$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa File: aa24aba2-4326-3797-b85b-bffa69e2c171.roa (raw, json) Hash identifier: cUfxTLLc3uUXEI/Z5jtpMZOQ9nkljt7rK0i18HJgzjQ= Subject key identifier: 2D:31:35:23:22:82:D2:AA:56:41:97:6D:DB:44:A9:0A:2C:42:03:D0 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBEBC5AAC749202848DF00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:56c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:eb:c5:aa:c7:49:20:28:48:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=f0c1b91f-1d6b-4b06-818e-3462fcc5a37a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:84:43:09:d5:19:bd:86:31:c0:f8:f0:d1:20: 02:21:c6:2e:8d:5a:5e:26:ef:4c:f9:cb:d1:91:a7: 9c:67:13:52:f4:58:ae:72:8a:dd:dd:33:e1:9e:5c: 33:31:e0:ac:1b:62:dc:e2:37:13:86:cb:c3:be:69: f7:4d:d9:97:c6:b7:71:5b:1a:67:c9:40:bb:95:80: 85:0f:77:68:72:eb:21:d6:21:ee:c1:45:41:c8:d9: 70:de:ee:00:16:0c:ad:d7:44:74:db:3b:4d:91:fc: 64:4f:8e:99:62:23:9b:e4:30:7b:2d:78:71:89:81: eb:4f:ae:39:e2:27:d8:12:47:fb:54:97:03:81:fd: b3:78:f9:c1:1e:a4:0b:01:30:9e:ce:ea:93:81:3b: a8:f7:4a:7e:06:20:04:c8:95:17:df:4e:4d:31:b6: c7:ea:e4:31:17:8d:6e:75:ff:51:01:86:a8:09:cd: 71:91:70:f7:e3:cb:84:f0:8c:e9:d3:57:55:6e:5a: 2e:5b:ef:11:21:49:ed:79:66:9d:a4:ff:c3:81:d7: 40:e7:d0:7c:6f:82:4c:7f:1f:54:db:fe:05:03:9d: 14:f4:ba:88:c0:af:6b:8f:07:4f:66:40:e9:2b:6d: 23:1d:b5:6d:8b:bf:e2:5f:19:bc:67:b1:42:4d:fc: 5c:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:31:35:23:22:82:D2:AA:56:41:97:6D:DB:44:A9:0A:2C:42:03:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/aa24aba2-4326-3797-b85b-bffa69e2c171.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:56c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:e4:bd:b3:8d:54:d1:d2:94:42:65:dc:df:e8:7e:a4:b5:4e: 0a:18:52:6d:bb:e7:dd:46:d2:ee:d0:f7:74:76:b4:be:98:f8: 2f:33:89:87:32:19:72:0f:34:3b:0b:22:67:1a:a0:b2:e0:01: d4:26:1d:37:8e:42:49:ed:03:21:9a:95:4d:02:d3:de:5f:27: af:25:6d:49:c3:de:bf:51:a3:8f:aa:b9:0c:99:e0:b3:b6:1b: 3a:1f:25:6d:cc:f6:4c:08:f2:58:46:fd:1c:c5:5a:01:9f:4e: ee:8b:1f:bc:97:bd:f9:db:31:27:f6:c1:e2:82:f2:98:50:d9: ea:32:52:08:2c:d3:7a:58:1f:66:98:4d:3d:b7:ec:5b:38:3c: 6a:7e:ac:4a:ab:a8:2c:43:d5:b8:da:c6:b5:e3:97:8f:17:e4: cf:c0:a3:10:71:30:0c:37:be:53:51:fc:a0:b0:5b:12:ef:28: e7:6d:ff:c1:62:6c:27:b6:2e:bb:e3:74:73:d2:81:44:b0:27: ef:56:d8:ff:91:73:1d:38:25:0a:92:d8:22:c0:5e:3f:db:67: 75:cc:b6:1b:4f:b1:8b:34:2e:32:5a:d9:5d:45:b8:74:32:ac: 58:78:49:17:bb:be:31:12:6c:37:13:af:48:cd:cb:8f:cc:e4: 79:a7:66:82 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+vFqsdJIChI3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZjBjMWI5MWYtMWQ2Yi00YjA2LTgxOGUtMzQ2MmZjYzVhMzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYRDCdUZvYYxwPjw0SACIcYujVpeJu9M+cvR kaecZxNS9Fiucord3TPhnlwzMeCsG2Lc4jcThsvDvmn3TdmXxrdxWxpnyUC7lYCF D3docush1iHuwUVByNlw3u4AFgyt10R02ztNkfxkT46ZYiOb5DB7LXhxiYHrT645 4ifYEkf7VJcDgf2zePnBHqQLATCezuqTgTuo90p+BiAEyJUX305NMbbH6uQxF41u df9RAYaoCc1xkXD348uE8Izp01dVblouW+8RIUnteWadpP/DgddA59B8b4JMfx9U 2/4FA50U9LqIwK9rjwdPZkDpK20jHbVti7/iXxm8Z7FCTfxcNQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFC0xNSMigtKqVkGXbdtEqQosQgPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYWEyNGFiYTItNDMyNi0z Nzk3LWI4NWItYmZmYTY5ZTJjMTcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFbA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGTkvbONVNHSlEJl3N/ofqS1TgoYUm27591G0u7Q93R2tL6Y+C8z iYcyGXIPNDsLImcaoLLgAdQmHTeOQkntAyGalU0C095fJ68lbUnD3r9Ro4+quQyZ 4LO2GzofJW3M9kwI8lhG/RzFWgGfTu6LH7yXvfnbMSf2weKC8phQ2eoyUggs03pY H2aYTT237Fs4PGp+rEqrqCxD1bjaxrXjl48X5M/AoxBxMAw3vlNR/KCwWxLvKOdt /8FibCe2LrvjdHPSgUSwJ+9W2P+Rcx04JQqS2CLAXj/bZ3XMthtPsYs0LjJa2V1F uHQyrFh4SRe7vjESbDcTr0jNy4/M5HmnZoI= -----END CERTIFICATE-----Generated at Sun Nov 15 14:58:17 2026 by rpki-client