$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd115c1e-0839-3f84-abf2-4e1c3e13b29e.roa File: cd115c1e-0839-3f84-abf2-4e1c3e13b29e.roa (raw, json) Hash identifier: +sNGms+LE57YD9prqTwSX+jfFIlO6z8XuJu+3KS55zo= Subject key identifier: 16:06:C9:13:1D:81:E0:49:EB:85:E6:DC:14:43:30:21:33:C1:57:AC Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBF1400B09FF9791270E60 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd115c1e-0839-3f84-abf2-4e1c3e13b29e.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4540::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:f1:40:0b:09:ff:97:91:27:0e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=64917c5a-7c42-4858-b91a-29ed85f18150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:67:10:2f:e8:5f:f9:01:2b:f1:3b:9d:fc:14: 1a:87:02:7f:e9:34:df:82:09:72:6a:78:94:d4:4a: ba:e1:ac:14:20:7e:14:89:45:96:6f:0c:b5:75:13: b9:82:e5:a2:39:0c:84:c6:e2:fb:57:0d:0e:09:4f: 13:f6:4e:8c:2a:e8:c7:8e:04:fc:2c:16:d7:b4:a9: 51:12:da:e3:ed:5d:93:72:3a:c0:c2:0c:55:d3:4a: 07:dc:9d:67:64:1b:31:12:ef:06:69:a7:bf:d0:f1: e6:e7:32:69:70:a2:18:8d:dc:01:29:5c:f7:77:17: 54:0f:57:32:af:86:c0:d6:88:41:8a:60:9c:1a:1e: f7:64:a7:25:2e:17:4c:e8:45:d4:9a:ba:20:aa:c2: 1d:d7:10:8b:b4:11:5f:53:0c:31:c1:7a:7f:22:7f: 28:97:03:2b:8f:f1:7b:66:69:86:9e:7b:d6:26:fa: 5c:16:78:01:91:3e:10:3e:84:05:63:86:da:9f:9d: 87:71:b3:cd:34:d8:c2:44:93:f2:3a:2d:4d:07:ff: 7e:5f:98:aa:6e:69:c0:ad:01:d6:64:9b:4b:de:bd: 3c:3a:57:18:0f:47:ed:96:c7:8d:66:2c:df:47:60: 74:63:4b:5e:5c:9a:37:28:ea:ac:61:a6:56:e6:60: 5f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:06:C9:13:1D:81:E0:49:EB:85:E6:DC:14:43:30:21:33:C1:57:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/cd115c1e-0839-3f84-abf2-4e1c3e13b29e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4540::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:1a:ed:9c:ab:44:64:48:8c:a7:04:2f:46:cd:10:1c:6e:64: b2:a9:6f:cb:77:bc:c1:af:a2:24:bc:c0:a6:b7:06:02:1b:2f: 3f:ed:bc:7e:7c:a5:2f:ce:bf:f4:97:35:f2:3c:16:03:a8:95: c8:4f:ce:91:67:c4:20:09:63:08:b3:ad:e8:56:df:94:f3:cc: f7:5c:aa:48:59:54:56:5a:fb:3e:a4:4f:28:b2:1c:88:0b:c7: d4:12:c5:7c:dc:b2:3d:53:5b:d4:54:ef:b4:04:43:10:7a:14: 60:fe:d8:d4:59:00:c9:93:fc:9e:14:84:2e:3c:7c:ef:c8:0f: 2b:c5:69:36:b4:5f:9e:fd:8e:2a:a2:d3:54:a4:04:3b:b0:ee: c4:cf:ce:d3:44:82:d1:e9:e1:20:a6:72:a5:6a:37:eb:67:c4: 7b:92:f5:23:8a:09:68:36:37:06:64:ba:43:7d:a2:79:20:02: 23:10:0e:f7:71:35:f8:41:b0:97:e0:59:25:90:26:c0:d3:19: 94:16:9a:42:5a:4f:3c:c0:40:e0:22:8d:15:86:86:1a:86:ad: c2:f1:87:cd:d0:00:6c:9e:1f:8d:60:f8:74:15:10:05:db:34: 26:e9:b5:9f:89:3b:26:8d:50:06:d7:7a:da:09:d6:f1:57:96: 3e:f6:47:9b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy/FACwn/l5EnDmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjQ5MTdjNWEtN2M0Mi00ODU4LWI5MWEtMjllZDg1ZjE4MTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WcQL+hf+QEr8Tud/BQahwJ/6TTfgglyaniU 1Eq64awUIH4UiUWWbwy1dRO5guWiOQyExuL7Vw0OCU8T9k6MKujHjgT8LBbXtKlR Etrj7V2TcjrAwgxV00oH3J1nZBsxEu8Gaae/0PHm5zJpcKIYjdwBKVz3dxdUD1cy r4bA1ohBimCcGh73ZKclLhdM6EXUmrogqsId1xCLtBFfUwwxwXp/In8olwMrj/F7 ZmmGnnvWJvpcFngBkT4QPoQFY4ban52HcbPNNNjCRJPyOi1NB/9+X5iqbmnArQHW ZJtL3r08OlcYD0ftlseNZizfR2B0Y0teXJo3KOqsYaZW5mBfHQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBYGyRMdgeBJ64Xm3BRDMCEzwVesMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2QxMTVjMWUtMDgzOS0z Zjg0LWFiZjItNGUxYzNlMTNiMjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEVA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQa7ZyrRGRIjKcEL0bNEBxuZLKpb8t3vMGvoiS8wKa3BgIbLz/t vH58pS/Ov/SXNfI8FgOolchPzpFnxCAJYwizrehW35TzzPdcqkhZVFZa+z6kTyiy HIgLx9QSxXzcsj1TW9RU77QEQxB6FGD+2NRZAMmT/J4UhC48fO/IDyvFaTa0X579 jiqi01SkBDuw7sTPztNEgtHp4SCmcqVqN+tnxHuS9SOKCWg2NwZkukN9onkgAiMQ DvdxNfhBsJfgWSWQJsDTGZQWmkJaTzzAQOAijRWGhhqGrcLxh83QAGyeH41g+HQV EAXbNCbptZ+JOyaNUAbXetoJ1vFXlj72R5s= -----END CERTIFICATE-----Generated at Tue Nov 10 22:53:23 2026 by rpki-client