$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa File: 9985ba54-b696-3367-9ef8-a9492be60140.roa (raw, json) Hash identifier: SdUJo40sfgtUY7/xo2LFaZG8vvnjX0KK0DXnfpX92BI= Subject key identifier: EC:BF:E3:A9:1F:F6:E8:D1:AC:81:64:43:04:8A:92:D6:1A:51:C6:B3 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11AD3CFE8E4D92CC7CA1280 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:4200::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:d3:cf:e8:e4:d9:2c:c7:ca:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=f915a7e0-0474-4760-aa38-71d8a46e953f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:01:ad:12:7e:f0:b8:4d:d8:c6:e1:47:c9:da: 07:97:ed:9f:d8:d3:22:86:1b:f1:d0:1b:8a:0c:60: 3b:6c:75:30:ee:0f:4f:1e:71:d8:9d:83:fa:84:5e: 7f:57:7a:3f:a4:13:7e:06:96:9f:c2:3c:b4:82:45: df:98:49:a6:e8:df:c0:58:75:33:bd:50:c3:79:b8: e4:6e:5f:c2:1c:76:ca:bd:ad:42:fa:b0:5c:16:04: 53:94:29:ed:1f:04:8b:80:2a:56:82:04:2c:37:4f: c7:6f:e8:db:02:79:e0:66:18:83:18:6c:61:1d:ba: 0e:0d:98:7a:a5:b1:5c:c9:82:f2:94:e3:60:7f:22: d6:08:ab:bf:ba:9b:63:2d:05:3e:5e:eb:e1:d0:75: b9:25:b0:0d:dc:09:ff:97:71:cf:f1:36:e9:c4:71: e4:6e:6e:8b:d1:aa:2b:84:59:ce:7e:ae:d8:bc:0f: f0:9b:92:5b:dc:4b:3b:f1:f0:e4:61:d1:c3:64:e9: 04:40:c5:4d:d9:77:52:9d:a2:05:63:ae:c1:f9:bb: a1:8e:91:eb:f9:11:32:76:12:9c:e5:c5:24:c5:08: aa:ed:77:98:40:b7:9e:87:d4:da:ec:26:fd:c7:56: e3:62:d2:bf:90:7d:c5:5b:9b:24:91:f1:65:c0:d4: 26:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:BF:E3:A9:1F:F6:E8:D1:AC:81:64:43:04:8A:92:D6:1A:51:C6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9985ba54-b696-3367-9ef8-a9492be60140.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4200::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:38:8f:46:f4:17:0e:33:47:81:86:af:76:a9:62:91:6d:a5: 8e:cf:47:d6:09:f7:b0:33:51:15:72:04:49:d4:e2:bc:fd:ac: da:a3:4d:da:b1:ab:8e:60:bd:12:f7:48:fb:bb:6e:77:8c:00: 13:aa:f0:fb:43:6e:18:db:6a:f8:4d:c1:a8:13:7d:ae:cc:f4: 7e:34:bb:12:76:03:ba:46:9d:7e:1d:40:27:fc:8f:5a:e9:3f: 0f:af:16:99:7e:61:9b:ab:e0:0e:00:ce:ff:25:06:8a:67:06: 99:a1:eb:4c:29:08:7a:23:f8:ff:2e:b4:d4:7e:1a:50:91:31: a2:69:13:8d:9c:92:69:a7:b7:e3:6f:60:56:4d:66:b4:4b:f6: a1:c7:7e:08:e6:f9:2f:c2:05:e5:4c:6d:84:14:a1:12:d0:03: c7:da:60:dd:fc:ed:87:52:63:d3:1a:50:db:ad:e3:4b:84:35: e4:ef:ce:5a:0e:02:47:85:2b:5a:c9:6b:fc:a6:c2:fc:fa:86: e3:f8:d5:96:ee:d9:50:db:d8:22:05:04:46:b4:f4:0c:77:25: 29:1f:a9:6c:78:de:de:bb:66:5d:0d:44:05:15:53:80:57:a7: 66:ce:9c:f4:1b:13:e6:0a:29:57:a0:c2:8f:73:84:91:c8:0d: aa:a2:cf:bc -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtPP6OTZLMfKEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ZjkxNWE3ZTAtMDQ3NC00NzYwLWFhMzgtNzFkOGE0NmU5NTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAGtEn7wuE3YxuFHydoHl+2f2NMihhvx0BuK DGA7bHUw7g9PHnHYnYP6hF5/V3o/pBN+Bpafwjy0gkXfmEmm6N/AWHUzvVDDebjk bl/CHHbKva1C+rBcFgRTlCntHwSLgCpWggQsN0/Hb+jbAnngZhiDGGxhHboODZh6 pbFcyYLylONgfyLWCKu/uptjLQU+Xuvh0HW5JbAN3An/l3HP8TbpxHHkbm6L0aor hFnOfq7YvA/wm5Jb3Es78fDkYdHDZOkEQMVN2XdSnaIFY67B+buhjpHr+REydhKc 5cUkxQiq7XeYQLeeh9Ta7Cb9x1bjYtK/kH3FW5skkfFlwNQmPwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFOy/46kf9ujRrIFkQwSKktYaUcazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvOTk4NWJhNTQtYjY5Ni0z MzY3LTllZjgtYTk0OTJiZTYwMTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEIA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAHM4j0b0Fw4zR4GGr3apYpFtpY7PR9YJ97AzURVyBEnU4rz9rNqj Tdqxq45gvRL3SPu7bneMABOq8PtDbhjbavhNwagTfa7M9H40uxJ2A7pGnX4dQCf8 j1rpPw+vFpl+YZur4A4Azv8lBopnBpmh60wpCHoj+P8utNR+GlCRMaJpE42ckmmn t+NvYFZNZrRL9qHHfgjm+S/CBeVMbYQUoRLQA8faYN387YdSY9MaUNut40uENeTv zloOAkeFK1rJa/ymwvz6huP41Zbu2VDb2CIFBEa09Ax3JSkfqWx43t67Zl0NRAUV U4BXp2bOnPQbE+YKKVegwo9zhJHIDaqiz7w= -----END CERTIFICATE-----Generated at Wed May 13 07:07:32 2026 by rpki-client