$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa File: 25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa (raw, json) Hash identifier: aJadyeisn7IXo0tS426zOK3lymVp3gAJ3arBAWkZ7nM= Subject key identifier: 15:38:0D:2E:D3:82:41:12:61:14:BA:2A:AC:1D:18:A8:BD:95:01:52 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE8154F2F099AD4F48F00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4d60::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e8:15:4f:2f:09:9a:d4:f4:8f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=490f92e3-03a0-4d21-aeb8-1c29d348bbb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:24:ce:7d:5a:e5:41:da:84:e4:b2:d5:4c:4a: 2b:68:e1:dc:25:d0:8a:d5:64:f8:56:17:27:da:d3: 57:05:ae:57:b9:2b:66:46:80:a1:d6:63:65:60:a9: 20:44:05:f1:ec:89:42:01:2d:41:6f:31:ad:6b:0b: 46:7c:cf:39:82:6f:0a:2f:a9:db:42:99:2c:5f:21: 56:8f:03:f6:e7:03:27:a6:81:ec:6a:e5:53:38:46: 34:ea:c6:65:6c:dc:ca:0d:b7:ea:a3:a5:1e:52:fe: 67:58:c7:a3:67:a7:d6:3c:22:c0:ae:5e:db:d0:ec: 8f:26:fd:c3:6f:cf:2a:fb:df:a4:d3:96:f5:da:18: e2:04:9d:07:d7:bf:d1:4c:8c:c7:49:8a:64:70:d0: f5:f0:ff:a4:fd:6c:b2:17:3e:f2:bd:69:66:89:d0: 10:5b:ac:4f:d6:a1:c6:39:da:d1:11:c9:1c:3a:85: 0f:ef:89:8c:38:38:d2:1a:e9:52:f8:3a:bc:80:41: 6a:79:d3:0f:88:0f:4e:4b:30:c0:d4:8f:20:95:73: 91:60:48:a9:da:2d:2b:19:c3:4b:eb:68:05:f2:37: 95:3b:45:28:1f:ea:6d:41:3b:cb:b0:d6:4f:65:8e: 64:c2:8d:c3:1f:ea:61:f6:76:b1:38:8e:57:39:f2: 95:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:38:0D:2E:D3:82:41:12:61:14:BA:2A:AC:1D:18:A8:BD:95:01:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/25e51a87-cd99-3d4f-975e-9fc43a2d0787.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4d60::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:0f:1f:b6:fe:2d:3e:ef:51:d6:58:be:ce:6e:30:ad:95:fe: c9:e2:f1:93:b0:90:7f:85:e1:ba:cd:73:b2:39:37:bf:0c:37: 0e:28:53:3f:53:94:0e:48:25:6a:70:f3:a4:bf:f5:51:b5:3c: 57:5b:dc:28:f8:a9:b9:cb:a4:75:67:be:92:b6:46:b7:64:06: 9d:ff:fa:17:dc:fa:eb:1c:d8:e0:b7:38:50:d3:cd:dc:f8:fa: 1c:25:d5:95:03:ff:92:90:d7:91:1a:9e:8a:fc:72:7d:89:e2: 03:40:8c:af:32:89:9a:7d:37:d1:91:e6:ff:5e:bb:78:bf:75: b4:55:30:f9:8b:58:f3:2d:d9:43:de:cb:12:c4:d5:cb:b0:97: e3:6e:fa:f5:c3:88:7a:2b:3e:d3:49:24:70:c1:a9:ac:d5:f3: 8a:53:f9:04:6c:ca:04:69:6a:bc:0b:93:5d:c6:84:9b:09:ec: bb:b5:9a:d8:c4:c8:78:a2:8c:fe:87:36:1e:e7:91:0d:7f:b6: a6:fe:52:a5:ad:04:23:5b:7b:d9:fc:06:f3:4a:1c:66:f7:55: 7e:2f:2b:c9:ca:2d:7a:30:29:be:68:54:96:6f:2f:38:e1:0d: 0f:7b:ee:34:ba:ee:8b:e8:b4:75:f9:ea:c2:a0:39:fd:e6:e6: af:e9:cc:f7 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+gVTy8JmtT0jwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDkwZjkyZTMtMDNhMC00ZDIxLWFlYjgtMWMyOWQzNDhiYmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCTOfVrlQdqE5LLVTEoraOHcJdCK1WT4Vhcn 2tNXBa5XuStmRoCh1mNlYKkgRAXx7IlCAS1BbzGtawtGfM85gm8KL6nbQpksXyFW jwP25wMnpoHsauVTOEY06sZlbNzKDbfqo6UeUv5nWMejZ6fWPCLArl7b0OyPJv3D b88q+9+k05b12hjiBJ0H17/RTIzHSYpkcND18P+k/WyyFz7yvWlmidAQW6xP1qHG OdrREckcOoUP74mMODjSGulS+Dq8gEFqedMPiA9OSzDA1I8glXORYEip2i0rGcNL 62gF8jeVO0UoH+ptQTvLsNZPZY5kwo3DH+ph9naxOI5XOfKVeQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFBU4DS7TgkESYRS6KqwdGKi9lQFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvMjVlNTFhODctY2Q5OS0z ZDRmLTk3NWUtOWZjNDNhMmQwNzg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQE1g MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAIQPH7b+LT7vUdZYvs5uMK2V/sni8ZOwkH+F4brNc7I5N78MNw4o Uz9TlA5IJWpw86S/9VG1PFdb3Cj4qbnLpHVnvpK2RrdkBp3/+hfc+usc2OC3OFDT zdz4+hwl1ZUD/5KQ15Eanor8cn2J4gNAjK8yiZp9N9GR5v9eu3i/dbRVMPmLWPMt 2UPeyxLE1cuwl+Nu+vXDiHorPtNJJHDBqazV84pT+QRsygRparwLk13GhJsJ7Lu1 mtjEyHiijP6HNh7nkQ1/tqb+UqWtBCNbe9n8BvNKHGb3VX4vK8nKLXowKb5oVJZv LzjhDQ977jS67ovotHX56sKgOf3m5q/pzPc= -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:31 2026 by rpki-client