$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa File: 23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa (raw, json) Hash identifier: Ob95pNA+XnPv7JWfx4bDAzANIdBkZvLMKUc3p+OVNtI= Subject key identifier: 6A:01:CE:5C:01:57:B4:49:B3:3C:A9:E3:8A:05:BB:BF:36:DF:25:09 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBDC96C37E1722F8BC00E0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4570::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:dc:96:c3:7e:17:22:f8:bc:00:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=13a6e33f-275e-4449-9551-ebd5f3aa90d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c4:af:d7:29:86:80:31:6d:99:9c:63:1e:80: 61:70:a5:84:8d:02:f1:89:11:cc:a6:ed:5d:fa:04: 18:b2:79:fc:13:c1:d5:96:39:ec:93:7d:7b:72:51: 26:dc:f5:08:6f:da:94:2d:a3:d3:69:30:04:70:0a: bf:ec:2e:d5:76:e8:1a:9c:7c:5f:a7:cb:15:3b:88: c3:f9:6a:5a:16:0b:18:3c:c5:55:d2:ac:df:bc:5c: 8e:e8:fd:9b:60:63:a6:32:70:91:e0:8c:1f:fa:44: bf:23:a8:45:b3:2d:a5:2a:92:b0:5d:74:7e:c5:23: 2c:30:29:0c:a7:74:6f:8d:85:42:6e:cd:a3:49:25: 14:40:e8:44:da:b1:e8:05:81:0a:aa:a6:5c:73:d9: 28:cf:79:aa:e9:e3:01:0e:5d:28:48:12:ad:2d:2b: 66:ac:21:03:92:8f:2b:aa:e2:09:37:94:d0:55:b7: ba:50:f9:ee:d1:ad:8f:f7:47:c8:42:ad:78:00:2e: af:9f:49:d4:bf:4b:04:54:71:82:70:39:40:78:66: 02:c4:4a:66:ec:60:40:b1:75:d9:30:8a:18:6a:94: 71:80:4a:f7:1e:c1:c8:05:d9:02:04:65:5f:07:f8: 03:1c:71:19:b9:b3:b0:81:5f:a6:a4:19:05:98:1c: 11:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:01:CE:5C:01:57:B4:49:B3:3C:A9:E3:8A:05:BB:BF:36:DF:25:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/23c48aa7-7b03-3dc8-8acc-71c1e073bb7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4570::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:1d:0d:43:96:30:e2:ab:1b:78:82:88:75:d4:9b:e0:61:f8: 41:01:f1:fb:e8:d5:d1:54:a7:e9:07:64:52:63:cd:bd:94:a9: 2f:38:bf:78:35:3e:63:f8:7b:d5:1c:5b:d2:05:53:c6:c6:f6: 10:51:84:5a:0c:e5:51:f4:5b:d0:d8:11:f4:b8:25:a8:2e:b1: b9:ab:ea:6f:63:3d:75:1f:fe:8e:ed:24:12:cb:b5:b9:37:f6: 0e:3b:11:cf:ca:73:3d:b9:da:78:3c:b7:95:94:52:3d:6f:b7: bd:a5:79:8d:96:85:93:db:3d:0d:54:ba:3f:73:9b:9a:de:01: 85:8c:4e:72:22:20:9e:3c:bd:50:dd:4c:d2:d1:77:28:06:39: db:55:a7:85:1d:02:51:08:6d:ae:28:4b:99:06:ff:61:30:af: 2f:a7:35:d4:ee:2d:a6:3c:00:24:71:df:47:fe:da:59:49:5f: 5a:5b:07:88:15:c1:3f:cf:7d:5a:c6:7b:ba:af:c8:91:53:23: 5f:28:50:1f:de:ad:9a:67:42:ff:44:a2:2e:29:3b:5f:98:2e: c2:c6:09:41:88:bb:ee:76:8a:3f:23:45:a8:4e:a0:7d:b8:b1: 53:0a:05:65:46:11:02:94:4b:93:29:95:30:17:b3:8f:2b:4f: 06:1d:65:a9 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9yWw34XIvi8AOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MTNhNmUzM2YtMjc1ZS00NDQ5LTk1NTEtZWJkNWYzYWE5MGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8Sv1ymGgDFtmZxjHoBhcKWEjQLxiRHMpu1d +gQYsnn8E8HVljnsk317clEm3PUIb9qULaPTaTAEcAq/7C7VduganHxfp8sVO4jD +WpaFgsYPMVV0qzfvFyO6P2bYGOmMnCR4Iwf+kS/I6hFsy2lKpKwXXR+xSMsMCkM p3RvjYVCbs2jSSUUQOhE2rHoBYEKqqZcc9koz3mq6eMBDl0oSBKtLStmrCEDko8r quIJN5TQVbe6UPnu0a2P90fIQq14AC6vn0nUv0sEVHGCcDlAeGYCxEpm7GBAsXXZ MIoYapRxgEr3HsHIBdkCBGVfB/gDHHEZubOwgV+mpBkFmBwRlQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGoBzlwBV7RJszyp44oFu7823yUJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjNjNDhhYTctN2IwMy0z ZGM4LThhY2MtNzFjMWUwNzNiYjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEVw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACEdDUOWMOKrG3iCiHXUm+Bh+EEB8fvo1dFUp+kHZFJjzb2UqS84 v3g1PmP4e9UcW9IFU8bG9hBRhFoM5VH0W9DYEfS4Jagusbmr6m9jPXUf/o7tJBLL tbk39g47Ec/Kcz252ng8t5WUUj1vt72leY2WhZPbPQ1Uuj9zm5reAYWMTnIiIJ48 vVDdTNLRdygGOdtVp4UdAlEIba4oS5kG/2Ewry+nNdTuLaY8ACRx30f+2llJX1pb B4gVwT/PfVrGe7qvyJFTI18oUB/erZpnQv9Eoi4pO1+YLsLGCUGIu+52ij8jRahO oH24sVMKBWVGEQKUS5MplTAXs48rTwYdZak= -----END CERTIFICATE-----Generated at Sun Nov 15 17:16:37 2026 by rpki-client