$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa File: ce538dc7-a925-3f19-9892-858df419ab79.roa (raw, json) Hash identifier: 48OggtXODX9m0Zp+FNtBTAFolzSOe7A9tGShqK4Z5yM= Subject key identifier: 24:3C:75:0C:2C:B3:8B:F1:1E:85:E5:24:37:6F:08:F3:B7:3E:95:DA Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11AC80232A4E11E48FB2390 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:5520::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:c8:02:32:a4:e1:1e:48:fb:23:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=1563fd36-403c-4e77-ba23-14e7bb439f14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:00:2f:46:8a:55:f1:ba:84:45:42:ed:7a:61: 5e:6f:36:08:5d:ad:11:ff:e7:dc:40:37:69:00:6d: c9:66:c9:f8:77:f1:6f:ed:02:3a:c7:79:6e:69:e6: 59:5c:9f:59:55:72:81:8a:bb:79:cc:41:91:fc:89: 21:77:69:0c:95:71:41:8d:63:33:06:29:60:f2:9d: d7:bc:81:90:ca:a3:4b:6d:3b:91:31:b6:53:cb:5b: 6f:3e:0f:27:b9:27:60:e7:1e:f1:0a:04:77:db:ba: d5:17:b0:4c:85:46:23:35:b9:23:17:ae:9c:d8:c4: ef:fd:0c:f2:0f:d3:bc:82:bf:7c:91:88:2c:60:4b: 61:2c:22:a4:73:da:c9:ab:0d:d2:fc:b9:f6:5d:30: 57:6f:bf:be:77:87:ac:2b:9e:0f:26:76:46:92:8a: a9:c8:d1:00:38:3e:ee:ab:fa:75:97:78:9a:06:0e: 5e:76:bd:bf:d7:cb:ec:36:05:2a:22:c7:55:58:bf: 3d:22:de:c3:37:ca:b3:51:84:60:04:3d:9b:0f:b1: 8f:1e:db:ef:37:4e:c6:7d:3e:7d:49:ea:ef:b5:79: e5:44:2f:83:fb:75:f3:a5:1e:35:83:89:1f:32:09: be:36:8e:f9:26:b6:09:f2:17:75:c3:16:ff:ff:7f: bd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:75:0C:2C:B3:8B:F1:1E:85:E5:24:37:6F:08:F3:B7:3E:95:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/ce538dc7-a925-3f19-9892-858df419ab79.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:5520::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:31:e7:13:a3:48:70:e2:b6:3b:09:1d:70:43:46:19:f1:c9: 6d:39:de:f3:23:5f:9b:8b:c4:55:c7:06:3c:cb:9a:39:6e:00: 4b:63:40:55:91:ba:9f:a6:c3:ef:51:7b:d8:1c:bc:f8:27:00: 7c:77:13:a1:8d:02:8f:ed:e4:f1:80:e9:1a:37:08:20:2c:ba: 20:b2:3a:91:78:3a:87:1f:9f:b2:19:ac:ea:db:36:50:a3:96: d5:4b:d4:d9:4d:56:1c:79:3c:13:60:c2:1c:d2:2a:42:d2:27: 13:fc:a4:c6:ba:d1:d6:19:49:f3:b6:19:e4:17:f8:42:19:20: 87:85:b7:19:5a:38:f5:36:2a:b1:0f:dd:fe:e2:55:76:0a:5c: 66:aa:ca:02:d9:64:ff:d0:a0:2e:50:0c:2e:74:b6:69:fd:c9: 2e:52:11:70:f8:c2:5f:a8:fa:16:02:60:ff:16:5c:5d:29:39: bc:a6:92:9d:72:23:16:f8:07:1f:fe:88:a2:15:3c:43:c8:d3: f2:aa:45:49:73:62:18:89:27:b1:ee:7c:ae:24:39:56:e5:6a: da:ee:84:8d:e5:96:56:59:83:f8:d7:b5:a4:7b:df:ff:d5:a1: 51:e1:c5:e3:de:02:eb:f8:dd:e0:94:bd:20:89:d5:0a:8d:6a: 13:41:6f:ba -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGsgCMqThHkj7I5AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MTU2M2ZkMzYtNDAzYy00ZTc3LWJhMjMtMTRlN2JiNDM5ZjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQAvRopV8bqERULtemFebzYIXa0R/+fcQDdp AG3JZsn4d/Fv7QI6x3luaeZZXJ9ZVXKBirt5zEGR/Ikhd2kMlXFBjWMzBilg8p3X vIGQyqNLbTuRMbZTy1tvPg8nuSdg5x7xCgR327rVF7BMhUYjNbkjF66c2MTv/Qzy D9O8gr98kYgsYEthLCKkc9rJqw3S/Ln2XTBXb7++d4esK54PJnZGkoqpyNEAOD7u q/p1l3iaBg5edr2/18vsNgUqIsdVWL89It7DN8qzUYRgBD2bD7GPHtvvN07GfT59 ServtXnlRC+D+3XzpR41g4kfMgm+No75JrYJ8hd1wxb//3+9/QIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFCQ8dQwss4vxHoXlJDdvCPO3PpXaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvY2U1MzhkYzctYTkyNS0z ZjE5LTk4OTItODU4ZGY0MTlhYjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQFUg MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAAYx5xOjSHDitjsJHXBDRhnxyW053vMjX5uLxFXHBjzLmjluAEtj QFWRup+mw+9Re9gcvPgnAHx3E6GNAo/t5PGA6Ro3CCAsuiCyOpF4Oocfn7IZrOrb NlCjltVL1NlNVhx5PBNgwhzSKkLSJxP8pMa60dYZSfO2GeQX+EIZIIeFtxlaOPU2 KrEP3f7iVXYKXGaqygLZZP/QoC5QDC50tmn9yS5SEXD4wl+o+hYCYP8WXF0pObym kp1yIxb4Bx/+iKIVPEPI0/KqRUlzYhiJJ7HufK4kOVblatruhI3lllZZg/jXtaR7 3//VoVHhxePeAuv43eCUvSCJ1QqNahNBb7o= -----END CERTIFICATE-----Generated at Wed May 13 05:19:12 2026 by rpki-client