$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa File: beff694d-1ca2-3b4c-928b-216f33196e5c.roa (raw, json) Hash identifier: 0DcnfdNTocbn1xKBclnpZSG/N/b4QV3Hfh2xl3/hVPY= Subject key identifier: BD:12:21:71:BC:0E:44:73:83:A4:D7:E0:B1:E3:79:B7:2D:95:15:54 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE0A93E310682846F7140 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:41e0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e0:a9:3e:31:06:82:84:6f:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=a96b191b-c70d-4e90-abd1-94368acec66d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:5e:3a:32:e7:94:dc:9d:c5:31:53:09:3b:a3: 9e:cf:f1:62:07:e9:4d:9b:40:4a:ea:6c:a7:f7:4f: 05:20:f1:3e:f2:b5:a7:28:df:c5:9d:41:58:41:37: c8:19:fe:e9:77:03:79:9f:38:6f:7a:a7:e1:fc:76: ce:6e:f5:95:1e:4a:81:c1:d2:95:72:75:b9:48:54: 62:b9:49:d4:b0:39:22:86:3c:6c:99:25:08:f8:86: 8e:00:39:b1:53:1f:98:1f:9e:27:09:64:c1:e7:a0: e2:f6:d6:68:cd:47:34:61:f5:fc:14:97:b0:0a:f4: 84:ba:45:c0:9c:99:50:71:23:8a:0e:82:2e:4a:6f: 4a:e1:0e:dc:6f:bc:10:ec:df:5c:b9:ab:5e:2d:de: 13:40:a8:36:1e:76:ea:40:78:3f:fe:e7:f9:2a:1f: 37:60:40:3a:5a:b3:a5:a6:78:f9:78:54:a4:48:ea: c8:e5:ab:21:da:c4:5b:89:e2:1e:3e:c2:b8:9a:a7: 9e:cb:5f:66:90:b2:64:e4:17:b2:80:19:7a:b2:94: 5d:0b:16:2e:b7:89:7d:cb:2a:9d:ba:fb:2c:bc:bb: 15:ec:5f:40:a3:8d:ea:34:04:2f:4c:88:d9:6f:8b: df:89:19:cb:30:ba:3b:30:d8:3a:41:5a:32:cd:ef: 1b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:12:21:71:BC:0E:44:73:83:A4:D7:E0:B1:E3:79:B7:2D:95:15:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/beff694d-1ca2-3b4c-928b-216f33196e5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:41e0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:5e:72:e9:2f:23:cd:78:af:b5:23:5d:0b:8f:c9:f9:f8:48: b1:80:fd:60:38:cd:30:9f:38:04:2b:33:6b:4e:1e:f2:ea:eb: a8:34:da:8b:8a:80:23:64:ba:95:b9:ff:ab:1c:c8:c5:a6:20: 7b:97:c3:4e:e0:e7:11:c4:fd:55:cd:ac:dc:10:4a:91:09:7a: e9:59:9f:df:47:0a:23:fa:0d:31:96:4c:9a:d2:b5:7f:d0:62: a2:0b:76:da:4b:f7:9f:40:1d:b6:e3:55:d5:7f:1f:8f:79:c4: 85:a9:0b:48:3e:59:59:e4:df:f9:61:45:0e:61:8a:15:80:b0: f6:d9:b9:72:ba:f6:ec:df:ff:0a:0b:d9:6a:60:6e:5c:54:16: 51:b4:21:0b:6f:29:4c:74:22:ae:55:29:b3:60:89:72:21:21: a2:4e:9e:8e:51:8e:9d:b6:1d:eb:6f:b8:ad:33:de:5e:34:34: 79:1f:50:96:fa:90:6f:44:24:ee:4a:61:0b:c3:eb:f2:e7:bd: 8c:0f:4f:a0:27:26:f1:d1:a7:b4:4a:59:1a:d1:79:49:04:dc: db:da:aa:5a:2a:8c:ec:53:39:50:1a:e1:aa:a5:85:bf:7f:c7: 32:60:db:27:21:5b:b0:6e:42:47:9b:58:ef:1e:23:93:0b:52: 30:55:84:0b -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+CpPjEGgoRvcUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk YTk2YjE5MWItYzcwZC00ZTkwLWFiZDEtOTQzNjhhY2VjNjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg146MueU3J3FMVMJO6Oez/FiB+lNm0BK6myn 908FIPE+8rWnKN/FnUFYQTfIGf7pdwN5nzhveqfh/HbObvWVHkqBwdKVcnW5SFRi uUnUsDkihjxsmSUI+IaOADmxUx+YH54nCWTB56Di9tZozUc0YfX8FJewCvSEukXA nJlQcSOKDoIuSm9K4Q7cb7wQ7N9cuateLd4TQKg2HnbqQHg//uf5Kh83YEA6WrOl pnj5eFSkSOrI5ash2sRbieIePsK4mqeey19mkLJk5BeygBl6spRdCxYut4l9yyqd uvssvLsV7F9Ao43qNAQvTIjZb4vfiRnLMLo7MNg6QVoyze8b7wIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFL0SIXG8DkRzg6TX4LHjebctlRVUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmVmZjY5NGQtMWNhMi0z YjRjLTkyOGItMjE2ZjMzMTk2ZTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBABlecukvI814r7UjXQuPyfn4SLGA/WA4zTCfOAQrM2tOHvLq66g0 2ouKgCNkupW5/6scyMWmIHuXw07g5xHE/VXNrNwQSpEJeulZn99HCiP6DTGWTJrS tX/QYqILdtpL959AHbbjVdV/H495xIWpC0g+WVnk3/lhRQ5hihWAsPbZuXK69uzf /woL2WpgblxUFlG0IQtvKUx0Iq5VKbNgiXIhIaJOno5Rjp22HetvuK0z3l40NHkf UJb6kG9EJO5KYQvD6/LnvYwPT6AnJvHRp7RKWRrReUkE3NvaqloqjOxTOVAa4aql hb9/xzJg2ychW7BuQkebWO8eI5MLUjBVhAs= -----END CERTIFICATE-----Generated at Sun Nov 15 13:04:43 2026 by rpki-client