$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa File: 7f72950c-052e-36d4-b734-c4f79dfb2a05.roa (raw, json) Hash identifier: nNZ0s8ocIX98BjUx4lwaGm7Yr7vszZW5G/4hxqLNBmU= Subject key identifier: D9:F9:0F:E8:FD:B6:40:C7:79:D5:E8:A9:68:C7:64:91:00:DE:C1:68 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBEE98CB24FFD7BB7C0FC0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4ac0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:ee:98:cb:24:ff:d7:bb:7c:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=19cea162-2fc2-4e63-87a9-caa7c0652b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:41:fe:6c:73:05:e9:64:f0:85:53:33:46:db: 14:a8:51:72:ca:52:48:1e:09:8e:b5:67:09:03:1d: 5f:31:ee:80:71:ad:3d:40:37:5c:c5:46:55:33:a4: e6:a5:e0:4c:81:10:fd:04:69:60:cc:a9:25:0e:db: 2e:65:6b:43:61:1c:f4:75:bf:5a:48:fd:69:f3:ca: 17:47:2b:89:cb:6b:3f:59:8f:b4:5a:1b:0c:61:d8: aa:05:86:7c:19:85:c6:e3:74:cb:0c:e7:6f:d9:d5: 2b:97:b7:0a:0c:0c:53:64:33:80:c4:ca:dd:33:6c: 51:e9:bf:04:fb:2f:37:fa:84:e9:09:6e:27:8d:1a: 31:19:24:c4:94:20:f4:8e:e7:e7:b6:64:55:ca:30: f2:b5:cb:ab:ab:4d:19:95:63:61:47:12:5f:d8:0c: b2:ae:83:51:cb:34:5c:b6:cb:36:6b:02:eb:67:18: 9a:30:df:42:4e:a7:3e:03:f4:02:8b:48:c0:f0:25: 8a:a5:b8:37:94:1e:75:45:68:e5:b4:4b:06:fb:a4: 0d:14:9a:9e:04:aa:49:05:d3:17:37:b1:26:f8:67: 19:2c:b8:ca:bd:c2:80:01:c7:e4:99:fd:2b:65:61: 66:76:07:3e:67:60:23:d7:34:51:30:91:05:c4:cc: 50:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F9:0F:E8:FD:B6:40:C7:79:D5:E8:A9:68:C7:64:91:00:DE:C1:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f72950c-052e-36d4-b734-c4f79dfb2a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4ac0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:6c:51:09:ba:8d:f4:5c:aa:6e:92:a5:75:02:e0:45:b1:b5: 1e:f8:69:db:6c:63:ee:c3:6f:e9:92:bd:38:e8:e9:df:28:cd: 7e:5b:6f:f0:9e:63:6b:0a:70:ee:12:76:70:ce:e4:e4:73:00: e0:eb:5c:04:ec:80:7b:ad:f5:87:9b:04:b4:fc:26:3d:cb:5d: f8:cb:e7:46:4b:f1:22:0c:8d:2b:93:5a:f9:5c:b9:f9:f4:26: 46:23:95:7b:e4:a0:24:dd:5c:b1:cd:3b:a7:80:52:80:b2:47: 77:69:60:41:a3:31:73:b1:ba:e9:9f:2d:0c:24:da:53:33:fb: 5f:54:55:ac:82:fc:65:87:7d:5b:28:7d:c7:50:62:42:73:24: ad:4a:fa:9d:47:45:ab:7a:c3:b5:27:93:99:63:1b:75:f5:ec: 46:62:b9:5b:b7:66:c7:6f:8f:ca:2c:91:02:a5:19:c5:86:e4: 57:2a:2f:a8:d1:de:35:29:02:2a:f8:94:ef:86:3a:fb:e9:53: 16:b9:84:ad:c2:32:3f:84:c1:13:14:ec:3a:42:f5:68:d4:3b: 97:9e:0c:e9:cb:eb:ed:b3:f6:71:cc:82:39:70:0e:b9:7e:e8: 3a:d2:57:15:c6:ed:7d:01:d6:3c:73:77:18:74:54:03:d9:cb: be:b0:0b:50 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+6YyyT/17t8D8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MTljZWExNjItMmZjMi00ZTYzLTg3YTktY2FhN2MwNjUyYjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkH+bHMF6WTwhVMzRtsUqFFyylJIHgmOtWcJ Ax1fMe6Aca09QDdcxUZVM6TmpeBMgRD9BGlgzKklDtsuZWtDYRz0db9aSP1p88oX RyuJy2s/WY+0WhsMYdiqBYZ8GYXG43TLDOdv2dUrl7cKDAxTZDOAxMrdM2xR6b8E +y83+oTpCW4njRoxGSTElCD0jufntmRVyjDytcurq00ZlWNhRxJf2AyyroNRyzRc tss2awLrZxiaMN9CTqc+A/QCi0jA8CWKpbg3lB51RWjltEsG+6QNFJqeBKpJBdMX N7Em+GcZLLjKvcKAAcfkmf0rZWFmdgc+Z2Aj1zRRMJEFxMxQUwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNn5D+j9tkDHedXoqWjHZJEA3sFoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2Y3Mjk1MGMtMDUyZS0z NmQ0LWI3MzQtYzRmNzlkZmIyYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQErA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAD9sUQm6jfRcqm6SpXUC4EWxtR74adtsY+7Db+mSvTjo6d8ozX5b b/CeY2sKcO4SdnDO5ORzAODrXATsgHut9YebBLT8Jj3LXfjL50ZL8SIMjSuTWvlc ufn0JkYjlXvkoCTdXLHNO6eAUoCyR3dpYEGjMXOxuumfLQwk2lMz+19UVayC/GWH fVsofcdQYkJzJK1K+p1HRat6w7Unk5ljG3X17EZiuVu3Zsdvj8oskQKlGcWG5Fcq L6jR3jUpAir4lO+GOvvpUxa5hK3CMj+EwRMU7DpC9WjUO5eeDOnL6+2z9nHMgjlw Drl+6DrSVxXG7X0B1jxzdxh0VAPZy76wC1A= -----END CERTIFICATE-----Generated at Sun Nov 15 14:49:58 2026 by rpki-client