$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa File: a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa (raw, json) Hash identifier: eMAia+t+yfX/E380FGSPHaeV/TTRMIo34OZp4fMGndk= Subject key identifier: D5:53:2C:0B:19:86:79:26:1A:2E:1B:F3:2E:49:57:58:E9:93:E1:C0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11AD4EE1AC5564E42DA4CA0 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:5e10::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:d4:ee:1a:c5:56:4e:42:da:4c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=3b9a9a9a-03cb-4aad-8df3-aa5162127e7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:84:d2:16:04:0b:32:5c:07:d1:9e:9f:87: 9d:da:80:32:d4:84:cb:bf:7f:cd:dc:95:c5:82:7c: e4:20:cc:1e:f1:ec:64:b9:89:4e:55:25:40:fd:9e: c1:af:4d:c7:b5:8a:e6:a6:81:2b:a0:11:b1:9b:38: 64:56:18:b4:8a:2f:2c:a4:01:30:89:64:81:dc:f0: 02:a2:58:1c:d4:cf:ed:80:4a:92:2f:39:1b:5d:4a: 6d:57:79:0d:d7:05:3e:6e:7f:d5:fc:dc:76:1d:55: f3:a4:28:03:9b:dd:5e:72:38:1b:92:23:5e:44:5e: 53:b0:22:47:6e:72:42:6b:98:22:12:c3:95:5d:8d: 2a:e4:08:a0:5e:12:61:56:47:44:27:97:d8:2d:6e: 9e:95:c7:3a:bd:e5:64:99:69:73:7a:1a:57:1c:ca: 62:98:01:51:15:d7:98:90:9e:86:33:fe:f2:d1:f5: 1e:47:29:38:3f:0e:25:ca:1e:c6:09:c1:cb:c4:ce: 68:45:0e:43:2a:de:4a:e3:fc:cd:37:2f:9c:89:5c: f8:5a:9c:78:59:0b:a9:89:95:1d:04:f1:26:b1:57: b8:c4:ba:da:07:e0:93:32:ea:ae:8a:e1:b8:bc:8e: 1b:8d:cc:be:1a:ae:ab:83:46:cd:ab:2c:35:3c:00: 2a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:53:2C:0B:19:86:79:26:1A:2E:1B:F3:2E:49:57:58:E9:93:E1:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/a42f22e1-dae9-3bbb-aaf1-01c27a2db042.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5e10::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a1:2a:bd:3e:e8:3a:2c:d8:01:29:f0:cd:d8:bf:06:ca:cc: 0b:19:0e:db:63:ac:6f:2d:5a:11:a4:ab:c2:1f:09:df:ae:55: b6:51:d1:6a:d8:82:e7:af:d8:59:60:e9:96:0d:68:f6:9c:f8: 67:17:06:d5:52:71:24:f3:71:e6:e6:a5:d6:8e:92:dc:fc:bb: ac:59:7f:58:5e:bb:17:9d:ef:ec:d7:c1:64:d7:07:e5:c1:15: 8d:62:0a:4c:68:40:4a:a9:32:6f:05:0d:2b:f4:d6:4d:44:7a: a7:53:c5:f1:df:0d:de:bb:16:a4:24:2a:46:64:5c:be:e4:9f: c1:8b:a7:aa:4e:85:d5:82:48:92:19:e5:96:a9:19:e3:52:67: 92:46:40:6a:15:2f:cc:64:00:38:b7:a9:d8:0e:2a:69:71:59: 17:f0:b4:64:6d:26:a0:bb:00:88:69:ea:9d:8b:a4:ca:38:6e: ef:aa:c4:8c:e8:01:ba:4b:7b:dc:26:1a:0e:22:13:a8:0c:d9: 68:4d:d3:85:d1:d2:99:e0:a3:8e:72:33:59:51:0f:a4:b8:e4: 8d:74:e1:d5:ca:05:06:2a:fb:33:34:86:8e:28:11:f3:2b:43: 5c:57:be:7c:37:58:eb:d6:e9:fa:4f:dd:9b:b7:65:d1:df:8a: 2a:a6:33:b2 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGtTuGsVWTkLaTKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk M2I5YTlhOWEtMDNjYi00YWFkLThkZjMtYWE1MTYyMTI3ZTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvSE0hYECzJcB9Gen4ed2oAy1ITLv3/N3JXF gnzkIMwe8exkuYlOVSVA/Z7Br03HtYrmpoEroBGxmzhkVhi0ii8spAEwiWSB3PAC olgc1M/tgEqSLzkbXUptV3kN1wU+bn/V/Nx2HVXzpCgDm91ecjgbkiNeRF5TsCJH bnJCa5giEsOVXY0q5AigXhJhVkdEJ5fYLW6elcc6veVkmWlzehpXHMpimAFRFdeY kJ6GM/7y0fUeRyk4Pw4lyh7GCcHLxM5oRQ5DKt5K4/zNNy+ciVz4Wpx4WQupiZUd BPEmsVe4xLraB+CTMuquiuG4vI4bjcy+Gq6rg0bNqyw1PAAqQQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFNVTLAsZhnkmGi4b8y5JV1jpk+HAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYTQyZjIyZTEtZGFlOS0z YmJiLWFhZjEtMDFjMjdhMmRiMDQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQF4Q MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACqhKr0+6Dos2AEp8M3YvwbKzAsZDttjrG8tWhGkq8IfCd+uVbZR 0WrYguev2Flg6ZYNaPac+GcXBtVScSTzcebmpdaOktz8u6xZf1heuxed7+zXwWTX B+XBFY1iCkxoQEqpMm8FDSv01k1EeqdTxfHfDd67FqQkKkZkXL7kn8GLp6pOhdWC SJIZ5ZapGeNSZ5JGQGoVL8xkADi3qdgOKmlxWRfwtGRtJqC7AIhp6p2LpMo4bu+q xIzoAbpLe9wmGg4iE6gM2WhN04XR0pngo45yM1lRD6S45I104dXKBQYq+zM0ho4o EfMrQ1xXvnw3WOvW6fpP3Zu3ZdHfiiqmM7I= -----END CERTIFICATE-----Generated at Wed May 13 03:50:51 2026 by rpki-client