$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa File: bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa (raw, json) Hash identifier: 6/qw3FNfiM2xGFMDnGxpZu+Rm+gfI8oGDaEQxYKUHXg= Subject key identifier: FA:BA:68:0B:D7:4E:69:8F:66:02:12:22:3E:80:90:E0:F1:EA:7C:2B Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBE0F03DF0852234E4CB80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:5000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:e0:f0:3d:f0:85:22:34:e4:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=ec2b11d5-9f32-4d89-9454-330402272681 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:e1:a5:6e:64:4c:4d:8f:be:3f:0f:d6:ac: 1a:90:c1:06:99:1d:9c:8f:9d:66:a9:4f:ba:07:6e: 2d:bf:78:7d:e0:70:9b:65:1e:41:a7:81:7e:11:6c: ae:0b:7b:df:e3:9a:17:66:a8:e2:70:5a:64:36:54: 07:dd:96:49:81:20:4c:68:53:01:2c:c5:28:02:cd: 4b:03:bc:81:ba:30:a2:f7:00:06:8a:14:c8:77:ac: c5:9f:cf:6f:b4:bf:69:e1:1f:4e:51:11:9c:25:0c: 59:70:d6:47:7e:4b:0b:e1:74:3c:22:8b:3a:26:66: 52:f1:51:f1:61:27:c7:d7:ce:d4:cc:9e:85:f3:63: 4d:57:f2:e1:9b:c1:2e:a0:4b:6c:55:61:97:23:ad: 08:0b:65:34:6b:60:9d:d7:22:f9:0f:0b:56:34:65: 0b:38:69:62:0b:ee:ca:70:68:ac:39:ef:e2:11:af: 66:d3:a5:be:71:c2:73:ca:d8:d7:4a:28:6c:da:dd: 03:a0:4a:b0:a7:46:67:3b:e4:40:ab:e2:d2:8a:82: 49:d4:0d:f4:0d:9e:da:96:a6:69:a2:bf:da:e4:70: 54:a8:0b:33:94:29:54:b4:eb:c0:9d:89:ac:ab:1e: 6d:c6:b0:8f:19:ca:86:58:91:ab:4a:1f:15:12:99: b1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:BA:68:0B:D7:4E:69:8F:66:02:12:22:3E:80:90:E0:F1:EA:7C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/bfb9e97f-ba55-3e9b-9da5-1e681f48f4d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:96:a3:8b:8f:2e:33:6c:0d:b1:21:b5:4f:b3:ed:2c:25:9e: 90:d9:8b:cf:4c:cd:91:04:f4:1b:26:3e:7c:9a:a3:8c:95:2c: 12:4a:d1:dc:1e:74:bb:77:ff:8e:a0:92:c6:f7:2e:47:4a:23: ef:60:7c:39:c0:fe:88:f1:8f:c3:d5:b1:df:53:5f:6c:fd:eb: 5b:10:b7:e7:60:99:c1:2e:08:b8:56:7f:95:5b:32:3a:4e:b7: 1b:2b:a4:56:34:f4:a4:50:bb:0f:63:15:c4:c8:eb:54:e0:d1: 0e:71:28:a7:bf:c7:9b:82:71:ed:23:8a:b0:1f:9d:8a:b5:6e: 38:69:ec:cf:76:a2:dc:6c:a1:ac:f9:29:b2:bb:e4:6e:b5:f3: 20:2b:dc:21:75:6b:1e:c2:92:83:b3:70:5e:43:4c:a2:eb:59: 67:a7:d9:fc:bd:e1:38:49:16:fb:1e:c8:09:a0:9e:7c:34:cb: 28:88:5d:e2:95:86:5a:90:5f:76:b6:34:dc:2b:75:8c:4b:5b: 65:42:9e:77:e9:37:f5:8e:c2:9a:5d:8b:61:27:0a:9d:eb:3f: 38:11:14:53:fe:ef:eb:d3:4b:a1:37:ab:66:8a:2c:a5:2b:6d: ea:8b:14:cd:03:83:5c:c3:73:e1:b0:d2:58:00:98:3a:02:97: d4:7f:f3:e8 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy+DwPfCFIjTky4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZWMyYjExZDUtOWYzMi00ZDg5LTk0NTQtMzMwNDAyMjcyNjgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih7hpW5kTE2Pvj8P1qwakMEGmR2cj51mqU+6 B24tv3h94HCbZR5Bp4F+EWyuC3vf45oXZqjicFpkNlQH3ZZJgSBMaFMBLMUoAs1L A7yBujCi9wAGihTId6zFn89vtL9p4R9OURGcJQxZcNZHfksL4XQ8Ios6JmZS8VHx YSfH187UzJ6F82NNV/Lhm8EuoEtsVWGXI60IC2U0a2Cd1yL5DwtWNGULOGliC+7K cGisOe/iEa9m06W+ccJzytjXSihs2t0DoEqwp0ZnO+RAq+LSioJJ1A30DZ7alqZp or/a5HBUqAszlClUtOvAnYmsqx5txrCPGcqGWJGrSh8VEpmxWQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPq6aAvXTmmPZgISIj6AkODx6nwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmZiOWU5N2YtYmE1NS0z ZTliLTlkYTUtMWU2ODFmNDhmNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFAA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBACeWo4uPLjNsDbEhtU+z7SwlnpDZi89MzZEE9BsmPnyao4yVLBJK 0dwedLt3/46gksb3LkdKI+9gfDnA/ojxj8PVsd9TX2z961sQt+dgmcEuCLhWf5Vb MjpOtxsrpFY09KRQuw9jFcTI61Tg0Q5xKKe/x5uCce0jirAfnYq1bjhp7M92otxs oaz5KbK75G618yAr3CF1ax7CkoOzcF5DTKLrWWen2fy94ThJFvseyAmgnnw0yyiI XeKVhlqQX3a2NNwrdYxLW2VCnnfpN/WOwppdi2EnCp3rPzgRFFP+7+vTS6E3q2aK LKUrbeqLFM0Dg1zDc+Gw0lgAmDoCl9R/8+g= -----END CERTIFICATE-----Generated at Sun Nov 15 11:34:18 2026 by rpki-client