$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa File: df06a591-de7d-3d32-ac3a-c3ae36cab293.roa (raw, json) Hash identifier: 1fspkcgUM40pk1WMoghNHvb7V/AD/QKkAvYDoMNL9r4= Subject key identifier: 46:4A:19:73:8E:44:94:D1:B5:B4:29:02:C3:3E:59:B3:D0:B6:7B:1C Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584FC5CBDD6184064138D95A6D00 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa Signing time: Sun 08 Nov 2026 14:00:12 +0000 ROA not before: Sun 08 Nov 2026 14:00:12 +0000 ROA not after: Sat 06 Feb 2027 14:00:12 +0000 asID: 54113 IP address blocks: 2607:8940:41c0::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:c5:cb:dd:61:84:06:41:38:d9:5a:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Nov 8 14:00:12 2026 GMT Not After : Feb 6 14:00:12 2027 GMT Subject: CN=2052f064-1a34-43a3-8a6e-6119589fd6e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:48:c8:f7:92:9a:ba:05:61:d5:f6:5e:9e:47: cc:d9:47:be:d5:ee:7b:4e:e4:ae:d9:5b:67:88:a5: 3c:a9:f9:3b:4a:2f:94:f9:b2:80:2c:32:52:21:61: d0:e9:96:03:a5:e6:3b:61:6e:48:99:0b:e0:b4:76: fd:e5:bc:70:3e:8c:0e:b0:3b:94:43:a5:81:15:19: dc:45:7a:33:25:07:b4:df:26:21:b8:cd:71:15:b1: c5:4a:1b:1a:57:e4:ef:40:f7:74:3b:b4:33:74:42: 25:d6:10:65:2c:37:05:cd:b5:03:c0:38:8a:fd:9d: ca:20:20:24:f1:0d:e5:d2:67:03:7d:be:4b:9b:cf: 05:f0:21:db:f9:d8:a3:ec:86:b3:eb:8f:7c:2b:8e: 4a:ae:06:b4:22:bc:0e:80:59:f8:e1:6e:fb:7c:bf: b0:1e:90:a6:ab:fc:cf:65:ef:70:73:2c:34:f0:93: b9:75:6a:79:3a:3e:03:bf:e8:3c:ca:b4:82:2f:1c: 1b:84:c6:f1:9c:b2:98:e0:ca:55:af:fc:03:ac:63: 82:fa:5f:12:ab:f2:1a:f9:89:4c:b3:24:e3:f4:cf: 84:98:e5:b4:09:6b:75:6f:af:7a:f1:7e:ac:4b:ac: da:11:9a:29:f0:10:15:44:af:bc:79:90:80:6e:7d: f8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4A:19:73:8E:44:94:D1:B5:B4:29:02:C3:3E:59:B3:D0:B6:7B:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df06a591-de7d-3d32-ac3a-c3ae36cab293.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:41c0::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:59:f9:a9:0b:4f:6d:8b:a9:e6:0a:0d:40:21:48:e1:58:06: 5e:34:1e:2a:f3:89:95:a1:90:6c:ad:15:1d:d5:fb:1c:82:69: 22:e7:76:b4:49:75:84:67:a9:5d:3b:8c:82:75:db:a7:e5:f1: f9:15:d9:e4:71:8c:bf:e0:00:e7:4e:a2:36:43:e2:2f:de:c3: a6:f6:b1:6e:a8:96:c3:5f:d3:db:b1:81:e6:ca:fa:c7:21:c0: 1e:0e:05:a2:56:19:81:b2:11:db:cd:14:f8:9a:a0:8b:ca:cb: f0:7e:16:61:cd:af:ba:bd:b7:b6:10:89:18:da:c2:56:ee:0d: 33:32:e6:8b:db:cd:e1:76:7e:4a:e0:15:01:d6:36:75:0a:08: fd:fd:96:68:05:9c:94:9c:06:19:a6:56:73:27:db:ae:a7:87: e5:69:6d:81:0f:bf:0d:0c:e2:59:f9:6f:a0:64:0d:5b:16:f3: 39:22:d8:b3:f5:95:c6:10:e4:a0:ac:5b:e7:6a:12:52:3a:f6: 77:c2:6a:41:f3:0b:7d:49:8b:a3:71:08:80:40:68:90:63:53: b7:cf:47:26:a2:eb:54:09:1e:01:dc:49:a9:29:3f:13:e6:2a: 5c:1a:50:b5:88:93:d9:03:b4:7c:d9:2a:e8:37:d3:fb:e9:fc: a0:d2:7b:d6 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE/Fy91hhAZBONlabQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MTEwODE0MDAxMloXDTI3MDIwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjA1MmYwNjQtMWEzNC00M2EzLThhNmUtNjExOTU4OWZkNmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUjI95KaugVh1fZenkfM2Ue+1e57TuSu2Vtn iKU8qfk7Si+U+bKALDJSIWHQ6ZYDpeY7YW5ImQvgtHb95bxwPowOsDuUQ6WBFRnc RXozJQe03yYhuM1xFbHFShsaV+TvQPd0O7QzdEIl1hBlLDcFzbUDwDiK/Z3KICAk 8Q3l0mcDfb5Lm88F8CHb+dij7Iaz6498K45Krga0IrwOgFn44W77fL+wHpCmq/zP Ze9wcyw08JO5dWp5Oj4Dv+g8yrSCLxwbhMbxnLKY4MpVr/wDrGOC+l8Sq/Ia+YlM syTj9M+EmOW0CWt1b6968X6sS6zaEZop8BAVRK+8eZCAbn34zQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFEZKGXOORJTRtbQpAsM+WbPQtnscMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGYwNmE1OTEtZGU3ZC0z ZDMyLWFjM2EtYzNhZTM2Y2FiMjkzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEHA MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAGlZ+akLT22LqeYKDUAhSOFYBl40HirziZWhkGytFR3V+xyCaSLn drRJdYRnqV07jIJ126fl8fkV2eRxjL/gAOdOojZD4i/ew6b2sW6olsNf09uxgebK +schwB4OBaJWGYGyEdvNFPiaoIvKy/B+FmHNr7q9t7YQiRjawlbuDTMy5ovbzeF2 fkrgFQHWNnUKCP39lmgFnJScBhmmVnMn266nh+VpbYEPvw0M4ln5b6BkDVsW8zki 2LP1lcYQ5KCsW+dqElI69nfCakHzC31Ji6NxCIBAaJBjU7fPRyai61QJHgHcSakp PxPmKlwaULWIk9kDtHzZKug30/vp/KDSe9Y= -----END CERTIFICATE-----Generated at Sun Nov 15 21:18:43 2026 by rpki-client