$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa File: a4801da2-7172-31c2-8c21-34b2fb62f048.roa (raw, json) Hash identifier: 4US+bBAhXeUeyTcJKufhOYAGf3lqQQJXiVt9/+/2nVA= Subject key identifier: E4:C3:CB:07:66:F8:F4:27:41:39:0A:93:0E:7D:56:02:5E:F0:E0:C6 Certificate issuer: /CN=40b08720-f667-4e69-b15d-2bd25101fae8 Certificate serial: 010D0C9F4328584D8997C756D364CBAE97CFBA80 Authority key identifier: A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa Signing time: Fri 17 Apr 2026 14:53:08 +0000 ROA not before: Fri 17 Apr 2026 14:53:08 +0000 ROA not after: Thu 16 Jul 2026 14:52:26 +0000 asID: 400337 IP address blocks: 2607:9740::/32 maxlen: 33 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:89:97:c7:56:d3:64:cb:ae:97:cf:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40b08720-f667-4e69-b15d-2bd25101fae8 Validity Not Before: Apr 17 14:53:08 2026 GMT Not After : Jul 16 14:52:26 2026 GMT Subject: CN=c6bdd508-3d8b-4585-9b88-be5ff2c592c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:ab:10:d1:d7:a0:f0:05:9e:d9:47:fd:a1: 41:06:fe:a2:81:ba:69:81:b2:ef:6f:d0:9f:a5:e5: ca:e7:39:87:88:9c:29:c1:65:b9:e8:6a:80:f4:3c: a4:ec:8d:33:4f:f2:78:d5:9a:45:a6:6a:47:ba:6a: 2a:81:73:48:d3:71:f7:3a:46:23:be:77:e4:18:3d: 6d:5e:84:ec:d4:82:9a:38:d3:ba:df:48:17:c0:72: 22:ec:8c:02:e2:43:f0:39:e3:16:4d:6c:4a:88:e8: ef:5e:e1:e4:9b:3f:09:68:e3:b2:7b:83:02:53:03: bf:9a:f4:cc:59:53:d2:8a:83:27:26:49:b2:a4:e3: 10:25:e7:fa:65:33:7c:02:e4:cb:c1:15:64:19:ec: 30:b2:57:a2:69:71:c7:30:07:b4:c0:5c:ea:d3:48: 6e:7b:eb:d3:97:2d:e3:af:4b:74:1d:41:4d:7e:9d: 0e:b8:6a:1d:a1:fa:ab:6d:13:a2:97:0d:ab:dc:15: 0b:62:85:b2:11:f5:f8:e7:b1:da:da:26:20:0e:54: 4e:5f:16:13:da:26:35:45:c5:39:aa:46:b7:a5:f0: 9c:5d:c3:af:40:24:f4:3c:12:c5:75:99:f6:3b:97: 2b:ae:8f:c8:a6:70:cc:49:93:7b:2d:6f:14:0f:b3: b3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C3:CB:07:66:F8:F4:27:41:39:0A:93:0E:7D:56:02:5E:F0:E0:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/a4801da2-7172-31c2-8c21-34b2fb62f048.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8/40b08720-f667-4e69-b15d-2bd25101fae8.crl X509v3 Authority Key Identifier: keyid:A8:50:62:B3:48:AA:40:6E:55:77:28:7F:EE:9C:E9:B8:86:FE:B9:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/40b08720-f667-4e69-b15d-2bd25101fae8.cer sbgp-ipAddrBlock: critical IPv6: 2607:9740::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c6:4c:82:a7:e5:10:24:e5:52:09:a1:e6:55:5f:b5:c3:b4: eb:49:9c:78:ec:5b:a5:a4:c5:59:c3:bf:90:21:4d:f2:bd:94: 