$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0fd4bca5-c9b9-3d7e-ac88-7df942f0a9e0.roa File: 0fd4bca5-c9b9-3d7e-ac88-7df942f0a9e0.roa (raw, json) Hash identifier: ocxQ1tQpI9bhHsHxv4g4mgW4SEbkb1sYJvy8PT1yE/M= Subject key identifier: 5F:62:DC:A8:FB:34:07:8D:45:3E:20:EA:47:63:90:54:18:C4:3D:A2 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBEED23F369FFFC98DE708 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0fd4bca5-c9b9-3d7e-ac88-7df942f0a9e0.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:54b0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:ee:d2:3f:36:9f:ff:c9:8d:e7:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=728875f0-0d10-42e8-b4e9-acaf7646980a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:2e:d8:b6:7c:b9:17:20:f4:8c:72:5d:bb:62: 29:37:74:8d:87:89:26:ce:62:71:23:9a:b2:97:7b: b1:c4:42:49:d6:c0:c3:50:c1:35:7b:5e:ba:c1:40: 4f:94:4d:5c:82:11:44:5b:5b:4e:fa:d0:2c:bf:a0: 09:a3:17:aa:96:92:03:73:c9:e1:70:da:64:81:69: 5d:05:a0:35:31:01:c7:0b:ae:9d:93:aa:92:fc:5d: 5d:04:8a:92:a3:af:1d:d2:8a:41:f9:91:af:c5:28: bb:dd:4f:81:50:c0:e9:3e:52:9f:c6:db:45:8e:56: 2e:e3:f7:4f:61:90:04:9e:00:b0:74:bc:8c:75:58: 8f:e6:7c:93:0e:05:73:83:ca:1a:d1:87:1c:cf:88: 36:65:d5:9b:88:f4:79:9e:8f:aa:16:d1:ef:65:7e: a7:88:31:a3:ce:21:7b:e5:f2:eb:b0:c5:a8:c9:a2: 33:0f:4a:84:27:8e:bd:92:49:90:e0:af:9e:22:95: 52:d5:54:ff:ed:b9:4b:92:e5:46:11:27:bb:47:bb: 84:db:e4:11:3a:42:92:c1:0d:5f:9e:00:12:36:5d: 9e:ac:03:47:77:cf:9f:6c:12:6f:8d:3d:38:bb:a0: 20:f4:eb:07:2e:02:c3:7e:1a:bb:c3:3d:72:2b:05: c9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:62:DC:A8:FB:34:07:8D:45:3E:20:EA:47:63:90:54:18:C4:3D:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/0fd4bca5-c9b9-3d7e-ac88-7df942f0a9e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:54b0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8a:cd:e7:20:9d:59:f3:61:aa:5d:59:b7:11:df:d5:5d:d0: 48:e2:9d:c9:dd:d1:c0:41:03:35:90:75:b4:ec:ae:4a:de:79: 18:25:08:ee:ab:5f:d6:aa:ea:29:87:b6:fe:ce:28:cf:a0:73: 9c:15:1b:15:58:70:06:2b:1e:f0:b8:bd:eb:09:82:af:7d:d1: 04:aa:00:ac:10:db:1d:15:8c:0a:46:5f:69:f1:ba:69:9b:af: 91:e7:cd:1e:a7:ae:2d:aa:9e:14:4a:d3:b4:f5:9a:2a:0b:62: 05:12:e1:61:69:f7:e3:f2:22:d7:20:9b:0a:fd:42:79:4a:0a: 25:cd:7f:36:7e:b3:96:93:18:dd:30:e6:b1:d9:46:19:ee:a1: be:03:4d:b0:81:7d:07:97:e9:e0:7e:3a:7c:20:02:dd:04:0e: 58:4a:30:95:99:89:36:06:78:d8:c2:ea:9a:1c:9e:9c:3f:41: 03:04:ea:ed:1a:e8:a0:d8:40:04:39:e3:f2:51:50:cd:1c:5c: 1d:c5:dc:4b:1c:6f:83:3c:43:c8:ed:47:34:a5:2d:63:55:aa: 11:2e:23:32:5e:ab:bc:df:bd:e0:46:9f:8e:0f:c3:ba:08:fe: 10:3c:c4:58:bc:cd:b1:37:d1:0c:b9:49:75:40:dc:21:f1:d0: ad:4c:b0:11 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+7SPzaf/8mN5wgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NzI4ODc1ZjAtMGQxMC00MmU4LWI0ZTktYWNhZjc2NDY5ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy7Ytny5FyD0jHJdu2IpN3SNh4kmzmJxI5qy l3uxxEJJ1sDDUME1e166wUBPlE1cghFEW1tO+tAsv6AJoxeqlpIDc8nhcNpkgWld BaA1MQHHC66dk6qS/F1dBIqSo68d0opB+ZGvxSi73U+BUMDpPlKfxttFjlYu4/dP YZAEngCwdLyMdViP5nyTDgVzg8oa0Yccz4g2ZdWbiPR5no+qFtHvZX6niDGjziF7 5fLrsMWoyaIzD0qEJ469kkmQ4K+eIpVS1VT/7blLkuVGESe7R7uE2+QROkKSwQ1f ngASNl2erANHd8+fbBJvjT04u6Ag9OsHLgLDfhq7wz1yKwXJzwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFF9i3Kj7NAeNRT4g6kdjkFQYxD2iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMGZkNGJjYTUtYzliOS0z ZDdlLWFjODgtN2RmOTQyZjBhOWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFSw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFeKzecgnVnzYapdWbcR39Vd0Ejincnd0cBBAzWQdbTsrkreeRgl CO6rX9aq6imHtv7OKM+gc5wVGxVYcAYrHvC4vesJgq990QSqAKwQ2x0VjApGX2nx ummbr5HnzR6nri2qnhRK07T1mioLYgUS4WFp9+PyItcgmwr9QnlKCiXNfzZ+s5aT GN0w5rHZRhnuob4DTbCBfQeX6eB+OnwgAt0EDlhKMJWZiTYGeNjC6pocnpw/QQME 6u0a6KDYQAQ54/JRUM0cXB3F3Escb4M8Q8jtRzSlLWNVqhEuIzJeq7zfveBGn44P w7oI/hA8xFi8zbE30Qy5SXVA3CHx0K1MsBE= -----END CERTIFICATE-----Generated at Sun Nov 15 13:02:32 2026 by rpki-client