$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0cac949-a7bd-3a89-a2da-03d2665e4c27.roa File: d0cac949-a7bd-3a89-a2da-03d2665e4c27.roa (raw, json) Hash identifier: 31tfqczIJ5Q3/WUq77wDUN6g7fQEPsTnHmvhxKkBBWI= Subject key identifier: F9:2E:93:FD:6A:61:ED:80:BC:07:BC:F0:28:BF:6E:61:DC:8C:D2:04 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBD6D9276454F150217D80 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0cac949-a7bd-3a89-a2da-03d2665e4c27.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:4140::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:d6:d9:27:64:54:f1:50:21:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=d81beb17-9a0a-4db3-b5e1-298601682d75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a9:66:b2:bf:9b:d2:70:9f:ae:25:35:3d:39: 04:c7:ab:04:84:a0:a7:b4:98:e9:b4:df:f5:81:4e: 5c:39:3b:2f:ac:9b:ac:9e:80:c1:f5:83:d1:68:f6: 91:a3:61:28:5a:9c:bc:01:fe:13:61:79:a9:6c:aa: 27:4b:9a:f0:9e:7d:60:4a:48:b8:2d:f6:d3:14:4b: f1:5b:df:b3:41:ab:79:16:4e:f7:7f:e5:52:cf:d6: 8f:f7:2b:08:3f:cb:6d:f7:d5:20:02:e1:3f:a2:bb: 1e:ea:ae:ac:91:17:f0:4d:6b:b5:de:f5:ad:9f:8c: 14:b6:ee:f4:ba:86:44:9e:5d:c2:10:61:b7:db:3c: ce:10:3d:9a:02:d1:a2:3f:99:07:1b:cd:e3:e1:30: 09:4b:17:59:81:34:63:04:69:74:24:95:34:85:6c: e7:36:f0:3f:59:38:94:3b:a7:1d:9f:85:36:6f:e8: ec:db:c9:b2:65:c7:c4:f3:91:5a:fe:7a:aa:ef:f3: 00:3c:74:6a:1f:3f:a4:8d:90:bc:d7:01:7f:4b:c0: 7f:04:52:bc:91:52:1b:2e:eb:4d:ca:05:b1:8a:99: ea:5b:4c:f2:15:41:c0:24:95:a7:b8:23:43:4d:26: 51:78:92:e4:89:0b:7d:97:d4:4a:02:8a:11:d3:20: 3a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:93:FD:6A:61:ED:80:BC:07:BC:F0:28:BF:6E:61:DC:8C:D2:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/d0cac949-a7bd-3a89-a2da-03d2665e4c27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4140::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:4a:c8:69:6d:9d:b2:14:13:48:4f:cf:5f:c0:09:01:0a:af: 98:05:c5:23:a2:d5:42:25:d0:45:7f:d1:12:59:37:5b:6a:cb: c2:07:55:4b:48:69:5f:2a:95:08:b8:ed:df:5b:a8:34:2a:08: f2:e4:1c:0b:c3:cb:9c:a3:6c:86:75:85:02:f0:1a:ef:58:92: c4:b9:f4:ab:48:c2:a6:9d:41:fc:d6:1e:00:d4:e5:89:c5:5f: 80:6d:c0:88:07:a9:cb:f5:22:ae:c0:3d:91:f4:80:24:95:90: 0c:a0:6b:45:73:9a:13:e8:44:51:40:ac:0d:0f:c9:5e:5e:d2: 9c:06:d6:5c:0d:08:06:ee:cc:2c:6c:97:1d:61:59:d5:d2:f5: d8:82:97:f9:09:6a:89:8c:bb:4a:0e:de:91:f8:d6:03:48:19: 68:5f:83:d0:f8:3d:7a:63:f6:f0:64:bb:47:65:2b:79:c8:13: 3a:0a:16:ee:97:f4:38:37:01:07:67:66:81:d3:6c:61:30:94: 2e:72:3e:80:65:cd:f8:94:5d:b2:1e:2d:95:1c:61:4b:b5:97: 32:aa:aa:cb:ed:30:8c:06:ae:c7:c4:df:8c:b3:33:3d:21:41: 8e:d3:d6:13:c8:ab:ae:4b:7a:55:1e:65:60:b5:3a:85:59:e5: 67:56:0d:3a -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy9bZJ2RU8VAhfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDgxYmViMTctOWEwYS00ZGIzLWI1ZTEtMjk4NjAxNjgyZDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqlmsr+b0nCfriU1PTkEx6sEhKCntJjptN/1 gU5cOTsvrJusnoDB9YPRaPaRo2EoWpy8Af4TYXmpbKonS5rwnn1gSki4LfbTFEvx W9+zQat5Fk73f+VSz9aP9ysIP8tt99UgAuE/orse6q6skRfwTWu13vWtn4wUtu70 uoZEnl3CEGG32zzOED2aAtGiP5kHG83j4TAJSxdZgTRjBGl0JJU0hWznNvA/WTiU O6cdn4U2b+js28myZcfE85Fa/nqq7/MAPHRqHz+kjZC81wF/S8B/BFK8kVIbLutN ygWxipnqW0zyFUHAJJWnuCNDTSZReJLkiQt9l9RKAooR0yA6LwIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFPkuk/1qYe2AvAe88Ci/bmHcjNIEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZDBjYWM5NDktYTdiZC0z YTg5LWEyZGEtMDNkMjY2NWU0YzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEFA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAClKyGltnbIUE0hPz1/ACQEKr5gFxSOi1UIl0EV/0RJZN1tqy8IH VUtIaV8qlQi47d9bqDQqCPLkHAvDy5yjbIZ1hQLwGu9YksS59KtIwqadQfzWHgDU 5YnFX4BtwIgHqcv1Iq7APZH0gCSVkAyga0VzmhPoRFFArA0PyV5e0pwG1lwNCAbu zCxslx1hWdXS9diCl/kJaomMu0oO3pH41gNIGWhfg9D4PXpj9vBku0dlK3nIEzoK Fu6X9Dg3AQdnZoHTbGEwlC5yPoBlzfiUXbIeLZUcYUu1lzKqqsvtMIwGrsfE34yz Mz0hQY7T1hPIq65LelUeZWC1OoVZ5WdWDTo= -----END CERTIFICATE-----Generated at Sun Nov 15 13:02:56 2026 by rpki-client