$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f8b7d1b-ab53-3856-8a93-b478c4e6e40b.roa File: 7f8b7d1b-ab53-3856-8a93-b478c4e6e40b.roa (raw, json) Hash identifier: II/4FAwU0DSQbxZw1DpJ7UDrwv97G6Lb5SnvO+326pY= Subject key identifier: A9:ED:71:8D:F0:66:DF:45:2E:6F:44:4C:62:C4:0B:12:9E:7E:3D:67 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBD67AD658A2397B511680 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f8b7d1b-ab53-3856-8a93-b478c4e6e40b.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4620::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:d6:7a:d6:58:a2:39:7b:51:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=37defe99-ec52-4cfd-b92a-0fcefca3db16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:05:2a:b8:6c:31:f3:d1:76:34:2d:1d:77: 8c:46:9d:5c:d2:41:19:bd:41:ca:02:83:c9:35:3d: ed:cc:f7:7c:11:bb:0b:76:0a:15:ff:35:81:95:29: fa:4a:d3:34:58:89:fd:02:80:c3:fa:ce:16:c6:0b: 2a:a0:97:30:8a:4d:8e:50:da:f2:de:fe:4d:bd:ef: f9:90:c0:b5:86:e4:97:82:49:c6:20:5a:a9:42:aa: f5:41:1c:38:c0:bd:e6:06:fb:8c:24:78:6f:b5:e8: db:0a:df:ed:12:00:40:90:1d:ab:de:77:19:04:71: a0:6a:26:05:0a:3c:2a:b5:7a:21:39:be:23:36:2d: 67:5d:68:f1:56:af:d9:42:ca:56:a3:14:da:67:92: df:e1:be:19:d0:66:91:32:28:39:81:85:af:12:26: 0b:a0:49:e3:9b:8b:71:f2:1b:61:ea:35:41:d7:3e: bc:31:93:ef:15:5e:cd:c3:37:82:95:63:10:7b:39: f5:d0:e2:ad:08:aa:17:86:4e:b1:55:08:d9:4e:c0: 55:9f:85:9d:6c:20:a5:2b:01:1f:7a:97:0d:14:7a: b5:12:75:ab:a3:ea:5e:5c:7b:6f:91:b3:4e:f7:df: 52:fc:62:58:4b:ac:21:c5:97:1b:1d:25:a0:a3:9f: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:ED:71:8D:F0:66:DF:45:2E:6F:44:4C:62:C4:0B:12:9E:7E:3D:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/7f8b7d1b-ab53-3856-8a93-b478c4e6e40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4620::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:47:4d:f7:ad:0d:14:5c:37:8b:8d:91:d3:32:2a:2b:b2:dd: 56:78:d1:d3:6d:4b:98:8b:66:2a:fe:fd:4d:2c:47:49:46:f4: 0d:de:06:01:c0:d8:91:e2:cc:a4:75:3a:25:18:3d:a9:5b:de: d4:6d:ac:c5:63:15:a9:fb:3b:ce:64:e5:41:24:bd:b7:1a:b2: 1c:92:b9:95:8c:5f:ea:cc:98:7d:9a:9f:03:d3:f8:48:c4:02: 9d:91:c6:e8:22:b7:16:5c:68:73:e2:7b:ff:12:76:74:c2:a8: 0b:be:6f:00:0f:7e:eb:6f:bf:b1:c5:d7:91:ea:05:4c:49:f8: da:42:72:22:5c:07:c6:3e:7d:7e:50:70:b9:78:71:a5:a8:29: 99:52:ef:83:f7:d5:23:27:cf:c4:4c:41:25:16:e1:c9:4a:46: 34:3a:1b:3f:64:3b:31:88:8c:50:8a:ca:df:7e:fb:31:db:e5: 4c:b0:63:0e:5f:67:d1:c8:07:62:4b:22:b1:f6:5c:6e:fb:11: 78:e7:71:08:5b:a9:d5:3d:3e:f7:7a:a7:83:ef:32:ba:a9:da: d0:17:9f:df:f3:be:33:17:eb:46:f4:8f:14:7f:b8:21:0c:1c: 06:2e:77:33:d8:66:83:0c:e4:61:fb:da:aa:72:d8:a9:72:98: bb:93:f8:a0 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9Z61liiOXtRFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MzdkZWZlOTktZWM1Mi00Y2ZkLWI5MmEtMGZjZWZjYTNkYjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua0FKrhsMfPRdjQtHXeMRp1c0kEZvUHKAoPJ NT3tzPd8EbsLdgoV/zWBlSn6StM0WIn9AoDD+s4WxgsqoJcwik2OUNry3v5Nve/5 kMC1huSXgknGIFqpQqr1QRw4wL3mBvuMJHhvtejbCt/tEgBAkB2r3ncZBHGgaiYF CjwqtXohOb4jNi1nXWjxVq/ZQspWoxTaZ5Lf4b4Z0GaRMig5gYWvEiYLoEnjm4tx 8hth6jVB1z68MZPvFV7NwzeClWMQezn10OKtCKoXhk6xVQjZTsBVn4WdbCClKwEf epcNFHq1EnWro+peXHtvkbNO999S/GJYS6whxZcbHSWgo58ScQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFKntcY3wZt9FLm9ETGLECxKefj1nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvN2Y4YjdkMWItYWI1My0z ODU2LThhOTMtYjQ3OGM0ZTZlNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEYg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAANHTfetDRRcN4uNkdMyKiuy3VZ40dNtS5iLZir+/U0sR0lG9A3e BgHA2JHizKR1OiUYPalb3tRtrMVjFan7O85k5UEkvbcashySuZWMX+rMmH2anwPT +EjEAp2RxugitxZcaHPie/8SdnTCqAu+bwAPfutvv7HF15HqBUxJ+NpCciJcB8Y+ fX5QcLl4caWoKZlS74P31SMnz8RMQSUW4clKRjQ6Gz9kOzGIjFCKyt9++zHb5Uyw Yw5fZ9HIB2JLIrH2XG77EXjncQhbqdU9Pvd6p4PvMrqp2tAXn9/zvjMX60b0jxR/ uCEMHAYudzPYZoMM5GH72qpy2KlymLuT+KA= -----END CERTIFICATE-----Generated at Sun Nov 15 11:57:14 2026 by rpki-client