$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1f658df-5b1e-3735-b42a-188ef410e6e5.roa File: d1f658df-5b1e-3735-b42a-188ef410e6e5.roa (raw, json) Hash identifier: CfPss7f7l62hP8B5YzN2vbuIW+3aWJFTIUfaP0wVP6U= Subject key identifier: 2C:49:FA:FB:04:31:B2:8F:E9:3F:A4:70:67:19:A4:C1:65:40:47:51 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE6D8B8B805305B4751C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1f658df-5b1e-3735-b42a-188ef410e6e5.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:54d0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e6:d8:b8:b8:05:30:5b:47:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=09c48fc2-f853-4b20-9d88-60135bde9cf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:49:d5:3a:74:32:88:85:d2:9b:d5:7d:bf:17: 5c:dd:08:5b:7f:fc:dd:51:9b:58:e4:52:10:85:a0: 04:bc:f6:06:39:20:2c:be:0f:aa:b5:77:84:79:66: 52:85:ca:39:2e:5c:ea:a3:4f:bf:9b:cd:e0:1d:74: 80:9b:8a:d9:fb:d6:16:2b:6b:ee:9c:67:be:5c:20: 0b:56:0a:a2:cd:0e:25:ec:fc:8c:fe:39:6d:fd:9a: f9:4e:42:9c:36:59:02:e3:33:60:c2:d6:d2:82:8c: 4c:4a:8f:2f:66:37:aa:0f:eb:8e:ea:65:36:c1:fc: 11:93:c6:6c:b7:5e:fa:c9:5d:2c:cf:1a:01:62:da: 82:9b:95:72:66:ef:6f:15:8c:e9:f0:43:75:11:1c: 11:9f:5f:f5:6d:15:2b:74:5d:19:52:12:06:d0:6d: d4:22:a3:aa:1f:b0:15:4c:02:8c:bc:ac:ef:aa:72: 6e:84:19:43:00:58:1c:97:7c:83:85:c6:d0:5b:89: 0d:1c:0c:26:11:0e:2b:7d:74:f6:fc:0f:f5:14:3e: df:ca:3f:95:60:ca:bb:be:6c:2e:7b:6b:89:f7:84: 22:36:77:d6:15:4c:75:6f:32:b7:75:27:21:36:57: 78:65:4d:e9:40:c3:a0:74:f4:89:39:44:07:7e:8f: ad:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:49:FA:FB:04:31:B2:8F:E9:3F:A4:70:67:19:A4:C1:65:40:47:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d1f658df-5b1e-3735-b42a-188ef410e6e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:54d0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:61:43:1c:e2:0a:a6:c4:89:ea:d9:ee:a5:12:32:25:04:2e: 17:f6:26:96:1b:ab:e3:df:3d:93:34:3f:ba:6d:2c:09:76:13: b9:4b:24:7a:89:a3:75:2b:67:da:16:b1:22:f9:66:d3:88:b3: 20:1a:fa:c5:79:29:4a:67:1f:2f:90:8c:0f:3a:e8:e7:d8:4d: 36:7b:55:32:b6:80:78:53:1c:0e:eb:d6:59:a4:3b:93:f3:fd: 68:61:f4:e8:9e:9f:77:8a:5f:74:82:16:85:88:b5:c3:9f:5b: db:05:7b:1c:89:98:aa:f1:9b:df:4f:79:10:11:de:44:6d:07: 5e:cc:07:2b:46:1d:f5:48:e1:58:2b:96:3e:8b:1c:2f:1d:5c: 9a:1f:72:6e:26:c2:4a:f0:72:9a:7f:e4:b3:5d:fc:3f:19:84: e4:1f:86:94:fb:32:9c:7d:f7:58:c3:3f:ce:8a:f6:fe:a9:0d: 57:9b:6a:b4:0b:2d:b5:bc:1b:6c:14:13:13:41:19:01:4c:41: e1:41:c4:8b:72:fc:f0:ec:76:35:a7:7d:69:23:7a:8e:76:80: 22:4a:6e:91:cf:7a:5f:e5:e4:09:ad:e2:c2:f0:f5:52:8c:a9: fd:5d:ce:32:8e:13:8c:93:cc:81:3f:98:33:75:5b:60:18:f3: e7:19:3e:4b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+bYuLgFMFtHUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MDljNDhmYzItZjg1My00YjIwLTlkODgtNjAxMzViZGU5Y2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUnVOnQyiIXSm9V9vxdc3Qhbf/zdUZtY5FIQ haAEvPYGOSAsvg+qtXeEeWZShco5Llzqo0+/m83gHXSAm4rZ+9YWK2vunGe+XCAL VgqizQ4l7PyM/jlt/Zr5TkKcNlkC4zNgwtbSgoxMSo8vZjeqD+uO6mU2wfwRk8Zs t176yV0szxoBYtqCm5VyZu9vFYzp8EN1ERwRn1/1bRUrdF0ZUhIG0G3UIqOqH7AV TAKMvKzvqnJuhBlDAFgcl3yDhcbQW4kNHAwmEQ4rfXT2/A/1FD7fyj+VYMq7vmwu e2uJ94QiNnfWFUx1bzK3dSchNld4ZU3pQMOgdPSJOUQHfo+tSwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCxJ+vsEMbKP6T+kcGcZpMFlQEdRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDFmNjU4ZGYtNWIxZS0z NzM1LWI0MmEtMTg4ZWY0MTBlNmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFTQ MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxhQxziCqbEierZ7qUSMiUELhf2JpYbq+PfPZM0P7ptLAl2E7lL JHqJo3UrZ9oWsSL5ZtOIsyAa+sV5KUpnHy+QjA866OfYTTZ7VTK2gHhTHA7r1lmk O5Pz/Whh9Oien3eKX3SCFoWItcOfW9sFexyJmKrxm99PeRAR3kRtB17MBytGHfVI 4Vgrlj6LHC8dXJofcm4mwkrwcpp/5LNd/D8ZhOQfhpT7Mpx991jDP86K9v6pDVeb arQLLbW8G2wUExNBGQFMQeFBxIty/PDsdjWnfWkjeo52gCJKbpHPel/l5Amt4sLw 9VKMqf1dzjKOE4yTzIE/mDN1W2AY8+cZPks= -----END CERTIFICATE-----Generated at Sun Nov 15 15:28:25 2026 by rpki-client