$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8573601c-7ddc-3220-a56a-df391cdab348.roa File: 8573601c-7ddc-3220-a56a-df391cdab348.roa (raw, json) Hash identifier: zm1fxoaEtdGF8JPk31PtnhVdNsaT6KKvcFXLlU56bNQ= Subject key identifier: 8D:1A:30:62:50:AF:12:5C:84:02:3E:44:20:9F:E7:0E:79:8A:5F:C6 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11ACA2E6C81FE8950D8BD80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8573601c-7ddc-3220-a56a-df391cdab348.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:4bf0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:ca:2e:6c:81:fe:89:50:d8:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=20fc7a5e-7efd-46c2-9ebc-5177b6b9f657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d6:0c:13:38:cd:24:c5:c4:13:61:94:e1:48: 4a:aa:27:dc:6d:0f:24:dc:80:ed:44:1d:4f:9b:fd: 4b:6d:d5:84:a5:a7:1d:87:3e:e7:08:94:eb:73:e8: 10:8d:20:c2:a3:a5:78:ed:42:d5:35:37:87:bd:1d: d8:3c:7f:d1:80:de:e8:c3:87:e8:e6:8d:66:c2:3f: ce:03:de:6e:e9:eb:21:ec:f8:f7:81:34:66:7f:55: 1d:c9:b5:96:a4:b9:00:85:31:64:f2:a0:c6:eb:87: 64:0d:22:2b:5d:fc:76:c2:14:c1:ee:a7:b4:c8:df: 90:66:da:59:14:f9:4e:d7:a8:69:4f:6b:47:17:40: 7b:91:a0:53:b9:6b:8a:ee:19:b3:c8:aa:c0:82:bc: c4:e1:8f:cf:df:1c:88:08:96:12:43:25:8e:ed:04: 42:f2:4d:72:0e:69:cd:9f:2d:18:55:71:64:2a:24: 3b:ae:c9:df:8d:6d:1e:9b:d5:12:83:57:01:e2:c2: 67:93:ad:bd:09:52:83:6b:22:92:42:28:09:64:6d: 9c:87:10:bb:11:37:5b:2f:da:25:28:14:0c:0c:60: a8:86:5c:a1:00:b5:7d:9e:9c:e1:5f:57:75:06:22: 8e:3b:75:80:ae:a4:b0:fe:97:65:91:b5:30:79:c3: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1A:30:62:50:AF:12:5C:84:02:3E:44:20:9F:E7:0E:79:8A:5F:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/8573601c-7ddc-3220-a56a-df391cdab348.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4bf0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:8e:95:f1:e1:0d:bd:8b:be:ae:ad:a4:79:bf:ec:99:6d:8f: e5:e3:3b:42:dd:7a:5a:48:33:b5:46:b4:28:66:0e:33:72:72: d2:bd:e4:c1:95:d9:d7:16:1a:43:5e:14:5e:b7:aa:ba:c3:6b: a1:17:72:96:13:d2:bd:30:15:23:25:4d:1c:f6:58:b7:4e:aa: 63:33:c7:4b:83:f4:9c:2c:84:88:22:03:91:ae:ca:31:f2:f2: be:09:87:68:fc:f1:f4:93:d6:7b:0b:c1:81:06:af:60:ac:b9: ae:01:32:1c:86:58:d8:24:c1:74:20:0f:c7:86:f8:3c:5a:84: cd:30:c6:fc:d4:92:00:7f:79:1e:42:66:88:c5:d1:29:00:81: dc:ee:a2:ce:75:c2:53:d9:ac:b6:6e:e1:d1:d9:51:c1:58:5a: 8e:dc:c9:a6:a0:ec:c8:c9:ca:7c:6d:bc:54:dc:31:e4:3e:c2: a1:63:9c:78:71:88:a1:c1:2b:16:a5:bb:63:2e:34:35:82:a7: 7d:cd:31:48:ab:38:f5:b1:84:59:1f:5b:e4:6f:ad:41:44:ce: 03:1f:d2:ce:bb:f2:41:c9:5f:b4:71:b5:cc:95:2b:47:75:30: 49:63:33:84:8d:c1:bb:74:05:9a:e0:a8:82:62:37:9d:2d:59: 57:58:2f:93 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGsoubIH+iVDYvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MjBmYzdhNWUtN2VmZC00NmMyLTllYmMtNTE3N2I2YjlmNjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdYMEzjNJMXEE2GU4UhKqifcbQ8k3IDtRB1P m/1LbdWEpacdhz7nCJTrc+gQjSDCo6V47ULVNTeHvR3YPH/RgN7ow4fo5o1mwj/O A95u6esh7Pj3gTRmf1UdybWWpLkAhTFk8qDG64dkDSIrXfx2whTB7qe0yN+QZtpZ FPlO16hpT2tHF0B7kaBTuWuK7hmzyKrAgrzE4Y/P3xyICJYSQyWO7QRC8k1yDmnN ny0YVXFkKiQ7rsnfjW0em9USg1cB4sJnk629CVKDayKSQigJZG2chxC7ETdbL9ol KBQMDGCohlyhALV9npzhX1d1BiKOO3WArqSw/pdlkbUwecNx4wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFI0aMGJQrxJchAI+RCCf5w55il/GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvODU3MzYwMWMtN2RkYy0z MjIwLWE1NmEtZGYzOTFjZGFiMzQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEvw MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAESOlfHhDb2Lvq6tpHm/7Jltj+XjO0LdelpIM7VGtChmDjNyctK9 5MGV2dcWGkNeFF63qrrDa6EXcpYT0r0wFSMlTRz2WLdOqmMzx0uD9JwshIgiA5Gu yjHy8r4Jh2j88fST1nsLwYEGr2Csua4BMhyGWNgkwXQgD8eG+DxahM0wxvzUkgB/ eR5CZojF0SkAgdzuos51wlPZrLZu4dHZUcFYWo7cyaag7MjJynxtvFTcMeQ+wqFj nHhxiKHBKxalu2MuNDWCp33NMUirOPWxhFkfW+RvrUFEzgMf0s678kHJX7RxtcyV K0d1MEljM4SNwbt0BZrgqIJiN50tWVdYL5M= -----END CERTIFICATE-----Generated at Wed May 13 05:02:01 2026 by rpki-client