$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cff1ed5-86c0-3021-be71-509ce1c6bf16.roa File: 3cff1ed5-86c0-3021-be71-509ce1c6bf16.roa (raw, json) Hash identifier: kf3xyOe/+Z5ymQhV50BWxAcdtOJprwpPqA7hi3kCt3g= Subject key identifier: 81:67:6B:F6:C6:1F:8C:45:7F:AC:47:58:72:75:70:F0:40:EB:D0:C0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11ACD418BFF172E92F18800 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cff1ed5-86c0-3021-be71-509ce1c6bf16.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:5880::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:cd:41:8b:ff:17:2e:92:f1:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=050ba672-c64d-443e-aaae-9104d22d1d15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:59:8b:9f:fe:c0:bd:f8:9e:a3:f5:4e:65: e5:5e:8e:76:d0:9a:56:10:8b:d7:6d:60:c8:d6:d0: e9:00:96:a9:d8:16:47:07:8b:5d:d2:a1:a4:3a:02: 8b:95:69:b9:d6:5c:8b:d3:51:e0:e3:58:7d:c8:6e: d4:6f:42:93:8e:34:31:13:41:c5:de:a9:96:70:41: 3f:46:02:f5:b5:34:5d:f0:f1:cc:e5:ed:4c:72:86: 54:d6:9b:5e:0a:56:db:92:07:21:37:d8:5e:54:fa: b5:c0:2e:35:9a:23:d5:82:46:7f:d8:d3:46:60:23: 4e:57:2a:ba:d9:14:3e:3c:ea:f0:66:ed:01:9e:65: ed:c2:c9:50:e7:45:46:d2:7c:fb:3a:dc:3a:c3:ea: 5f:aa:74:8d:4a:93:f5:6b:97:ee:89:a2:90:73:14: 49:2b:5a:93:6d:ed:b0:ab:50:c3:b7:5a:87:23:26: 13:27:9b:8e:5b:df:1e:19:11:79:80:19:07:f1:1d: 08:00:fd:08:b5:7f:05:53:ee:e1:62:a3:d2:97:cd: b9:b1:0c:63:b8:50:e9:8c:8a:76:01:ba:bf:fe:93: e5:e9:f4:0c:9c:f0:21:a7:e4:9c:9f:3a:d3:e1:c5: 63:91:a2:e2:f3:70:51:43:d4:ec:19:ba:03:02:e1: c0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:67:6B:F6:C6:1F:8C:45:7F:AC:47:58:72:75:70:F0:40:EB:D0:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/3cff1ed5-86c0-3021-be71-509ce1c6bf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5880::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:f1:c2:2e:67:95:59:d1:91:50:ea:a1:8a:d6:85:f6:d8:a7: b0:0c:a1:49:de:ce:e0:a0:12:2b:ba:53:23:22:9b:37:ee:92: c8:5c:8d:e1:32:0b:0e:be:af:85:96:8a:44:3d:f4:6a:5f:4b: 6c:07:2a:19:3e:9c:00:2e:60:e3:75:ed:8a:f9:d5:38:23:1c: 63:01:e2:02:a1:75:66:62:5d:9b:66:28:03:4d:59:99:f6:52: 5d:5e:46:d2:57:fc:d0:dd:b0:05:74:aa:f8:43:0d:8c:89:03: a8:16:d0:a4:e9:58:e2:53:f0:73:c5:47:fb:07:7b:2b:a7:8e: 9f:08:10:a2:c8:73:c8:a6:60:0f:7c:76:a5:ec:99:ef:9e:43: d6:87:06:40:92:b6:2a:49:e4:8e:53:9b:28:14:3b:24:a7:85: 57:82:7e:80:81:b2:1a:1d:dc:6b:a9:28:1c:d7:74:76:f9:d3: ec:ab:4b:ee:55:85:ab:cb:c4:d1:76:92:f4:81:0e:d8:21:61: f2:5c:86:71:70:b0:90:80:05:65:60:1e:e6:6a:67:bd:76:e6: 20:35:50:1c:00:4d:46:0d:e3:5f:d5:b7:04:b1:81:74:b5:73: ed:60:c9:b3:33:e0:4a:e0:ba:d3:6d:78:3b:a0:da:a4:06:d1: 26:03:d3:d5 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGs1Bi/8XLpLxiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MDUwYmE2NzItYzY0ZC00NDNlLWFhYWUtOTEwNGQyMmQxZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWpZi5/+wL34nqP1TmXlXo520JpWEIvXbWDI 1tDpAJap2BZHB4td0qGkOgKLlWm51lyL01Hg41h9yG7Ub0KTjjQxE0HF3qmWcEE/ RgL1tTRd8PHM5e1McoZU1pteClbbkgchN9heVPq1wC41miPVgkZ/2NNGYCNOVyq6 2RQ+POrwZu0BnmXtwslQ50VG0nz7Otw6w+pfqnSNSpP1a5fuiaKQcxRJK1qTbe2w q1DDt1qHIyYTJ5uOW98eGRF5gBkH8R0IAP0ItX8FU+7hYqPSl825sQxjuFDpjIp2 Abq//pPl6fQMnPAhp+ScnzrT4cVjkaLi83BRQ9TsGboDAuHAFQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIFna/bGH4xFf6xHWHJ1cPBA69DAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvM2NmZjFlZDUtODZjMC0z MDIxLWJlNzEtNTA5Y2UxYzZiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFiA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAFDxwi5nlVnRkVDqoYrWhfbYp7AMoUnezuCgEiu6UyMimzfukshc jeEyCw6+r4WWikQ99GpfS2wHKhk+nAAuYON17Yr51TgjHGMB4gKhdWZiXZtmKANN WZn2Ul1eRtJX/NDdsAV0qvhDDYyJA6gW0KTpWOJT8HPFR/sHeyunjp8IEKLIc8im YA98dqXsme+eQ9aHBkCStipJ5I5TmygUOySnhVeCfoCBshod3GupKBzXdHb50+yr S+5VhavLxNF2kvSBDtghYfJchnFwsJCABWVgHuZqZ7125iA1UBwATUYN41/VtwSx gXS1c+1gybMz4ErgutNteDug2qQG0SYD09U= -----END CERTIFICATE-----Generated at Wed May 13 05:23:24 2026 by rpki-client