93:6a:42:4e:02:25:68:12:8f:41:fb:a2:2b:ec:cb:15:88:e9: f9:c9:ba:b7:1d:2a:b4:c2:ae:56:6c:b1:b3:8a:4d:0e:22:f1: df:39:de:3c:4b:21:79:38:32:89:45:44:69:a0:32:10:73:0e: b0:a2:7d:91:90:95:5e:1f:a4:ae:de:34:c6:25:a9:1e:83:ea: 07:18:8f:37:f9:aa:e2:d4:fc:a5:87:37:2d:8c:19:94:dd:3f: 82:8d:e2:ab:33:ad:cc:b5:ee:bc:95:69:0d:0b:4a:28:7a:9c: 68:50:d7:87:05:6a:aa:ec:34:81:73:f4:a8:c1:39:7a:42:b1: c7:d7:0e:c0:50:c3:b0:9c:55:69:59:63:55:09:20:42:6c:32: 46:c9:9a:4b:36:ae:37:a0:fa:01:60:19:bd:43:7a:28:f1:6d: e2:d9:2f:54:a2:80:2e:6b:03:c5:ab:fe:02:56:8d:07:27:3c: 4f:08:62:3b:b2:9d:23:2c:da:3d:99:d6:81:25:cc:3e:1a:17: d9:a0:58:0a:ef:fa:7c:32:9c:86:b2:78:07:2b:16:bb:ce:e5: af:a2:b0:3c -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2Jl8dW02TLrpfPuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDBiMDg3MjAtZjY2Ny00ZTY5LWIxNWQtMmJkMjUxMDFm YWU4MB4XDTI2MDQxNzE0NTMwOFoXDTI2MDcxNjE0NTIyNlowLzEtMCsGA1UEAxMk YzZiZGQ1MDgtM2Q4Yi00NTg1LTliODgtYmU1ZmYyYzU5MmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg76rENHXoPAFntlH/aFBBv6igbppgbLvb9Cf peXK5zmHiJwpwWW56GqA9Dyk7I0zT/J41ZpFpmpHumoqgXNI03H3OkYjvnfkGD1t XoTs1IKaONO630gXwHIi7IwC4kPwOeMWTWxKiOjvXuHkmz8JaOOye4MCUwO/mvTM WVPSioMnJkmypOMQJef6ZTN8AuTLwRVkGewwsleiaXHHMAe0wFzq00hue+vTly3j r0t0HUFNfp0OuGodofqrbROilw2r3BULYoWyEfX457Ha2iYgDlROXxYT2iY1RcU5 qka3pfCcXcOvQCT0PBLFdZn2O5crro/IpnDMSZN7LW8UD7OzzwIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFOTDywdm+PQnQTkKkw59VgJe8ODGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIw ODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQyNTEwMWZhZTgvYTQ4MDFkYTItNzE3Mi0z MWMyLThjMjEtMzRiMmZiNjJmMDQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDBiMDg3MjAtZjY2Ny00ZTY5LWIx NWQtMmJkMjUxMDFmYWU4LzQwYjA4NzIwLWY2NjctNGU2OS1iMTVkLTJiZDI1MTAx ZmFlOC5jcmwwHwYDVR0jBBgwFoAUqFBis0iqQG5Vdyh/7pzpuIb+uZUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80MGIwODcyMC1mNjY3LTRlNjktYjE1ZC0yYmQy NTEwMWZhZTguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgeXQDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQA0xkyCp+UQJOVSCaHmVV+1w7TrSZx47FulpMVZw7+QIU3yvZSTakJO AiVoEo9B+6Ir7MsViOn5ybq3HSq0wq5WbLGzik0OIvHfOd48SyF5ODKJRURpoDIQ cw6won2RkJVeH6Su3jTGJakeg+oHGI83+ari1PylhzctjBmU3T+CjeKrM63Mte68 lWkNC0ooepxoUNeHBWqq7DSBc/SowTl6QrHH1w7AUMOwnFVpWWNVCSBCbDJGyZpL Nq43oPoBYBm9Q3oo8W3i2S9UooAuawPFq/4CVo0HJzxPCGI7sp0jLNo9mdaBJcw+ GhfZoFgK7/p8MpyGsngHKxa7zuWvorA8 -----END CERTIFICATE-----Generated at Fri Apr 17 23:25:11 2026 by rpki-client