$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa File: 436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa (raw, json) Hash identifier: b3j0UMueBqfdnb3l9duTmSbnsF5/01Bo3oDZhBMn9BA= Subject key identifier: 02:F4:0E:BA:A7:34:DB:A6:5C:8B:E8:51:2B:C4:5C:2C:22:B0:EB:92 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBDA9934EC8F652540C680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4c30::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:da:99:34:ec:8f:65:25:40:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=69af872d-2146-4329-9ab2-534cf0d04754 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:7b:67:1a:73:19:45:5c:7c:ae:04:87:9f: 51:96:49:f3:5f:78:68:01:39:81:a8:95:24:00:08: 5d:90:60:40:e5:9a:f3:8c:bc:82:dc:3f:60:91:31: 37:a9:3a:77:73:7e:52:1d:7f:e3:25:c7:1b:d4:c7: eb:e6:f1:91:c9:49:70:c4:af:b6:b1:f5:c6:56:f5: af:ae:18:82:37:a4:df:37:d2:1b:72:ab:a9:32:f3: c3:26:4b:b6:3b:76:b9:10:00:3e:6c:32:79:6a:fa: e6:e3:e6:e3:34:83:52:35:18:71:6f:96:62:1a:3c: 2c:c6:ec:d7:5c:02:c4:9d:ca:8b:5a:eb:19:0e:18: 9a:79:0c:80:1c:e4:3d:3f:ab:19:02:cb:95:56:43: be:d5:7c:e2:64:01:78:6f:56:05:3e:9d:31:57:69: b0:72:78:e7:94:01:a9:4c:2d:c4:c4:94:f4:b7:60: 4a:3e:23:90:c2:da:d0:f2:e8:83:74:b0:7e:89:45: 46:dc:fa:5b:b1:95:38:c6:c0:02:65:77:07:6e:0b: 9b:d3:b8:1b:a6:fe:25:3b:f6:21:a9:0f:58:67:31: eb:ad:e0:67:c3:c6:a4:20:61:81:fe:07:87:b0:a9: 7d:e8:89:05:51:ef:c4:47:b6:46:57:37:dd:3b:f2: 02:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F4:0E:BA:A7:34:DB:A6:5C:8B:E8:51:2B:C4:5C:2C:22:B0:EB:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/436fac1a-c0fb-3578-8098-e3b9d9f653f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4c30::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:5c:e1:38:36:6c:95:71:51:43:15:3d:3e:20:11:07:25:c3: fa:e6:e4:14:bf:fd:34:09:f1:1c:1e:d2:7d:ac:55:0c:24:30: 44:6b:fe:4b:a4:2f:14:f3:df:48:4c:d6:a4:87:95:f2:71:0c: 8b:1b:66:63:c4:6d:78:86:b0:e0:30:98:38:6b:64:f3:6f:03: f7:3f:1b:c6:d0:16:5a:be:cc:24:f0:b3:ba:13:68:c5:64:6f: d1:a8:0a:dd:a7:6c:23:9d:f4:58:5a:56:eb:eb:4e:a9:85:84: 1c:0c:72:31:fb:bf:1c:94:a3:93:f5:1f:e6:0b:85:86:13:e5: 53:e4:63:b9:1d:79:9b:43:5d:21:b3:82:92:98:db:42:97:75: 5e:f3:43:f8:23:98:25:30:eb:58:c1:ee:70:54:24:2a:68:f0: a7:ad:a8:d8:46:81:bb:34:2b:67:3f:30:31:80:3b:00:5f:64: 81:f3:12:ef:43:56:4c:6e:f9:c4:14:63:a7:d4:fe:ca:e1:a3: 5a:5f:72:60:ec:63:29:d1:4a:b8:4b:4c:38:6b:b4:ae:d2:7b: d2:e2:7b:25:9b:29:55:97:c7:1a:b1:ca:9e:bf:0b:19:bf:18: 01:8d:dc:29:e6:06:6c:a5:45:66:91:ce:13:4f:80:ed:f8:ac: 7a:79:35:90 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9qZNOyPZSVAxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjlhZjg3MmQtMjE0Ni00MzI5LTlhYjItNTM0Y2YwZDA0NzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzt7ZxpzGUVcfK4Eh59RlknzX3hoATmBqJUk AAhdkGBA5ZrzjLyC3D9gkTE3qTp3c35SHX/jJccb1Mfr5vGRyUlwxK+2sfXGVvWv rhiCN6TfN9IbcqupMvPDJku2O3a5EAA+bDJ5avrm4+bjNINSNRhxb5ZiGjwsxuzX XALEncqLWusZDhiaeQyAHOQ9P6sZAsuVVkO+1XziZAF4b1YFPp0xV2mwcnjnlAGp TC3ExJT0t2BKPiOQwtrQ8uiDdLB+iUVG3PpbsZU4xsACZXcHbgub07gbpv4lO/Yh qQ9YZzHrreBnw8akIGGB/geHsKl96IkFUe/ER7ZGVzfdO/IC0QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFAL0DrqnNNumXIvoUSvEXCwisOuSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNDM2ZmFjMWEtYzBmYi0z NTc4LTgwOTgtZTNiOWQ5ZjY1M2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEww MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGxc4Tg2bJVxUUMVPT4gEQclw/rm5BS//TQJ8Rwe0n2sVQwkMERr /kukLxTz30hM1qSHlfJxDIsbZmPEbXiGsOAwmDhrZPNvA/c/G8bQFlq+zCTws7oT aMVkb9GoCt2nbCOd9FhaVuvrTqmFhBwMcjH7vxyUo5P1H+YLhYYT5VPkY7kdeZtD XSGzgpKY20KXdV7zQ/gjmCUw61jB7nBUJCpo8KetqNhGgbs0K2c/MDGAOwBfZIHz Eu9DVkxu+cQUY6fU/srho1pfcmDsYynRSrhLTDhrtK7Se9LieyWbKVWXxxqxyp6/ Cxm/GAGN3CnmBmylRWaRzhNPgO34rHp5NZA= -----END CERTIFICATE-----Generated at Sun Nov 15 18:36:07 2026 by rpki-client