsFuX3wKOOFaLfD j7Ub/UCxT7yI5hsRsh2hyBjDU3mfLeYR6qE= -----END CERTIFICATE-----Generated at Sun Nov 15 10:12:27 2026 by rpki-client