$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc0b4cac-39aa-35b7-a5ba-ff0a8946a88d.roa File: bc0b4cac-39aa-35b7-a5ba-ff0a8946a88d.roa (raw, json) Hash identifier: /cSJF9UlDHI5kFySvHEvDdw2lSztieXhjXNRgQ2rQ9E= Subject key identifier: 8A:B6:07:0D:AF:59:7C:F1:40:AC:2B:45:5D:93:6D:8D:38:D9:9C:79 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE897F6FD29A2E3989000 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc0b4cac-39aa-35b7-a5ba-ff0a8946a88d.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5480::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e8:97:f6:fd:29:a2:e3:98:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=0b2d4de0-2c39-41fd-b96e-c41f076cc5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9b:53:c6:56:50:aa:c3:25:be:78:a5:55:3b: 80:ff:b1:26:66:2c:6a:2b:8c:e4:27:2a:1e:67:f9: e0:99:dc:c3:21:46:b4:81:db:33:59:82:1a:51:97: f6:38:b8:0f:3b:c3:39:96:13:2f:d9:75:e9:2d:24: 29:e4:ae:a8:f0:8b:55:37:25:8a:79:b8:70:e2:93: 2d:37:08:d3:31:a8:19:8d:2b:b4:52:88:6d:9d:b3: fb:77:01:d1:30:fb:84:0b:09:11:9a:60:37:a8:a6: 09:d2:c2:91:8e:1e:ea:6e:30:3d:00:d9:db:ad:cc: be:08:db:97:d3:24:68:9f:dc:f2:a2:8e:9e:ac:21: db:53:70:bd:de:dd:2f:6a:5d:4d:83:79:7f:1f:39: ba:08:4e:b0:ae:f2:aa:c3:37:00:fb:6b:8e:f4:ac: 27:03:9f:b3:f6:0d:06:d6:e5:15:ad:d5:40:b6:96: bc:0a:f1:7d:18:41:29:7c:32:54:52:b7:ff:dc:43: 88:88:19:cc:52:26:38:30:f6:c4:1c:e2:80:79:fd: ee:cc:c5:e1:f0:64:e6:8e:b9:15:af:00:49:16:a7: 5f:1f:56:18:30:f1:39:0f:8a:93:21:f4:6f:9d:6b: aa:ef:e1:10:23:cc:8d:3c:4d:84:ab:d2:64:bd:dc: 45:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:B6:07:0D:AF:59:7C:F1:40:AC:2B:45:5D:93:6D:8D:38:D9:9C:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bc0b4cac-39aa-35b7-a5ba-ff0a8946a88d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5480::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:b2:7a:ed:47:d9:0e:4e:72:36:ef:90:ef:d0:df:29:7a:d6: 68:49:7a:ac:1d:5c:43:81:b4:12:3a:4a:2c:e7:e2:eb:28:6a: d5:c5:e7:09:de:c0:93:96:8b:91:86:19:04:d5:4b:52:87:c3: d6:44:f7:14:6c:cd:06:09:da:15:48:e4:d6:de:61:05:70:6a: a5:62:53:54:0e:bf:76:4d:0b:5e:86:c3:ef:15:b8:11:b6:01: 2d:a9:8f:87:af:b6:65:ce:b1:0c:19:6a:05:c4:02:1f:16:d9: b3:09:24:27:79:f5:4c:bb:51:b2:0b:8c:e7:98:10:e3:eb:4c: 2b:b9:98:55:c1:f0:61:00:76:9e:4f:49:84:60:96:97:97:64: 53:e3:a1:f2:5e:51:a4:c4:cc:7e:2d:f1:94:d5:9a:f0:31:c2: a5:ef:47:46:c0:96:82:5e:f0:0f:e6:1d:3b:69:ca:13:c4:e1: f3:98:ca:16:5d:64:06:ed:da:7d:86:88:05:ef:4a:1e:00:31: ff:b6:c7:a2:29:23:33:38:b6:8e:22:a0:ee:66:2d:1b:da:8b: 30:97:55:ad:e9:00:09:bc:92:16:67:2d:4d:ed:7e:24:8e:93: 17:00:12:eb:9a:59:c0:63:05:e8:a5:25:8f:6c:69:f2:59:70: 42:33:fa:8b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+iX9v0pouOYkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MGIyZDRkZTAtMmMzOS00MWZkLWI5NmUtYzQxZjA3NmNjNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5tTxlZQqsMlvnilVTuA/7EmZixqK4zkJyoe Z/ngmdzDIUa0gdszWYIaUZf2OLgPO8M5lhMv2XXpLSQp5K6o8ItVNyWKebhw4pMt NwjTMagZjSu0UohtnbP7dwHRMPuECwkRmmA3qKYJ0sKRjh7qbjA9ANnbrcy+CNuX 0yRon9zyoo6erCHbU3C93t0val1Ng3l/Hzm6CE6wrvKqwzcA+2uO9KwnA5+z9g0G 1uUVrdVAtpa8CvF9GEEpfDJUUrf/3EOIiBnMUiY4MPbEHOKAef3uzMXh8GTmjrkV rwBJFqdfH1YYMPE5D4qTIfRvnWuq7+EQI8yNPE2Eq9JkvdxFswIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFIq2Bw2vWXzxQKwrRV2TbY042Zx5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmMwYjRjYWMtMzlhYS0z NWI3LWE1YmEtZmYwYTg5NDZhODhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFSA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACOyeu1H2Q5OcjbvkO/Q3yl61mhJeqwdXEOBtBI6Sizn4usoatXF 5wnewJOWi5GGGQTVS1KHw9ZE9xRszQYJ2hVI5NbeYQVwaqViU1QOv3ZNC16Gw+8V uBG2AS2pj4evtmXOsQwZagXEAh8W2bMJJCd59Uy7UbILjOeYEOPrTCu5mFXB8GEA dp5PSYRglpeXZFPjofJeUaTEzH4t8ZTVmvAxwqXvR0bAloJe8A/mHTtpyhPE4fOY yhZdZAbt2n2GiAXvSh4AMf+2x6IpIzM4to4ioO5mLRvaizCXVa3pAAm8khZnLU3t fiSOkxcAEuuaWcBjBeilJY9safJZcEIz+os= -----END CERTIFICATE-----Generated at Sun Nov 15 12:12:00 2026 by rpki-client