$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa File: 507e4b5a-6933-3737-b5ad-a08690070f72.roa (raw, json) Hash identifier: OZDh5YalX027Z6O33JnV8ayvD84dCp7vJuOgm6u/9KU= Subject key identifier: 67:5E:AC:4B:E0:A9:C9:9B:92:8F:0A:92:C1:A0:58:38:4D:99:DB:86 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11AD6A5C0A413B939DFB7C0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:4430::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:d6:a5:c0:a4:13:b9:39:df:b7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=3e7556ea-aef2-44d4-9087-b0852a8d1277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:7f:88:10:c1:09:c8:14:6c:26:2e:38:fe:bd: 4f:ec:e1:cb:64:be:ae:ac:4d:6b:c7:ed:c7:87:4f: 1a:b5:84:4d:b5:c5:91:8e:d9:27:45:c4:2c:8a:4e: d4:1f:99:e5:7b:ed:b0:a3:53:c1:71:72:f6:7a:42: 91:0c:3f:99:93:9d:97:70:a4:85:01:b8:a9:42:41: 1e:c8:5c:14:90:de:dd:9c:d2:f2:73:17:8b:a3:20: d6:fe:48:d4:3c:32:72:a1:ff:58:46:0f:dc:1f:c8: 8a:c2:08:00:65:c1:22:f9:a6:05:09:39:b1:93:89: fe:90:21:13:62:bb:73:28:f3:5a:6e:c5:8d:08:12: cf:00:c4:24:ac:b9:2b:5f:11:6d:2c:f8:55:d1:78: e5:1b:a1:db:3b:10:c7:fc:8f:a3:7a:ac:b5:49:a7: da:a1:ca:ad:25:42:01:8a:3f:58:f1:75:58:af:57: af:33:de:05:a4:48:60:80:07:34:d4:69:1f:d1:2e: 77:8f:1d:c4:6c:fd:7b:35:ee:57:25:f3:67:0c:55: 73:4a:84:03:6e:3e:35:9d:41:68:c3:19:cb:f6:d8: 13:cf:43:55:d3:36:9d:62:af:09:a1:4e:43:15:01: 4e:40:7b:60:2a:4f:5a:e9:ef:31:2e:f2:5f:2e:3a: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:5E:AC:4B:E0:A9:C9:9B:92:8F:0A:92:C1:A0:58:38:4D:99:DB:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/507e4b5a-6933-3737-b5ad-a08690070f72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4430::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:73:bb:8d:60:d5:dc:29:5d:cc:e9:9f:04:75:61:d4:d6:43: 9d:ab:c8:2d:27:47:b6:65:13:3b:9e:f2:c9:4f:56:02:88:dd: 8e:22:be:4d:81:a8:cd:7d:27:6d:f7:84:53:93:25:e5:b8:60: 17:1f:05:e2:e4:c1:11:e2:a6:c4:03:91:aa:86:02:03:e4:02: dd:f3:96:c2:49:6a:e1:c7:e3:5b:24:e7:53:ea:9d:1f:2d:91: dd:e3:d0:6c:87:c4:52:4b:ca:d9:a9:ab:2c:86:76:a1:01:e8: 00:ee:56:6c:56:e7:dc:fa:29:22:e6:61:54:53:a9:19:ad:3d: 57:ef:6e:fb:d3:77:db:0e:08:10:37:93:12:c5:5c:70:12:a0: 0a:96:02:5f:fd:e2:a9:96:e9:87:c5:9a:fd:40:2a:33:55:34: c3:16:2f:71:80:5f:1a:5e:94:c9:15:8c:a9:f6:eb:2f:dc:15: a2:22:9c:cb:56:ca:d4:1a:86:bd:13:8c:9e:b4:da:7e:a8:22: 87:ba:c6:4a:54:69:7e:d7:98:c4:8e:ed:51:e0:53:0f:48:37: 57:7c:09:5e:30:64:75:6e:24:ca:47:e1:b0:79:83:76:73:34: 42:03:1f:2e:ed:e4:cf:dd:c8:3b:e2:87:c8:cc:57:32:c7:82: 57:bc:3e:c8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtalwKQTuTnft8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk M2U3NTU2ZWEtYWVmMi00NGQ0LTkwODctYjA4NTJhOGQxMjc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3+IEMEJyBRsJi44/r1P7OHLZL6urE1rx+3H h08atYRNtcWRjtknRcQsik7UH5nle+2wo1PBcXL2ekKRDD+Zk52XcKSFAbipQkEe yFwUkN7dnNLycxeLoyDW/kjUPDJyof9YRg/cH8iKwggAZcEi+aYFCTmxk4n+kCET YrtzKPNabsWNCBLPAMQkrLkrXxFtLPhV0XjlG6HbOxDH/I+jeqy1SafaocqtJUIB ij9Y8XVYr1evM94FpEhggAc01Gkf0S53jx3EbP17Ne5XJfNnDFVzSoQDbj41nUFo wxnL9tgTz0NV0zadYq8JoU5DFQFOQHtgKk9a6e8xLvJfLjpedwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGderEvgqcmbko8KksGgWDhNmduGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvNTA3ZTRiNWEtNjkzMy0z NzM3LWI1YWQtYTA4NjkwMDcwZjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEQw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBADVzu41g1dwpXczpnwR1YdTWQ52ryC0nR7ZlEzue8slPVgKI3Y4i vk2BqM19J233hFOTJeW4YBcfBeLkwRHipsQDkaqGAgPkAt3zlsJJauHH41sk51Pq nR8tkd3j0GyHxFJLytmpqyyGdqEB6ADuVmxW59z6KSLmYVRTqRmtPVfvbvvTd9sO CBA3kxLFXHASoAqWAl/94qmW6YfFmv1AKjNVNMMWL3GAXxpelMkVjKn26y/cFaIi nMtWytQahr0TjJ602n6oIoe6xkpUaX7XmMSO7VHgUw9IN1d8CV4wZHVuJMpH4bB5 g3ZzNEIDHy7t5M/dyDvih8jMVzLHgle8Psg= -----END CERTIFICATE-----Generated at Wed May 13 11:20:46 2026 by rpki-client