$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df2e021c-bbbe-3de7-9733-73bef67f117d.roa File: df2e021c-bbbe-3de7-9733-73bef67f117d.roa (raw, json) Hash identifier: e1TacS9rqAZRkA+nj52fz3c2DOWza1KWqJYIobz3E8k= Subject key identifier: 36:64:33:00:54:0F:52:B5:E1:30:1A:1F:E0:94:20:2A:EB:0A:8A:22 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584DA11AD6BE21C2DA7EAADD0340 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df2e021c-bbbe-3de7-9733-73bef67f117d.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 54113 IP address blocks: 2607:8940:4a20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:d6:be:21:c2:da:7e:aa:dd:03:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=85285aad-8a64-4d3c-8f21-da65f0693541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:08:d2:ed:04:ca:e0:1d:f9:85:8d:d2:2c:45: 98:76:7a:98:73:99:b3:44:88:a8:52:0e:8e:f2:c0: a8:7a:08:25:60:e5:75:e9:ea:5d:e2:08:b6:35:09: de:67:e5:ea:c2:41:3d:f5:71:c2:df:9a:02:3e:2e: f2:08:ae:3a:80:93:2a:f2:37:21:c3:02:09:75:1d: be:23:5b:f8:71:db:cf:1a:a4:12:70:df:4b:7f:75: 3d:e7:4f:d1:9a:23:22:5d:76:77:0c:50:c7:c9:bd: f1:6d:9c:d2:15:d3:98:ec:bf:cd:4c:11:56:20:04: f1:7b:44:fd:bc:84:94:6d:78:72:d2:60:cb:69:e5: 34:b6:d5:8d:6f:6a:d7:05:7e:45:17:ef:ad:3c:ed: 3e:4d:1a:08:dc:fe:ae:c1:f9:7f:42:40:2f:88:6c: e0:21:ae:08:71:f6:51:b2:33:fa:f7:9b:12:c0:94: 9e:d8:2f:b8:40:0f:99:9e:0f:52:f0:61:17:f1:a9: 2b:a0:06:95:11:90:48:cc:bc:c7:ea:48:0e:5c:be: 90:2c:4e:88:20:2c:70:3b:5b:20:9d:68:2a:3f:f0: 2d:0d:f6:c3:74:c0:3f:ae:b1:76:3b:39:44:1e:19: 94:8e:f2:eb:aa:68:44:da:d4:94:ae:b9:44:b4:c3: 54:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:64:33:00:54:0F:52:B5:E1:30:1A:1F:E0:94:20:2A:EB:0A:8A:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/df2e021c-bbbe-3de7-9733-73bef67f117d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv6: 2607:8940:4a20::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:07:ed:75:fc:df:af:c2:e4:5b:c8:75:ee:1c:0f:ae:5c:12: 54:df:f4:63:30:cf:f8:b3:78:31:4e:b0:f7:cf:af:08:bf:d5: c2:3c:2e:a3:68:5f:f3:75:97:99:43:4c:ba:78:04:91:fb:90: 82:f4:da:ff:fc:5f:0d:6d:51:b1:4d:92:65:45:57:4a:97:6a: 66:e7:5f:5d:fd:73:5e:4a:c3:34:aa:7e:3f:06:d3:76:90:fd: 3f:bd:52:a0:56:db:00:99:72:fc:df:ed:93:0b:ac:19:16:d7: 89:66:44:61:66:33:30:30:0a:22:88:04:5f:88:96:8d:12:f5: f7:88:c5:f1:39:c7:d8:b7:83:ff:da:04:2e:cb:19:0e:82:02: 33:f2:3d:2b:29:b6:a1:05:70:df:6e:29:6f:16:38:26:5d:66: af:c6:70:c1:79:fa:1d:60:06:27:f9:51:53:55:3e:cd:f2:b1: 56:e3:fd:a7:98:1d:f7:17:0e:a8:f9:37:5e:6d:4d:0d:f5:b7: 30:9d:af:e1:e3:bc:63:7c:a6:72:ee:b1:f0:ef:e1:3f:b1:84: 26:d6:40:fd:13:c5:44:d0:90:f0:05:9e:65:2c:1d:0e:ec:a6: 80:bd:c6:16:1d:91:e7:c9:d7:9b:aa:ee:83:ff:b2:b5:d5:45: bb:e2:60:da -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2hGta+IcLafqrdA0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk ODUyODVhYWQtOGE2NC00ZDNjLThmMjEtZGE2NWYwNjkzNTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwjS7QTK4B35hY3SLEWYdnqYc5mzRIioUg6O 8sCoegglYOV16epd4gi2NQneZ+XqwkE99XHC35oCPi7yCK46gJMq8jchwwIJdR2+ I1v4cdvPGqQScN9Lf3U950/RmiMiXXZ3DFDHyb3xbZzSFdOY7L/NTBFWIATxe0T9 vISUbXhy0mDLaeU0ttWNb2rXBX5FF++tPO0+TRoI3P6uwfl/QkAviGzgIa4IcfZR sjP695sSwJSe2C+4QA+Zng9S8GEX8akroAaVEZBIzLzH6kgOXL6QLE6IICxwO1sg nWgqP/AtDfbDdMA/rrF2OzlEHhmUjvLrqmhE2tSUrrlEtMNUyQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFDZkMwBUD1K14TAaH+CUICrrCooiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvZGYyZTAyMWMtYmJiZS0z ZGU3LTk3MzMtNzNiZWY2N2YxMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgeJQEog MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAEsH7XX836/C5FvIde4cD65cElTf9GMwz/izeDFOsPfPrwi/1cI8 LqNoX/N1l5lDTLp4BJH7kIL02v/8Xw1tUbFNkmVFV0qXambnX139c15KwzSqfj8G 03aQ/T+9UqBW2wCZcvzf7ZMLrBkW14lmRGFmMzAwCiKIBF+Ilo0S9feIxfE5x9i3 g//aBC7LGQ6CAjPyPSsptqEFcN9uKW8WOCZdZq/GcMF5+h1gBif5UVNVPs3ysVbj /aeYHfcXDqj5N15tTQ31tzCdr+HjvGN8pnLusfDv4T+xhCbWQP0TxUTQkPAFnmUs HQ7spoC9xhYdkefJ15uq7oP/srXVRbviYNo= -----END CERTIFICATE-----Generated at Wed May 13 03:51:01 2026 by rpki-client